The POP methodology
Potential — One-off and recurring savings — Perspective. Three questions that turn audit from a reporting obligation into a management instrument.
A classic audit answers the question: is this compliant with the procedure? An important question, but the one that changes least. Compliance can be achieved without improving anything of substance — it is enough to update the procedure to match reality.
POP organises the auditor’s work around the three questions a board actually needs answered. Every engagement ends with an assessment in three dimensions — and those three ratings, rather than a list of shortcomings, are the audit’s principal output.
POP does not replace the internal audit standards. Our work follows the International Standards for the Professional Practice of Internal Auditing. POP defines how we organise and communicate the results — so they reach a decision-maker rather than a binder.
P — Potential
What could the organisation achieve if what holds it back were removed?
Audit traditionally looks backwards — checking what went wrong. The Potential dimension reverses the view: we ask how much the organisation loses because a process works the way it does, when it could work differently.
This is not about utopian „improvements”. It is about specific, countable reserves that an auditor can see because they have access to data from across the whole organisation at once.
What we examine here
- Work performed repeatedly in different units on the same data
- Controls that catch nothing but consume time — and controls missing where the risk is real
- Decisions requiring multiple approvals at low value and a single approval at high value
- Data collected but never used for any decision
- Competencies present in the organisation but located outside the area that needs them
O — One-off and recurring savings
What is the current state costing — and how much of it can be recovered?
A finding without an amount is an opinion. A finding with an amount is a basis for a decision. So we quantify every material finding — stating the figure, how it was calculated, and how confident the estimate is.
We distinguish three kinds of financial effect, because they carry different weight for a board: amounts that can be recovered, costs that will stop recurring, and losses that will be avoided.
Three categories of effect
-
Recovery
Money already spent that can be reclaimed — overpaid invoices, liabilities settled twice, charges applied without basis, contractual penalties never enforced.
-
Reduction
Recurring costs that can be brought down — duplicated contracts and licences, sub-optimal purchasing terms, working time consumed by activities that add no value.
-
Loss avoidance
Events that have not yet happened but are highly likely — regulatory penalties, losses from fraud, the cost of a dispute arising from a defective contract.
A principle of prudence. We value conservatively and always state the calculation method. An audit that inflates its effects loses credibility at the first verification — and then even the accurate findings stop being heard.
P — Perspective
What does audit see that processes and operations cannot?
This is the dimension no IT system can supply. A process owner sees their own stretch and judges it by their own measures. Operations see the current day and put out whatever is burning. Controlling sees the numbers but not how they came about.
Audit is the only function that looks across the organisation and back in time simultaneously — which is why it catches patterns invisible from any single position.
What only this view reveals
- Gaps between processes — points where responsibility formally ends in one unit and begins in none
- Patterns over time — events that are unremarkable individually but form a scheme in sequence
- The gap between documentation and practice — the procedure describes one flow, the data shows another, and staff describe a third
- Concentration risk — a single supplier, person or system whose failure halts a disproportionate share of the business
- Fraud warning signs — anomalies visible only when data from several independent systems is combined
What a POP report looks like
A profile of three ratings
A score in each dimension with evidence-based justification. The spread between dimensions carries information in itself — an area with high potential and low perspective is usually where data, not willingness, is missing.
Financial summary
A table of findings with the amount, the category of effect and the calculation method. Totals split into recovery, reduction and loss avoidance — in a format that can be set against the budget.
Priority map
Recommendations ranked by effect against implementation effort, with a proposed deadline and an owner. We separate what can be done in a week from what needs a project.
Try POP on your own area
During a free consultation we will walk through the three POP questions for a process of your choice. That is usually enough to see where the largest reserve sits.
Arrange a call