The risk-based approach

When a warehouse has around 5,000 items, dozens of document types and several staff, it is impossible to check everything with the same depth. Try, and time runs out while the most important places get only a glance. The risk-based approach solves this: first we assess what could go wrong and how much damage it would cause, then we direct audit effort to where the danger is greatest.

The core principle: risk = likelihood × impact

Every risk has two parts: how often it might happen and how much harm it does when it does. A rare but very costly error (say, a room with valuable goods left unlocked) and a daily but cheap one (damaged packaging) both deserve attention, just not equally. The risk-based approach compares them, ranks them and tells the auditor where to look first.

An example. The first risk: small deliveries at receiving are left without a delivery note. It recurs every week, but each time the loss is under 1 million so'm. The second risk: the shelf with expensive electronics has no lock. It rarely happens, but a single incident could cost 200 million so'm. The first makes more "noise"; the second is more serious. Both show up in an audit, but the second gets attention first.

Where risk piles up in a warehouse

These signs point to higher exposure:

• small but valuable goods: phones and accessories, medicines, electronics, cosmetics;
• items whose balances are frequently corrected by hand;
• goods with a shelf life, or that quickly become obsolete;
• items with many returns or write-offs;
• zones where a new employee works or where access rights recently changed;
• stock picked for Uzum or Telegram-shop orders, where errors multiply fast;
• the receiving stage, because a mistake here carries into everything after it.

The item list itself gives a hint. In an ABC analysis, group "A" is usually 15–20 percent of items but 70–80 percent of value. Checking that group brings the greatest benefit.

A worked example

Suppose a warehouse has 2,400 items and about 1.2 billion so'm of stock, and 6 working days are set aside for the audit. Instead of examining everything to the same depth, the plan is built like this: group A (about 400 items) is counted in full; every third item is taken from group B; in group C only items with many stock corrections are checked. In the documents, stock adjustment entries and write-offs are reviewed in full, while ordinary receipts are sampled. The timeline does not stretch, yet the riskiest part is fully covered. The plan is not rigid: if few discrepancies turn up in group A, the sample from group B is reduced; if many, it is widened.

Four practical steps

1. List the risks: what could go wrong in receiving, storage, picking, returns, write-offs and the accounting system.
2. Rate each by likelihood and impact; a risk matrix helps here.
3. Choose the depth of checking: full count and review of all documents for high risk, a sample for medium, a brief look for low.
4. Revisit the plan as results come in: if a new problem appears, give that spot more attention.

Limits and mistakes

The approach rests on judgement, and judgement can be wrong. So discuss ratings not only with the warehouse manager but also with other process owners and finance staff, and use results from earlier years. Another danger is always aiming checks at the same items: staff soon notice such a pattern. Keep part of the sample random. Risks also change over time: before Navruz, Ramadan or big promotions the flow jumps sharply, and when a new supplier or a new accounting program appears, receiving and system errors increase. So refresh the assessment at least once a year.

Conclusion

Resources are always limited, so the question is not "do we check everything?" but "what do we check first?". OmborAudit starts its plan from exactly this kind of risk analysis.