Globally consistent and scalable policies and processes
The DTTL Policies Manual (DPM) is the central repository for policies applicable to the Deloitte network. It provides the basis for member firms to establish and implement consistent and rigorous quality and risk management processes and procedures, and sets forth policies for which member firm compliance is mandatory. These policies are applicable for all areas in a member firm’s professional and practice management functions and are critical to providing consistent high-quality service to clients and protecting and enhancing the reputation of Deloitte member firms. Among the many policies included in the DPM, there is a Framework policy whereby member firms are required to develop, implement, and document a Framework that is integrated into key member firm decision-making processes.
These policies are also designed to help member firms address unique considerations associated with the delivery of consistent, high-quality services, while also challenging professionals to do the right thing under any circumstance, even if that results in declining a prospective client, engagement, or terminating an existing client relationship.
The DPM includes a specific policy requirement for each member firm to appoint a senior and experienced “reputation and risk leader” (RRL) who is responsible for leading his or her member firm’s practice protection and risk management program, with full support from senior risk leaders in each of the member firm’s businesses. The RRLs are part of member firm leadership and responsible for developing and implementing robust, comprehensive, and strategic risk management programs, including appropriate policies and procedures to address specific quality-control considerations. They also must implement consistent monitoring procedures to ascertain compliance with DPM policies and procedures, and promote and facilitate risk management learning. DPM policies can be supplemented by member firm policies that take into consideration local market practices, local laws, and regulations within their jurisdictions.
Practice reviews serve as an inspection and monitoring mechanism and are a critical component of the Deloitte network’s system of quality control and risk management. Each member firm is responsible for conducting its own practice reviews under the guidance and oversight of DTTL. Held at least once every three years, these reviews assess whether member firms comply, at a minimum, with DPM policies and are operating effectively in practice. Practice reviews also assess the quality of work performed and services delivered by the member firms.
Findings and recommendations arising from the practice reviews are presented in a report and management letter to DTTL and the member firm’s leadership. In response to the report, the member firm is required, if needed, to establish a detailed and corrective action plan that addresses the findings and recommendations, together with a mechanism for monitoring the resolution of the findings. Implementation of the action plan is proactively monitored by the member firm and DTTL.
Practice review processes are continuously enhanced to raise the bar on quality and risk management, and to promote and achieve greater consistency in the delivery of high-quality services across the network.
“Deloitte”, “we”, “us”, and “our” refer to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee (“DTTL”), its network of member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as “Deloitte Global”) does not provide services to clients. See additional information.