Outrageous Compliance

Home Outrageous Compliance

Outrageous Compliance

Compliance Nigeria

OUTRAGEOUS COMPLIANCE; RCSA

 

Risk & Control Self-Assessments (RCSA) have become a handy tool to communicate to management, regulators and others that an organization has conducted an analysis of their risks to understand both the severity and likelihood of the occurrence of an event.  Each risk category is highlighted with its own color-coordinated assessment based on a “Table Top” exercise wherein subject matter experts participate in a facilitated session to list these risks and assign severity and probability based on nothing more than memory.

Of course, we all understand that RCSAs are objectively subjective. The “risk” in RCSA tend to sometimes give a false sense of security we place in believing these exercises are really a representation of entire and accurate risk exposures in an organization.  This is not totally correct and here is why.

Statistically speaking, risks tend to have a shape.  In some cases, the shape of risk is a normal curve.  In other cases, the shape may be skewed to the right or left.  But in an RCSA, the shape of risk is uniform.  Each risk is evaluated on a scale that looks exactly like this chart below which is a bit uniform.

Media
Intuitively, we understand that risks are not uniform, but we never question charts and graphs that look like this. Additionally, these charts lack the benefit of the law of large numbers. You might be surprised to learn that risk management is based on scientific laws of statistical analysis. The RCSA is flawed because it’s based on a small sampling of data (your memory) that is usually inherently biased by recent events that are easy to recall, not representative of frequencies found in a large stochastic database of risk events.  What does stochastic mean?  Stochastic is a process involving a randomly determined sequence of observations, each of which is considered as a sample of one element from a probability distribution. In other words, if you are not using a stochastic process for measuring risk, you are totally objective – may be a reliance on native intelligence kind of!

RCSAs have some value as a tool for understanding the risks subject matter experts deal with on a daily basis.  These tools are a great starting point, from which you should begin to develop a stochastic database of risk events — they should not be the conclusion.  This brings us to the last point about Outrageous Compliance: the risk repository.

A risk repository represents a third flaw in thinking about risks. Capturing risks in a risk repository is called a deterministic model.  A deterministic model is one in which every set of variable states is uniquely determined by parameters in the model and by sets of previous states of these variables; therefore, a deterministic model always performs the same way for a given set of initial conditions. Conversely, in a stochastic model—usually called a “statistical model”—randomness is present, and variable states are not described by unique values, but rather by probability distributions.

Why is this wrong? When developing deterministic models (risk repository), you predetermine the outcome. Lots of organizations make this mistake. The reality is that all not all models are wrong, neither are they all correct. Understanding how to develop useful risk assessment models takes time and patience, but knowing the difference means being able to avoid Outrageous Compliance.

 

Outrageous Compliance

The Tax Act 2025 provides a framework for the taxation of transactions involving virtual assets. As digital and blockchain-based assets continue to form part of modern economic activities, the Act recognises various transactions involving virtual assets as potentially taxable and establishes a basis for determining their value for tax purposes.

Taxable Virtual Asset Transactions

Under the provisions of the Tax Act 2025, taxable transactions involving virtual assets extend beyond the conventional sale of digital assets. The scope includes various activities through which individuals or businesses may derive income, profit, compensation, or other economic benefits.

Taxable virtual asset transactions include:
• The sale, exchange, or transfer of virtual assets, where a virtual asset is disposed of or exchanged for another asset or consideration.
• Mining or staking activities that generate income, recognising income derived from participation in blockchain networks or related activities.
• Airdrops, bounties, and rewards, including virtual assets received as compensation, incentives, or other forms of economic benefit.
• Other transactions or activities relating to virtual assets, where such activities generate income or otherwise fall within the scope of taxable transactions under the applicable provisions.

The broad definition of taxable transactions demonstrates the intention to ensure that income and economic benefits arising from different forms of virtual asset activities are appropriately considered for tax purposes.

Valuation of Virtual Assets

The Tax Act 2025 also establishes a basis for determining the value of virtual assets for tax purposes. The value of a virtual asset is to be determined based on the prevailing market price at the time the transaction takes place, using a recognised virtual asset exchange platform approved or recognised by the relevant tax authority.

This valuation approach provides a consistent basis for determining the monetary value attributable to virtual asset transactions. It is particularly important for calculating the appropriate tax liability arising from the sale, exchange, transfer, or receipt of virtual assets.

Conclusion

The provisions of the Tax Act 2025 on virtual assets represent an effort to bring emerging digital economic activities within the formal tax framework. By identifying a wide range of taxable virtual asset transactions and providing a method for their valuation, the Act seeks to promote tax compliance, transparency, and consistency in the treatment of income derived from virtual asset activities.

Overall, the provisions emphasise that economic benefits arising from virtual asset transactions—including sales, exchanges, transfers, mining, staking, airdrops, bounties, and rewards—may have tax implications. The valuation rules further provide a basis for determining the value of such assets at the time of the relevant transaction for tax assessment purposes.