Draft Management Letter Points for Dulux Paints Canada (DPC)

Internal Control Weaknesses at DPC

1. Lack of Documented Policies and Procedures: The absence of documented policies and procedures across all DPC locations increases the risk of inconsistent practices and errors in store operations. Standardized and documented policies and procedures should be implemented to provide clear guidelines, enhance training, and ensure compliance.

2. Sharing IT Administrator Credentials: Sharing IT administrator credentials with store managers poses security risks and undermines accountability. DPC should establish a secure and centralized system for managing IT access to enhance data security.

3. Absence of a Formalized Refund or Exchange Policy: The lack of a formalized refund or exchange policy can result in inconsistent treatment of customer requests and potential revenue loss. A clear policy should be established to outline conditions and standardize the process.

4. Insufficient Control Over Customer Profile Information: Insufficient control over customer profile information raises privacy concerns and the risk of unauthorized disclosure. Access controls and guidelines should be implemented to protect customer data and obtain consent for promotional communications.