Tax risk map

Identifying tax risks

Reviewing every process with tax impact —invoicing, VAT, withholdings, transfer pricing— to identify risks.

Tax risk assessment

Evaluating the likelihood and impact of each risk, including exposure to penalties.

Prioritization and treatment

Deciding which risks need additional controls and which are already covered by existing controls.

What an auditor usually asks for

• A tax risk map by process
• A documented likelihood and impact assessment
• Risk prioritization with an explicit criterion
• Periodic map review after regulatory changes

How to cover the risk map in Kimobox

1. 1Log the tax risk map with its likelihood and impact in Kimobox.
2. 2Link each tax risk to the process that generates it.
3. 3Schedule map review whenever tax regulation changes.

Where each figure comes from

References to the official text in force. If a standard is revised, this page is updated and the review date says so.

1. UNE 19602:2019 standard UNE, Spanish Association for Standardisation · 2019 ed.
2. Organic Law 10/1995, Spanish Criminal Code, arts. 31 bis and 305 BOE-A-1995-25444 · Consolidated text
3. Ley 58/2003, General Tributaria BOE-A-2003-23186 · Consolidated text