Articles
Tag: it grc
-
Cybersecurity Isn't an IT Risk, It's a Business Risk
Cybersecurity risk assessment should be an integral part of the organization’s enterprise risk management program and decision-making, not a siloed operation.
Continue reading...
-
The Greatest Risk and the Greatest Asset: People
Internal audit needs to be alert to poor performers, at any level. They also need to be alert to the failure to recognize and reward high performers.
Continue reading...
-
The Great Resignation Risk
Cybersecurity tops the list of greatest risks for many, but I argue a different source poses a bigger risk for our organizations: the Great Resignation.
Continue reading...
-
What Happens if We Ban Audit Reports?
While eliminating audit reports may be a step too far, thinking about their value and better ways to deliver that value can stimulate changes.
Continue reading...
-
Is This the Greatest Risk?
“Risk” is a four-letter word, so why not see if we can find ways to express ourselves without using it.
Continue reading...
-
Are Your Risk Appetite Statements Compliance Exercises?
If risk management is to be meaningful, it needs to deliver actionable information to help people make informed and intelligent decisions.
Continue reading...
-
SaaS Is in Style: Here’s How to Collaborate With Confidence
While industry data clearly demonstrates the preference for, and value of, SaaS applications, I believe we’ve only scratched the surface of what’s possible.
Continue reading...
-
Revisiting the Concept of Risk Appetite
Leaders of an organization should be managing the business, not a list of potential harms.
Continue reading...
-
Get Your Information Governance Act Together in 2022
Which would you rather be when new information challenges arise: proactive or reactive?
Continue reading...
-
Internal Audit: Getting From Recommendations to Actions
Management will take actions they believe are high priority and in their own interests. They won't if the only reason to act is “the auditor told us to do it."
Continue reading...
-
Key Security Challenges for Smart Offices and Their Solutions
The rapid development and deployment of workplace technologies, coupled with the adoption of new ways of working, comes with added risks.
Continue reading...
-
Remove the Restraints of the Audit Report Format
We are not limited to a rigorously enforced standard for communicating in person. Why should we be limited when we are writing?
Continue reading...
-
Enterprise Risk Management and the Internal Audit Plan
One of internal audit's values is to tell management when the controls to manage risks and assure opportunities aren't working.
Continue reading...
-
How Do We Fix Risk Management?
Instead of risk management, can we think of it as success management or effective management? Because that's what it is.
Continue reading...
