Category: Editor’s Blog

Analysis and opinion items from Internal Audit 360’s editors and industry professionals

Characteristics of top internal auditors

The Characteristics of Highly Successful Internal Auditors

Internal auditors are a rare breed. To perform well in their jobs, they must have a set of skills and characteristics that are typically uncommon in one person. For example, they need to be analytical with laser-like focus, while also being “people-persons” with great communication skills. They need to be Read More

Are audit reports too long?

How Long Should an Audit Report Be?

Are most internal audit reports the right length? For many consumers of audit reports in the executive suite and boardroom, the answer is probably that they’re “too long!” Audit reports may run to extraordinary lengths these days. For example, I recently talked to one organization where they could easily extend Read More

Young people working in an office

Is Remote Work Shortchanging Our Younger Team Members?

One of the big outcomes of the last several months under the pandemic is that we have learned that work-from-anywhere models really do work. It’s always been a fallacy that workers are less productive from home—that they somehow are too sucked into watching The View, or too busy tending to Read More

Auditing access management

Some Thoughts on Auditing Identity and Access Management

GUEST BLOG POST The Institute of Internal Auditors regularly publishes useful Global Technology Audit Guides (GTAGs), available to members on their website under Standards and Guidance. They are considered recommended rather than mandatory guidance for internal auditors. As part of that effort, the IIA recently published a second edition of Read More

Auditing the Anti-bribery and Corruption Program

Last October, the Securities and Exchange Commission sent a clear message to companies with significant operations overseas: ensure that a robust anti-bribery program is in place and functioning properly or pay the price. The SEC sent that message via a $10 million fine against Sussex, Wisconsin-based printing and marketing company Read More

Is It Enough to Take a Risk-Based Approach to Internal Audit?

GUEST BLOG POST When I became a chief audit executive (CAE) for the first time in 1990, I determined that a risk-based internal audit approach was not sufficient. A risk-based approach focuses on how well management can handle a potentially bad event or situation. It assesses the design and operation Read More