Category: Editor’s Blog

Analysis and opinion items from Internal Audit 360’s editors and industry professionals

How Internal Audit at Telepass Devised Its Approach to Auditing Change Management

The recent evolution of the Three Lines model underscores the idea that internal audit must work to create and protect business value. This requires strategic thinking, especially in this rapidly changing business environment. Whilst change is a factor in every business, some organizations may be going through profound transformation, implying Read More

Assessing Internal audit culture

Looking in the Mirror: What About Internal Audit’s Own Culture?

It’s become common practice at many companies to conduct internal audits of the company’s culture. Auditors assess leadership, tone at the top, ethics, and the general emphasis on doing the right thing, among other aspects. Culture audits can be completed as part of a stand-alone assessment of the entire organization’s Read More

Characteristics of top internal auditors

The Characteristics of Highly Successful Internal Auditors

Internal auditors are a rare breed. To perform well in their jobs, they must have a set of skills and characteristics that are typically uncommon in one person. For example, they need to be analytical with laser-like focus, while also being “people-persons” with great communication skills. They need to be Read More

Are audit reports too long?

How Long Should an Audit Report Be?

Are most internal audit reports the right length? For many consumers of audit reports in the executive suite and boardroom, the answer is probably that they’re “too long!” Audit reports may run to extraordinary lengths these days. For example, I recently talked to one organization where they could easily extend Read More

Young people working in an office

Is Remote Work Shortchanging Our Younger Team Members?

One of the big outcomes of the last several months under the pandemic is that we have learned that work-from-anywhere models really do work. It’s always been a fallacy that workers are less productive from home—that they somehow are too sucked into watching The View, or too busy tending to Read More

Auditing access management

Some Thoughts on Auditing Identity and Access Management

GUEST BLOG POST The Institute of Internal Auditors regularly publishes useful Global Technology Audit Guides (GTAGs), available to members on their website under Standards and Guidance. They are considered recommended rather than mandatory guidance for internal auditors. As part of that effort, the IIA recently published a second edition of Read More