In his latest blog post, internal audit and risk expert, Norman Marks, writes about the need to perform an audit that assesses whether management has a system of internal control that provides reasonable assurance of compliance.
“There’s a lot of talk about auditing culture and other significant sources of risk,” he writes. “I am all for focusing our audit plan on the risks that matter to the enterprise as a whole. But, let’s not forget that we need to be providing assurance on whether management has the right controls to address those sources of risk and whether they are operating effectively.”
