As internal audit teams work on their audit plan for 2019, a new report sheds light on where some of the trouble spots are likely to occur for companies, and where internal audit may want to consider focusing its scrutiny and assurance efforts. Last week, technology research firm Gartner issued Read More
The Securities and Exchange Commission has issued an investigative report urging public companies to consider cyber-threats when implementing internal accounting controls.
Despite record spending on cybersecurity, a new study finds that IT security breaches remain at epidemic levels. According to a new report conducted by Osterman Research, a whopping 70 percent of the more than 200 medium and large organizations surveyed reported being the victim of at least one successful cyber-attack Read More
A new survey of the top risks that most concern chief internal auditors finds that cybersecurity and data privacy are among the issues that still cause the most headaches for company officials. The research, conducted by the Chartered Institute of Internal Auditors and based on responses from more than 300 Read More
The Institute of Internal Auditors issued a new guide on insider threat programs that is designed help internal auditors understand insider threats and related risks by providing an overview of common traits of main players, key risks, and potential impacts. The guide also covers security frameworks, techniques, considerations, and resources Read More
The deadline is looming for banks and financial institutions that do business in New York to comply with new regulation that requires them to keep an audit trail of financial transactions for at least five years. Provisions of the Cybersecurity Regulation, which was passed in March 2017, will go into Read More
An angry Tesla employee tried to damage the company by inserting bad code into the electric car company’s manufacturing system and illegally exporting data to third parties. The case serves as a reminder to the damage that rogue employees can do and the need for internal controls to prevent such Read More
A new study from Deloitte indicates that it might be time to audit the crisis management plan. The study based on responses of 523 senior executives involved in risk, crisis management, and business continuity finds just 17 percent say their organizations have tested their crisis response plans. That’s way to Read More
A new survey finds that corporate boards are expected to ask IT, IT audit, and other functions responsible for securing the company’s data and systems for more information on the effectiveness of cybersecurity programs. The survey, by Deloitte, found that 62.7 percent of C-suite and other executives expect board directors’ Read More
Due to a bug discovered during an internal audit, social media company Twitter is recommending users change their passwords. An audit found that passwords were being stored in plaintext before an encryption process took place to secure the passwords on internal files. The company has fixed the bug, but is Read More
