Tag: risk management

Three Lines of Defense Model

Should Internal Audit or Management Conduct Pre-Audits?

Internal audits are great at identifying problematic or even fraudulent transactions, whether in audits of payables to third parties, travel and expense audits, or other assessments. But when an internal audit uncovers improper transactions, it’s often too late. The funds have already been spent and reversing that process is never Read More

Google fined for GDPR

Google Hit with $57 Million Fine in First Big GDPR Case

French data protection regulator CNIL has imposed a €50 million ($57 million) fine on tech giant Google for failing to comply with the EU’s General Data Protection Regulation (GDPR). The EU privacy law, which took effect last May, is among the most strict set of data privacy regulations in the Read More

What Auditors Must Know About Zero Trust Networking

Among the many things that may keep internal auditors up at night are cybersecurity, compliance, and data security and protection, according to a recent survey by the Chartered Institute of Internal Auditors. These top three concerns significantly outrank other risk categories like human resources, regulatory change, and digitalization, although, of Read More

The top internal audit articles

Top Five Internal Audit Articles of 2018

The past year was a busy one for internal auditors. Most internal audit shops are still coming to grips with some big underlying shifts in internal audit. The biggest trend was the acceleration in the use of technology to fulfill internal audit’s objectives. The second theme of 2018 was finding Read More

looking to behavioral science for compliance answers

Does Your Internal Audit Team Need a Behavioral Scientist?

It’s no secret that companies have been adopting a more data-centric approach to managing risk and compliance and to improving internal audit. They are installing fancy software packages and hiring data analytics experts to help them sift through oceans of valuable data to look for patterns and outliers. But some Read More

Tech Risks Crowd Audit Plan ‘Hot Spots’ for 2019

As internal audit teams work on their audit plan for 2019, a new report sheds light on where some of the trouble spots are likely to occur for companies, and where internal audit may want to consider focusing its scrutiny and assurance efforts. Last week, technology research firm Gartner issued Read More

third-party risk increasing

Much-Needed Help with Auditing Third-Party Risk Emerges

The Institute of Internal Auditors has issued a new practice guide to help audit third-party risk management. This latest practice guide informs chief audit executives and their audit teams on how to understand and assess risks related to the use of third-party providers. Risks related to vendors, suppliers, resellers, and Read More

Brexit image

U.K. Audit Chiefs Say Many Firms Not Preparing for Brexit

A new survey of chief audit executives in the United Kingdom finds that more than one in three organizations has yet to do any Brexit scenario planning, despite the impending deadline for the U.K. to leave the EU. According to the Brexit Preparedness Survey, conducted by the Chartered Institute of Read More