Articles
Tag: risk management
-
Risk Practitioners Should Be Asking 'How Can We Help?'
We may have a business card that says we are internal auditors. But we are part of the management team and our first duty is to help the organization succeed.
Continue reading...
-
Should You Boast About Internal Audit Value?
Value is what people would be willing to pay for, not what you say it is. The same applies to internal audit.
Continue reading...
-
Risk, Consequences and the Domino Effect
Risk management is not about managing the possibility of harmful events or situations. It’s about managing the likelihood and extent of success.
Continue reading...
-
Which Comes First, Risk or Control?
Can you assess risk management without considering related internal controls? I don’t think so.
Continue reading...
-
Why Does Internal Audit Need to Be Agile?
We need to be not only agile in our audit planning, but also provide the assurance and insight that is needed at speed.
Continue reading...
-
10 Years of Progress in the GRC World
Thankfully, most practitioners have moved on to focus on those elements of GRC that are meaningful to them rather than trying to implement software for “GRC.”
Continue reading...
-
Windows 7 End of Life: What Are Your Options?
As of Jan. 14, Microsoft will no longer offer security or support for the Windows 7 and Windows Server 2008/R2 operating systems.
Continue reading...
-
Fraud Is Bad Business: The Impact on Customer Experience
The cost of fraud is high for both consumers and businesses. Here are a few steps both sides can take to reduce the risk (hint: retire your 12345 password).
Continue reading...
-
How to Advance Your Enterprise Risk Management Maturity
To improve enterprise risk management maturity, you need to define your risk appetite, ensure the right people are taking responsibility, and measure progress.
Continue reading...
-
Did Risk Management Fail?
Risk management is not like looking into a crystal ball and predicting the future with certainty.
Continue reading...
-
Do Risk Appetite Statements Add Value?
I am not persuaded that risk appetite statements should be the core around which risk management practices and programs are built.
Continue reading...
-
Your Vendor's Weakest Link Is Your Biggest Nightmare
When it comes to digital risks, vulnerabilities are contagious.
Continue reading...
-
The Core Principles of Effective Internal Auditing
The Institute of Internal Auditors' new practice guide for internal auditing shares some good insights, but falls short in a few areas.
Continue reading...
-
How to Get Started Managing Risk in the Cloud
While it's impossible to completely eliminate risk, here are four actionable solutions for mitigating your organizational risk in the cloud.
Continue reading...
