Remove audit-risk
article thumbnail

How Do You Audit Risk Management?

Internal Audit 360

GUEST BLOG POST A s the saying goes, you can’t audit what you don’t understand. And for auditing complex risk management processes, that idea can hit home for many internal auditors. So, what does “effective” mean when it comes to auditing risk management? Certainly not.

105
105
article thumbnail

When Enterprise Risk-Based Audit Plans Are Not Enough

Internal Audit 360

GUEST BLOG POST: I am a huge believer, as are most leading internal audit practitioners, in enterprise risk-based auditing. That means that the audit plan is designed to provide assurance, advice, and insight on the more significant sources of risk to the organization and the achievement of its objectives.

52
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Bottoms-Up Audit Planning: Risk-Based Auditing From Planning to Scoping

Audit Board

Not all risk-based approaches are created equal: does your bottom-up planning start with risks in mind? The traditional audit planning process starts with understanding the risk profile of your audit universe, all auditable entities, then building a plan based on risk ratings for the predetermined entities.

article thumbnail

What Internal Audit Gets Wrong when Assessing Cybersecurity Risk

Internal Audit 360

GUEST BLOG: O ne of the challenges when it comes to so-called “cybersecurity risk” is in accepting and then applying the idea that cyber is not an “IT risk.” It’s a business risk. If we are to assess cyber-related business risk, we have to have the answer to that question. Advice for Auditors on Cyber-risk.

article thumbnail

Supply Chain Audit: Key Risks, Guidance, and Sample Questions

Audit Board

Supply chain disruption is one of the most visible risks impacting many organizations. Gartner’s 2022 Audit Plan Hot Spots report calls out the supply chain as a top 10 risk that should be on every auditor’s radar. Five Supply Chain Risks to Include in Your Assessment. Reputational Risk. Cybersecurity Risk.

article thumbnail

Why ESG Risks Pose a Challenge for Internal Audit

Audit Board

Within the intricate web of global supply chains, we encounter a multitude of risks - reputational, legal and compliance, environmental sustainability, and climate change - all deeply intertwined with business continuity, and all magnified by the pandemic and global conflicts. Download the free guide here.

article thumbnail

Introduction to Blockchain for Audit, Risk, and Compliance Professionals

Audit Board

Blockchain technology is transforming the world of audit, risk, and compliance. Decentralized, transparent, and secure, blockchain can enhance financial data’s accuracy and completeness, reduce fraud and error risk, and enable more efficient and effective audit processes — but it also introduces new risks.