Remove enterprise-risk-management
article thumbnail

Enterprise Risk Management (ERM) Fundamentals

Audit Board

Enterprise risk management is a methodology of risk management, taking a top-down approach to the risk management process, and taking into account the organization and senior management’s business objectives and strategic objectives.

article thumbnail

Red flags of ineffective risk management

Norman Marks

I congratulate José David Pino for his brave attempt to call attention to ineffective risk management in his article for the IIA’s magazine, On the Frontlines: How Mature is Your Risk Management?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

How Do You Audit Risk Management?

Internal Audit 360

GUEST BLOG POST A s the saying goes, you can’t audit what you don’t understand. And for auditing complex risk management processes, that idea can hit home for many internal auditors. So, what does “effective” mean when it comes to auditing risk management? Certainly not. There are several good books on the topic.

105
105
article thumbnail

When Enterprise Risk-Based Audit Plans Are Not Enough

Internal Audit 360

GUEST BLOG POST: I am a huge believer, as are most leading internal audit practitioners, in enterprise risk-based auditing. That means that the audit plan is designed to provide assurance, advice, and insight on the more significant sources of risk to the organization and the achievement of its objectives.

52
article thumbnail

Are Internal Auditors Missing the Boat on What’s Most Important?

Internal Audit 360

GUEST BLOG POST A s internal auditors, we provide assurance, advice, and insight on the system of internal controls over the more significant risks to enterprise objectives. Internal controls provide the basis, the foundation, on which management and the board rely as they manage and direct the organization to success.

article thumbnail

Why CAEs Must Choose Their Words Carefully to Preserve Independence

Internal Audit 360

GUEST BLOG POST I believe just about every internal audit executive would agree with me that our independence from management is critical. We need to be able to operate without undue interference from management. It also means that managers cannot stop us from performing an audit, and they cannot change its scope.

Banking 52
article thumbnail

IT Risk Assessments: A Process Your CIO or CISO Will Thank You For

Audit Board

This article originally appeared on the ISACA Blog. Information technology (IT) risk assessments focus attention on critical information assets, highlight connections between cyber threats and risks, and map key controls to known threats. Integrate IT risk assessment with operational and enterprise risk assessment programs.