Remove operational-risk-management
article thumbnail

Why So Many ERM Programs Miss the Operational Mark: Overcoming Operational Risk Management Obstacles

Audit Board

Modern ERM teams are tasked with identifying and reporting on the top risks that might prevent their organization from achieving its business objectives. Yet, there is growing evidence that these ERM programs are not doing enough to protect their businesses from operational risk events linked to their unique risk profiles.

article thumbnail

SAS 145 Blog—Identifying and evaluating general IT controls

ThomsonReuters

As we complete our examination of the impacts of SAS 145 for tax and accounting professionals, we’ll build on our previous posts on risk assessment , documentation and analysis , and balancing scope and complexity in auditing. In this last post, we’ll look at risks that can arise from the use of IT in accounting and auditing.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Why CAEs Must Choose Their Words Carefully to Preserve Independence

Internal Audit 360

GUEST BLOG POST I believe just about every internal audit executive would agree with me that our independence from management is critical. We need to be able to operate without undue interference from management. It also means that managers cannot stop us from performing an audit, and they cannot change its scope.

Banking 52
article thumbnail

Where Does Internal Audit Sit? It’s Important!

Internal Audit 360

GUEST BLOG POST T his may be an odd question to ask, but as a leader of internal audit and risk management it was an important issue for me: Where should internal audit sit in any given organization? Our ability to have confidential discussions among ourselves and with management – without being overheard.

52
article thumbnail

Understanding President Biden’s Executive Order on data protection

ThomsonReuters

This blog post aims to dissect the impact of this Executive Order and emphasize the critical nature of implementing and maintaining strong data protection strategies within the tax and accounting profession. The Executive Order will likely lead to new compliance requirements that must be integrated into daily operations.

article thumbnail

Internal Audit vs. Quality Control: What’s the Difference?

Internal Audit 360

GUEST BLOG A s a consultant, I review internal audit departments at multiple financial services organizations each year while conducting Quality Assurance Reviews. ” Internal audit involves evaluating and testing an organization’s financial, operational, and compliance risks and controls.

article thumbnail

When Enterprise Risk-Based Audit Plans Are Not Enough

Internal Audit 360

GUEST BLOG POST: I am a huge believer, as are most leading internal audit practitioners, in enterprise risk-based auditing. That means that the audit plan is designed to provide assurance, advice, and insight on the more significant sources of risk to the organization and the achievement of its objectives.

52