Remove how-do-you-audit-risk-management
article thumbnail

How Do You Audit Risk Management?

Internal Audit 360

GUEST BLOG POST A s the saying goes, you can’t audit what you don’t understand. And for auditing complex risk management processes, that idea can hit home for many internal auditors. So, what does “effective” mean when it comes to auditing risk management? Certainly not.

105
105
article thumbnail

How do you audit risk management?

Norman Marks

You can’t audit what you don’t understand. That doesn’t mean you have to be an expert with years of experience as a risk practitioner. But you have to know enough about risk management to be able to assess whether it is effective. X What does “effective” mean?

49
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

How do you audit enterprise risk management?

Norman Marks

The IIA published a Practice Guide, Assessing the Risk Management Process, in 2019. What is mandatory in the IIA Standards is performing an assessment, and this Practice Guide (PG) is intended as helpful advice on how to do it. While the Standards say that you must perform an […].

52
article thumbnail

Why CAEs Must Choose Their Words Carefully to Preserve Independence

Internal Audit 360

GUEST BLOG POST I believe just about every internal audit executive would agree with me that our independence from management is critical. We need to be able to operate without undue interference from management. That means that they are not able to stop or change our audit reporting, our opinions, or our assessments.

Banking 52
article thumbnail

CAE Toolkit: Designing Effective Audit Committee Meetings

Audit Board

Chief audit executives are in a unique position. As the head of a critical independent oversight function of an organization, the CAE operates within the typical leadership structure of the organization, but reports directly to the audit committee. . Four Ways CAEs Can Promote a Risk-Based Audit Committee Meeting.

article thumbnail

Are Internal Auditors Missing the Boat on What’s Most Important?

Internal Audit 360

GUEST BLOG POST A s internal auditors, we provide assurance, advice, and insight on the system of internal controls over the more significant risks to enterprise objectives. Internal controls provide the basis, the foundation, on which management and the board rely as they manage and direct the organization to success.

article thumbnail

You Can’t Audit That!

Internal Audit 360

[dropcap]O[/dropcap]ver my long career, I have often heard, in one form or another, the phrase: “You just can’t audit that!”. The first time I heard it came when I was an internal audit manager for a financial institution. We might not have been experts in running HR, but we were experts in processes, risks, and controls.