Tag: internal audit

A list of top risks goes out of date in no time. Here's what the chief risk officer and the chief audit executive should do instead.

Cybersecurity risk assessment should be an integral part of the organization’s enterprise risk management program and decision-making, not a siloed operation.

Internal audit needs to be alert to poor performers, at any level. They also need to be alert to the failure to recognize and reward high performers.