Tag: internal audit
What to Do When the Board Demands a List of Top Risks
A list of top risks goes out of date in no time. Here's what the chief risk officer and the chief audit executive should do instead.
Cybersecurity Isn't an IT Risk, It's a Business Risk
Cybersecurity risk assessment should be an integral part of the organization’s enterprise risk management program and decision-making, not a siloed operation.
The Greatest Risk and the Greatest Asset: People
Internal audit needs to be alert to poor performers, at any level. They also need to be alert to the failure to recognize and reward high performers.