The Future of the Internal Audit Profession

Posted on Jun 29, 2010

My good friend, Dan Swanson, asked me to write the introduction to his new book, Raising the Bar, with the topic being the future of the profession. Right after I sent it to him, I met with other practitioners and thought leaders in Australia, Atlanta (the IIA International Conference and committee meetings), and Malaysia.

continue reading...

What Were the Real Risk and Control Issues at Societe Generale?

Posted on Jun 22, 2010

An article in yesterday's Financial Times covering the trial of trader Jerome Kerviel includes some interesting nuggets.

continue reading...

The CAE's "Real Challenge" - Ethics, Courage, and Complacency

Posted on Jun 15, 2010

The other day, somebody replied to one of my blogs — and got my blood boiling! So, here is the rant for the week.

Essentially, what they said was while it was good in theory for the CAE to focus on providing assurance, in practice the CAE has to be very conscious of and responsive to management expectations. Management wants to see real value from internal audit, and therefore internal audit needs to demonstrate tangible savings in costs, and such. If internal audit is to get management support for its existence, a reasonable budget, etc., then focusing on providing assurance is not the answer.

continue reading...

Risk and Control Issues Commonly Overlooked by Internal Auditing 3: People

Posted on Jun 9, 2010

The root cause of almost every internal control issue is people. See this earlier discussion.

It could be that individuals charged with designing or performing the control lacked judgment, experience, training, or simply under-performed. It could also be that they had too great a workload and were therefore unable to perform at required levels, or had failed to perform their duties on a timely basis.

continue reading...