There are some interesting discussions on LinkedIn (including this one and this one) and elsewhere about the value of internal audit and even calculating a return on investment in internal audit. 

 This is not an easy task. Why, because deficiencies in IT General Controls (ITGC) are not directly linked to the risk of a material error in the financial statements.

OK, I am more than a little biased. But the IIA’s GAIT Methodology has been not only proven in practice but widely acknowledged as a valuable way to identify the right key IT General Controls (ITGC) for an effective SOX program. As a practice guide, it is strongly recommended guidance by the IIA.

It is very unfortunate that Protiviti, who was one of the leaders and great contributors to the development of IIA guidance on IT General Controls and SOX, has gone so wrong in their Guide to the Sarbanes-Oxley Act: IT Risks and Controls (Second Edition). 

Bridging Effectiveness Gaps: A Candid Look at Board Practices is the title of a new study by the accounting and consulting firm McGladrey LLP on behalf of the National Association of Corporate Directors (NACD). The report focuses on the quality of information provided to and used by the board. 

The Aberdeen Group has a new research report out on Fighting Fraud with Big Data Visibility and Intelligence. The report includes a useful review of the risk and cost of fraud.

I recently wrote a post, Are you, your organization, and its leaders trusted? I discussed the need for trust if you are going to be successful, whether as an individual leader, an executive team, or an organization.