It is very unfortunate that Protiviti, who was one of the leaders and great contributors to the development of IIA guidance on IT General Controls and SOX, has gone so wrong in their Guide to the Sarbanes-Oxley Act: IT Risks and Controls (Second Edition). 

Bridging Effectiveness Gaps: A Candid Look at Board Practices is the title of a new study by the accounting and consulting firm McGladrey LLP on behalf of the National Association of Corporate Directors (NACD). The report focuses on the quality of information provided to and used by the board. 

The Aberdeen Group has a new research report out on Fighting Fraud with Big Data Visibility and Intelligence. The report includes a useful review of the risk and cost of fraud.

I recently wrote a post, Are you, your organization, and its leaders trusted? I discussed the need for trust if you are going to be successful, whether as an individual leader, an executive team, or an organization. 

Three firms have published guidance for audit committees: KPMG, Deloitte, and Protiviti. As far as I can tell, Ernst & Young and PwC have not published anything yet. Here are each of their suggestions, with my comments.

I truly believe that amazing developments are arriving that will make future decision-making far more effective. I want to talk about two in this post; admittedly one is more a hope and the other more a prediction.

Whether you are an IT auditor, manage the internal audit function, or concerned about IT-related risks, Protiviti’s latest IT audit survey (PDF) is worth reading. 

The traditional answer is an emphatic "Yes!" But times, they are a-changing.

If you did a search on this topic, you will find a variety of research reports. 

My good friend, Michael Rasmussen, and I have had a number of interesting conversations and debates over the last few years. Many have focused on what the term GRC means, with both of us ascribing to the OCEG definition as a capability that enables optimized performance through the management of risk while acting with integrity (my phrasing). Recently, Michael concluded a ‘rant’ (his word) about how the analysts view the so-called GRC market. I recommend it to you at http://www.grc2020.com/?p=1239.