The widespread use of information technology (IT) can introduce various risks that affect financial reporting and the audit process. To assist auditors in identifying and addressing these risks, the ...

The Committee of Sponsoring Organizations of the Treadway Commission released a new paper Wednesday on uniting COSO’s enterprise risk management framework with “agile” practices in internal auditing ...

The AICPA Auditing Standards Board’s (ASB’s) plans to finalize a new risk assessment standard at its August meeting should be welcome news for many practitioners. Risk assessment is a fundamental ...

The annual risk assessment is a is a collaborative undertaking by UW Internal Audit and UW Risk Management and serves as an important piece of the Enterprise Risk Management framework. It provides ...

The annual audit plan is typically out-of-date even before it is approved by the audit committee. It’s quite a few years since I first started talking about “auditing at the speed of risk” (since at ...

Can you assess risk management without considering related internal controls? I don’t think so. The relationship between risk (what might happen to affect the achievement of objectives) and internal ...

Audits are an essential, if tedious, part of a company’s risk management strategy. Before the advent of cloud computing, compliance and audit teams had manual procedures and checklists in place to ...

Forbes contributors publish independent expert analyses and insights. Robert Eccles writes about sustainability in the capital markets. This article is more than 3 years old. The internal audit (IA) ...

No matter what internal audit gets called to do, there will always be a cadre of misguided executives and board members who think internal audit is just an extension of the finance function.

Businesses are breathing a sigh of relief after President Ferdinand Marcos, Jr. ordered the BIR to redirect its audit and enforcement efforts toward those implicated in the multibillion-peso ...

Nobody really likes being audited, but it's an important function to ensure the practices and policies of a company and/or individual are above board. And, as with all jobs, someone's gotta do it.