90′s High 5 for Auditors
Richard Chambers, the president and CEO of the IIA, noted 5 defining events and their impact on internal auditing in the 90′s decade. Adoption of the Professional Practices Framework (2002) Financial...
View ArticleStandard (Snake) Oil
I’m getting discouraged. I’m starting to wonder how many audit departments follow auditing standards, say, from IIA or ISACA. After some of the IT audits and IT SOX audits I’ve seen in the past year,...
View ArticleTribute to Willy Wonka
Who thinks the IIA is stuffy? No one, if Mike Jacka has anything to say about it… A song to be sung to auditees… Oompa Loompa auditee doo I’ve got an audit puzzle for you Oompa Loompa auditee dee If …...
View ArticleMay = Audit Awareness Month
Did you know that it’s Internal Auditing Awareness Month? More importantly, do you care? If so, check out this IIA website for ideas, tools, and resources for promoting an internal audit group near...
View ArticleIIA Basics for Auditors
The Institute of Internal Auditors (IIA) has a back-to-basics page for new auditors (and like Dummies books, the topics can be a reference for the rest of us). Even security pros might want to read a...
View ArticleIIA and ISACA Synergies
Back in September, two audit groups shook hands… IIA and ISACA signed a formal memorandum of understanding (MOU), which means they’ll scratch each others’ back. The IIA’s president, Richard Chambers,...
View ArticleMay –> Audit Awareness Month
May is Audit Awareness Month, so if you want to host an event to promote audit at your organization, you’re short on time. I wrote about this last year, and all the links on that post are still good,...
View ArticleAudit and IT Audit for Dummies
Here’s some links for Audit and IT Audit for dummies, one from the IIA, the other from ISACA. Neither require being a member or logging in. While these articles are not extensive, they will point new...
View ArticleCISA vs. CIA Certification
If you’re an IT auditor (or want to be one) and don’t have any audit certifications, which certification should you get, the CISA or the CIA? If you want to get both, which one do you get first? Full...
View ArticleHow to be an Irritating Auditor
If you need to read about how to be an irritating auditor, you obviously haven’t been auditing very long. According to most auditees, that quality comes with the territory, right? I hope not! Anyway,...
View ArticleHiring Auditors Who Can Think
Norman Marks, of the Institute of Internal Auditors, likes to hire auditors who can think. You should too. How does he do it? First, he doesn’t look just at a person’s resume and years of experience...
View ArticleAuditors, Do Data Analytics or Die
If you’re an auditor, you need data analytic skills or you will die. Or put another way, if you don’t acquire them in the next 1-5 years, you will no longer be an auditor. Pretty bold statement, isn’t...
View ArticleNew IT Auditor (and WannaBEs) Master List
Here’s a list of all my posts to-date related to becoming or growing as an IT Auditor, all in one place for easy reference. I’ll add other posts as they are written. How to get an IT Audit job with …...
View ArticleIIA Analytics Article Dead Wrong
A recent IIA article on building an analytics function in internal audit is dead wrong. At least on one major point, anyway. And it’s a big one. As the tombstone reads, this point is D.O.A (dead on...
View ArticleResponse to ‘ChatGPT Analyzes Internal Audit!’
This post contains my response to my earlier post, ChatGPT Analyzes Internal Audit! First of all, most of the article sounded like it was written by external auditors; it sounds important, but really...
View ArticleAbandon ACL and Others, Part 2
This post is in response to Xavier and Grant, who were kind enough to push back a bit on a previous post, Abandon ACL and Others? See their comments on that post. I will respond to some of their points...
View Article
More Pages to Explore .....