60 acast.com Risk Insights Blogcast (Spoken blog articles) https://riskinsightsblogcast.substack.com/podcast en Risk Insights Pty. Ltd. Risk Insights Risk Insights blog articles converted to audio form Risk Insights blog articles converted to audio form


Hosted on Acast. See acast.com/privacy for more information.

]]> Risk Insights blog articles converted to audio form


Hosted on Acast. See acast.com/privacy for more information.

]]> false Yusuf Moolla info+6401d7fffe3f500011e9f815@mg-eu.acast.com 6401d7fffe3f500011e9f815 risk-insights-blogcast-spoken-blog-articles-1 https://api.substack.com/feed/podcast/1035351.rss episodic https://assets.pippa.io/shows/6401d7fffe3f500011e9f815/show-cover.jpg https://riskinsightsblogcast.substack.com/podcast Risk Insights Blogcast (Spoken blog articles) https://feeds.acast.com/public/shows/6401d7fffe3f500011e9f815 The Data-Confident Internal Auditor: Software The Data-Confident Internal Auditor: Software Wed, 19 Jan 2022 19:00:00 GMT 6:43 Buzzsprout-9920353 false https://riskinsightsblogcast.substack.com/p/the-data-confident-internal-auditor-8b7 6401d8064cfcac00119a9ddd 6401d7fffe3f500011e9f815 full This is an audio version of a blog article.

The original article was published here: https://riskinsights.com.au/blog/data-confident-internal-auditor-software

In this episode, we discuss software for using data in audit.

Links: 

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 

The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 


Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here: https://riskinsights.com.au/blog/data-confident-internal-auditor-software

In this episode, we discuss software for using data in audit.

Links: 

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 

The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 


Hosted on Acast. See acast.com/privacy for more information.

]]> Small datasets for audits: 5 ways to extract value Small datasets for audits: 5 ways to extract value Wed, 12 Jan 2022 19:00:00 GMT 12:20 Buzzsprout-9920004 false https://riskinsightsblogcast.substack.com/p/small-datasets-for-audits-5-ways-13f 6401d8064cfcac00119a9dde 6401d7fffe3f500011e9f815 full This is an audio version of a blog article.

The original article was published here: https://riskinsights.com.au/blog/small-data-5-ways-to-extract-value/ 

In this episode, we discuss the use of small datasets for audits, and 5 ways that auditors can extract value from smaller sets of data.

Links: 

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 

The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here: https://riskinsights.com.au/blog/small-data-5-ways-to-extract-value/ 

In this episode, we discuss the use of small datasets for audits, and 5 ways that auditors can extract value from smaller sets of data.

Links: 

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 

The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 

Hosted on Acast. See acast.com/privacy for more information.

]]> 4 ways to approach the use of data: internal audit and performance audit 4 ways to approach the use of data: internal audit and performance audit Tue, 25 Aug 2020 08:00:00 GMT 13:53 Buzzsprout-5139016 false https://riskinsightsblogcast.substack.com/p/4-ways-to-approach-the-use-of-data-2f6 6401d8064cfcac00119a9ddf 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog/4-audit-data-approaches

In this episode, we discuss four broad approaches to using data as part of audits.  These apply to both internal audit projects and performance audits.

Links: 


Note: The original article contains an image and a visual.
This audio version of the article includes a short explanation of each, but it would be easiest to see them in original form in the written version of the blog (link above).

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog/4-audit-data-approaches

In this episode, we discuss four broad approaches to using data as part of audits.  These apply to both internal audit projects and performance audits.

Links: 


Note: The original article contains an image and a visual.
This audio version of the article includes a short explanation of each, but it would be easiest to see them in original form in the written version of the blog (link above).

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Why you shouldn’t avoid efficiency audits, and how to tackle the objections Why you shouldn’t avoid efficiency audits, and how to tackle the objections Sun, 28 Jun 2020 23:00:00 GMT 12:50 Buzzsprout-4355006 false https://riskinsightsblogcast.substack.com/p/why-you-shouldnt-avoid-efficiency-aa1 6401d8064cfcac00119a9de0 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/efficiency-audits

In this episode, we discuss why auditors should include efficiency audits and how to tackle the common objections to conducting efficiency audits.

Note: The original article contains an Auditviz (a data visualization).  
This audio version of the article includes a short explanation of the graph, but it would be easiest to see the graph in its original form in the written version of the blog (link above).



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/efficiency-audits

In this episode, we discuss why auditors should include efficiency audits and how to tackle the common objections to conducting efficiency audits.

Note: The original article contains an Auditviz (a data visualization).  
This audio version of the article includes a short explanation of the graph, but it would be easiest to see the graph in its original form in the written version of the blog (link above).



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> A broader perspective on how auditors can use data for efficiency A broader perspective on how auditors can use data for efficiency Wed, 03 Jun 2020 12:00:00 GMT 12:42 Buzzsprout-4026323 false https://riskinsightsblogcast.substack.com/p/a-broader-perspective-on-how-auditors-5b8 6401d8064cfcac00119a9de1 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/data-for-efficiency-in-audit

In this episode, we discuss how auditors could use data to achieve four separate sets of efficiency outcomes.  For the audit team and for their organizations and stakeholders.

Note: This article contains an Auditviz (a data visualization). For this audio version of the article, we will provide a short explanation of the graph, but it would be easiest to see the graph in its original form in the written version of the blog (link above).

Other links mentioned in the article:

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/data-for-efficiency-in-audit

In this episode, we discuss how auditors could use data to achieve four separate sets of efficiency outcomes.  For the audit team and for their organizations and stakeholders.

Note: This article contains an Auditviz (a data visualization). For this audio version of the article, we will provide a short explanation of the graph, but it would be easiest to see the graph in its original form in the written version of the blog (link above).

Other links mentioned in the article:

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Crisis as an opportunity to reset strategic assurance priorities Crisis as an opportunity to reset strategic assurance priorities Fri, 17 Apr 2020 08:00:00 GMT 5:38 Buzzsprout-3393958 false https://riskinsightsblogcast.substack.com/p/crisis-as-an-opportunity-to-reset-c8d 6401d8064cfcac00119a9de2 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/crisis-as-an-opportunity-to-reset-strategic-assurance-priorities

In this episode, we discuss how crises present new challenges and opportunities for assurance leaders.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/crisis-as-an-opportunity-to-reset-strategic-assurance-priorities

In this episode, we discuss how crises present new challenges and opportunities for assurance leaders.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Principle 3: Maximizing benefits - data and analytics governance within Internal Audit Principle 3: Maximizing benefits - data and analytics governance within Internal Audit Thu, 26 Mar 2020 13:00:00 GMT 6:47 Buzzsprout-3130561 false https://riskinsightsblogcast.substack.com/p/principle-3-maximizing-benefits-data-90d 6401d8064cfcac00119a9de3 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-data-governance-5

In this episode, we discuss principle 3: Maximizing benefits - data and analytics within Internal Audit.

Links in the article:

1.   Why you need to govern the use of data, within the I.A. team, in a different way.

2.   Why we must share data, that is collected or used for audits, with the whole audit team.

3.   Principle 1: Security and open access.

4.   Principle 2: Quality.

5.   5 core assurance analytics challenges

6.   "false positives" approach in this article.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-data-governance-5

In this episode, we discuss principle 3: Maximizing benefits - data and analytics within Internal Audit.

Links in the article:

1.   Why you need to govern the use of data, within the I.A. team, in a different way.

2.   Why we must share data, that is collected or used for audits, with the whole audit team.

3.   Principle 1: Security and open access.

4.   Principle 2: Quality.

5.   5 core assurance analytics challenges

6.   "false positives" approach in this article.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Principle 2 – Quality - for data and analytics governance within the IA function (DGIA#4) Principle 2 – Quality - for data and analytics governance within the IA function (DGIA#4) Mon, 02 Mar 2020 03:00:00 GMT 6:31 Buzzsprout-2888530 false https://riskinsightsblogcast.substack.com/p/principle-2-quality-for-data-and-f69 6401d8064cfcac00119a9de4 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-data-governance-4

In this episode, we discuss principle #2 – Quality - for data and analytics governance within the Internal Audit function.

Links in the article:

1.    Why the use of data within the IA team (e.g., for audits) should be specifically, and differently, governed. 

2.    A point of view about keeping access to data - that is collected or used by the audit team - open to the whole audit team, where appropriate.

3.    The 3 key principles and principle 1 in detail.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-data-governance-4

In this episode, we discuss principle #2 – Quality - for data and analytics governance within the Internal Audit function.

Links in the article:

1.    Why the use of data within the IA team (e.g., for audits) should be specifically, and differently, governed. 

2.    A point of view about keeping access to data - that is collected or used by the audit team - open to the whole audit team, where appropriate.

3.    The 3 key principles and principle 1 in detail.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> 3 key principles for data and analytics governance within IA (DGIA #3) 3 key principles for data and analytics governance within IA (DGIA #3) Sun, 16 Feb 2020 18:00:00 GMT 7:00 Buzzsprout-2733916 false https://riskinsightsblogcast.substack.com/p/3-key-principles-for-data-and-analytics-1ce 6401d8064cfcac00119a9de5 6401d7fffe3f500011e9f815 3 key principles for Data and analytics Governance within Internal Audit (DGIA).
A core set of guidelines that we, as internal audit professionals, can check ourselves against in planning for and using data and analytics.

This is an audio version of this blog article - the 3rd in the DGIA (Data and analytics Governance within Internal Audit) series.

LINKS

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> 3 key principles for Data and analytics Governance within Internal Audit (DGIA).
A core set of guidelines that we, as internal audit professionals, can check ourselves against in planning for and using data and analytics.

This is an audio version of this blog article - the 3rd in the DGIA (Data and analytics Governance within Internal Audit) series.

LINKS

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Are you augmenting your team (value, satisfaction) or just automating your processes (cost) Are you augmenting your team (value, satisfaction) or just automating your processes (cost) Wed, 05 Feb 2020 19:00:00 GMT 4:36 Buzzsprout-2631166 false https://riskinsightsblogcast.substack.com/p/are-you-augmenting-your-team-value-717 6401d8064cfcac00119a9de6 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/augment-team-vs-automate-process

In this episode, we explore what internal auditors need to consider when automating for audit purposes and when involved in audit activities related to the business adoption of automation.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/augment-team-vs-automate-process

In this episode, we explore what internal auditors need to consider when automating for audit purposes and when involved in audit activities related to the business adoption of automation.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Why performance audits (and performance focused internal audits) are critical to creating and sustaining Public Value Why performance audits (and performance focused internal audits) are critical to creating and sustaining Public Value Tue, 04 Feb 2020 19:00:00 GMT 6:02 Buzzsprout-2636044 false https://riskinsightsblogcast.substack.com/p/why-performance-audits-and-performance-d62 6401d8064cfcac00119a9de7 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/performance-audits-creating-sustaining-public-value

In this episode, we explore the role that performance auditors and internal auditors play in sustaining public value.

This article is for:                             

  • Performance Auditors, to help explore their critical role in sustaining Public Value.
  • Internal Auditors, in conducting performance audits (i.e., assessing economy and efficiency within their organisations).

Links and resources mentioned in the article:

  • Creating Public Value: Strategic Management in Government, Mark Moore, 1995, Harvard University Press
  • Use of community voting on projects - Victoria’s Pick my Project
  • Public involvement in program design - Auckland’s Co-design lab
  • Ongoing refinement of proposed new public services - the UK’s Policy Lab


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/performance-audits-creating-sustaining-public-value

In this episode, we explore the role that performance auditors and internal auditors play in sustaining public value.

This article is for:                             

  • Performance Auditors, to help explore their critical role in sustaining Public Value.
  • Internal Auditors, in conducting performance audits (i.e., assessing economy and efficiency within their organisations).

Links and resources mentioned in the article:

  • Creating Public Value: Strategic Management in Government, Mark Moore, 1995, Harvard University Press
  • Use of community voting on projects - Victoria’s Pick my Project
  • Public involvement in program design - Auckland’s Co-design lab
  • Ongoing refinement of proposed new public services - the UK’s Policy Lab


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Data warehouse (DW) projects - as an auditor, have you been asked to get involved in a big bang DW project? Data warehouse (DW) projects - as an auditor, have you been asked to get involved in a big bang DW project? Mon, 03 Feb 2020 19:00:00 GMT 3:41 Buzzsprout-2624968 false https://riskinsightsblogcast.substack.com/p/data-warehouse-dw-projects-as-an-743 6401d8064cfcac00119a9de8 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/big-bang-data-warehouse-projects


In this episode, we explore what internal auditors need to consider regarding big bang data warehouse projects.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/big-bang-data-warehouse-projects


In this episode, we explore what internal auditors need to consider regarding big bang data warehouse projects.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Controlling access to data within the audit team – open or closed? (DGIA #2) Controlling access to data within the audit team – open or closed? (DGIA #2) Mon, 03 Feb 2020 05:00:00 GMT 6:43 Buzzsprout-2643160 false https://riskinsightsblogcast.substack.com/p/controlling-access-to-data-within-90c 6401d8064cfcac00119a9de9 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-data-governance-2

In this episode, we discuss control over access to data within the audit team – that is, should you open data access up to the whole audit team or restrict access based on need.

This is the 2nd article in the DGIA (Data and analytics Governance within Internal Audit) series.

Link in the article: “More access to data to reduce risk and enhance business decisions”



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-data-governance-2

In this episode, we discuss control over access to data within the audit team – that is, should you open data access up to the whole audit team or restrict access based on need.

This is the 2nd article in the DGIA (Data and analytics Governance within Internal Audit) series.

Link in the article: “More access to data to reduce risk and enhance business decisions”



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Corruption agencies and Investigators can cost-effectively use data to generate deep insights Corruption agencies and Investigators can cost-effectively use data to generate deep insights Thu, 30 Jan 2020 19:00:00 GMT 3:47 Buzzsprout-2583994 false https://riskinsightsblogcast.substack.com/p/corruption-agencies-and-investigators-d87 6401d8064cfcac00119a9dea 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/investigators-and-corruption-agencies-can-cost-effectively-generate-deep-insights-from-data

In this episode, we explore how corruption agencies and Investigators can cost-effectively use data to generate deep insights.

Links mentioned in the article:



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/investigators-and-corruption-agencies-can-cost-effectively-generate-deep-insights-from-data

In this episode, we explore how corruption agencies and Investigators can cost-effectively use data to generate deep insights.

Links mentioned in the article:



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Five common organisational factors that lead to successful performance of integrity and oversight agencies Five common organisational factors that lead to successful performance of integrity and oversight agencies Wed, 29 Jan 2020 19:00:00 GMT 3:34 Buzzsprout-2578159 false https://riskinsightsblogcast.substack.com/p/five-common-organisational-factors-ffa 6401d8064cfcac00119a9deb 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/integrity-and-oversight-agencies-dna

In this episode, we outline five common organisational factors that lead to successful performance of integrity and oversight agencies.

Mentioned in this article:



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/integrity-and-oversight-agencies-dna

In this episode, we outline five common organisational factors that lead to successful performance of integrity and oversight agencies.

Mentioned in this article:



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Key organisational characteristics in determining overall fraud risk profiles (the fraud merry-go-round: can you stay off?) Key organisational characteristics in determining overall fraud risk profiles (the fraud merry-go-round: can you stay off?) Tue, 28 Jan 2020 19:00:00 GMT 2:36 Buzzsprout-2576806 false https://riskinsightsblogcast.substack.com/p/key-organisational-characteristics-a5e 6401d8064cfcac00119a9dec 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/the-fraud-merry-go-round

In this episode, we briefly outline key organisational characteristics in determining overall fraud risk profiles.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/the-fraud-merry-go-round

In this episode, we briefly outline key organisational characteristics in determining overall fraud risk profiles.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Agility in Internal Auditing - Part 2 (of 2) Agility in Internal Auditing - Part 2 (of 2) Mon, 27 Jan 2020 19:00:00 GMT 4:12 Buzzsprout-2578840 false https://riskinsightsblogcast.substack.com/p/agility-in-internal-auditing-part-a12 6401d8064cfcac00119a9ded 6401d7fffe3f500011e9f815  
The original article was published here:
https://www.riskinsights.com.au/blog-1/agile-internal-audit-part2
 
In this episode, we explore how internal audit can operate in tandem with other business units. That is, adopting similar project delivery approaches to deliver audits that are focused on outcomes for the customer, increasing value.  This is part two of a two-part episode.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>  
The original article was published here:
https://www.riskinsights.com.au/blog-1/agile-internal-audit-part2
 
In this episode, we explore how internal audit can operate in tandem with other business units. That is, adopting similar project delivery approaches to deliver audits that are focused on outcomes for the customer, increasing value.  This is part two of a two-part episode.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Agility in Internal Auditing - Part 1 (of 2) Agility in Internal Auditing - Part 1 (of 2) Sun, 26 Jan 2020 19:00:00 GMT 4:34 Buzzsprout-2578762 false https://riskinsightsblogcast.substack.com/p/agility-in-internal-auditing-part-600 6401d8064cfcac00119a9dee 6401d7fffe3f500011e9f815  
The original article was published here:
https://www.riskinsights.com.au/blog-1/agile-internal-audit-part1
 
In this episode, we explore how internal audit can operate in tandem with other business units. That is, adopting similar project delivery approaches to deliver audits that are focused on outcomes for the customer, increasing value.  

This is part one of a two-part episode.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>  
The original article was published here:
https://www.riskinsights.com.au/blog-1/agile-internal-audit-part1
 
In this episode, we explore how internal audit can operate in tandem with other business units. That is, adopting similar project delivery approaches to deliver audits that are focused on outcomes for the customer, increasing value.  

This is part one of a two-part episode.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> <![CDATA[Repeatable analytics (a.k.a. continuous controls monitoring) - is it internal audit's job?]]> Thu, 23 Jan 2020 20:00:00 GMT 2:53 Buzzsprout-2566213 false https://riskinsightsblogcast.substack.com/p/repeatable-analytics-aka-continuous-948 6401d8064cfcac00119a9def 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/ccm-internal-audit-3lod

In this episode, we consider whether audit functions should be responsible for continuous controls monitoring.

Links mentioned in the article:



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/ccm-internal-audit-3lod

In this episode, we consider whether audit functions should be responsible for continuous controls monitoring.

Links mentioned in the article:



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Assurance analytics goes beyond basic rules-based analysis (i.e. beyond simple CAATs) Assurance analytics goes beyond basic rules-based analysis (i.e. beyond simple CAATs) Tue, 21 Jan 2020 07:00:00 GMT 3:09 Buzzsprout-2565637 false https://riskinsightsblogcast.substack.com/p/assurance-analytics-goes-beyond-basic-de5 6401d8064cfcac00119a9df0 6401d7fffe3f500011e9f815 This is an audio version of a blog article.
 
The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-analytics-beyond-basic-rules
 
In this episode, we briefly discuss how assurance analytics goes beyond basic rules.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.
 
The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-analytics-beyond-basic-rules
 
In this episode, we briefly discuss how assurance analytics goes beyond basic rules.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Going beyond the initial remedial action Going beyond the initial remedial action Fri, 17 Jan 2020 02:00:00 GMT 4:51 Buzzsprout-2488723 false https://riskinsightsblogcast.substack.com/p/going-beyond-the-initial-remedial-8d2 6401d8064cfcac00119a9df1 6401d7fffe3f500011e9f815  
 The original article was published here:
 https://www.riskinsights.com.au/blog-1/going-beyond-the-initial-remedial-action
 
In this episode, we explore a common flaw in designing audit remediation actions.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>  
 The original article was published here:
 https://www.riskinsights.com.au/blog-1/going-beyond-the-initial-remedial-action
 
In this episode, we explore a common flaw in designing audit remediation actions.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> <![CDATA[Is risk management creating more risk in how you manage & use data?]]> Thu, 16 Jan 2020 02:00:00 GMT 6:17 Buzzsprout-2488695 false https://riskinsightsblogcast.substack.com/p/is-risk-management-creating-more-95a 6401d8064cfcac00119a9df2 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/risk-management-creating-risk

In this episode, we explore how poor risk management can result in more risk than it attempts to reduce.

Links mentioned in this episode:

  1. The article in which we spoke about a PIA that did not consider all the risks and created a false sense of security
  2. The article in which we outlined how a flaw in risk-thinking can increase risk by reducing efficiency and effectiveness
  3. The article in which we looked at how to use the results of audits to reduce risk, rather than just ticking a box.


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/risk-management-creating-risk

In this episode, we explore how poor risk management can result in more risk than it attempts to reduce.

Links mentioned in this episode:

  1. The article in which we spoke about a PIA that did not consider all the risks and created a false sense of security
  2. The article in which we outlined how a flaw in risk-thinking can increase risk by reducing efficiency and effectiveness
  3. The article in which we looked at how to use the results of audits to reduce risk, rather than just ticking a box.


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Protect against inadvertent privacy breaches Protect against inadvertent privacy breaches Wed, 15 Jan 2020 02:00:00 GMT 5:37 Buzzsprout-2488405 false https://riskinsightsblogcast.substack.com/p/protect-against-inadvertent-privacy-827 6401d8064cfcac00119a9df3 6401d7fffe3f500011e9f815 This is an audio version of a blog article.
 
The original article was published here:
https://www.riskinsights.com.au/blog-1/inadvertent-privacy-breaches
 
In this episode, we explore inadvertent privacy breaches.

 

Links mentioned in the article:

  1. The travel card data privacy breach was reported on in this article in August 2019
  2. The article in Science Daily  that says "Re-identifying anonymised data is how journalists exposed Donald Trump's 1985-94 tax returns in May 2019"
  3. The article in The Guardian that says "anonymising data is practically impossible for any complex dataset"
  4. OVIC wrote about the investigation in this blog article
  5. Other false senses of security created by risk management in this separate blog article
  6. The De-Identification Decision-Making Framework 
  7. The Microsoft Guide to Data Governance for Privacy, Confidentiality, and Compliance
  8. Uber: open source project for differential privacy
  9. Google: open source version of their differential privacy library


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.
 
The original article was published here:
https://www.riskinsights.com.au/blog-1/inadvertent-privacy-breaches
 
In this episode, we explore inadvertent privacy breaches.

 

Links mentioned in the article:

  1. The travel card data privacy breach was reported on in this article in August 2019
  2. The article in Science Daily  that says "Re-identifying anonymised data is how journalists exposed Donald Trump's 1985-94 tax returns in May 2019"
  3. The article in The Guardian that says "anonymising data is practically impossible for any complex dataset"
  4. OVIC wrote about the investigation in this blog article
  5. Other false senses of security created by risk management in this separate blog article
  6. The De-Identification Decision-Making Framework 
  7. The Microsoft Guide to Data Governance for Privacy, Confidentiality, and Compliance
  8. Uber: open source project for differential privacy
  9. Google: open source version of their differential privacy library


This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Emerging Risks - Artificial Intelligence Emerging Risks - Artificial Intelligence Tue, 14 Jan 2020 11:00:00 GMT 4:37 Buzzsprout-2444831 false https://riskinsightsblogcast.substack.com/p/emerging-risks-artificial-intelligence-cea 6401d8064cfcac00119a9df4 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/emerging-risks-artificial-intelligence

In this episode, we explore artificial intelligence, and how to manage the risks associated with AI opportunities.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/emerging-risks-artificial-intelligence

In this episode, we explore artificial intelligence, and how to manage the risks associated with AI opportunities.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Do you focus on your customer when thinking about risks? Do you focus on your customer when thinking about risks? Sun, 12 Jan 2020 22:00:00 GMT 2:54 Buzzsprout-2444807 false https://riskinsightsblogcast.substack.com/p/do-you-focus-on-your-customer-when-811 6401d8064cfcac00119a9df5 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/post/outside_in_risk_management_part1

In this episode, we explore customer focus as it applies to risk management.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/post/outside_in_risk_management_part1

In this episode, we explore customer focus as it applies to risk management.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> <![CDATA[3 open source myths that might be inhibiting your team's progress]]> Fri, 10 Jan 2020 04:00:00 GMT 3:05 Buzzsprout-2444786 false https://riskinsightsblogcast.substack.com/p/3-open-source-myths-that-might-be-be8 6401d8064cfcac00119a9df6 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/post/3-open-source-myths-that-might-be-inhibiting-your-team-s-progress

In this episode, we explore 3 open source myths that might be inhibiting your team's progress.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/post/3-open-source-myths-that-might-be-inhibiting-your-team-s-progress

In this episode, we explore 3 open source myths that might be inhibiting your team's progress.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> 3rd party risk management - do you consider customer experience? 3rd party risk management - do you consider customer experience? Thu, 09 Jan 2020 05:00:00 GMT 2:37 Buzzsprout-2444735 false https://riskinsightsblogcast.substack.com/p/3rd-party-risk-management-do-you-351 6401d8064cfcac00119a9df7 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/post/3rd-party-risk-management-do-you-consider-customer-experience

In this article, we explore the need to consider customer experience in managing third party risks. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/post/3rd-party-risk-management-do-you-consider-customer-experience

In this article, we explore the need to consider customer experience in managing third party risks. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> How to reduce noise and minimise false positives when conducting assurance analytics (internal audit, performance audit) How to reduce noise and minimise false positives when conducting assurance analytics (internal audit, performance audit) Mon, 06 Jan 2020 04:00:00 GMT 8:11 Buzzsprout-2417120 false https://riskinsightsblogcast.substack.com/p/how-to-reduce-noise-and-minimise-c99 6401d8064cfcac00119a9df8 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-analytics-reducing-noise-false-positives

In this article, we explore an alternate approach to dealing with false positives that result from internal audit analytics. 

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-analytics-reducing-noise-false-positives

In this article, we explore an alternate approach to dealing with false positives that result from internal audit analytics. 

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Can you survive the damage caused by a spreadsheet model error? Can you survive the damage caused by a spreadsheet model error? Fri, 03 Jan 2020 09:00:00 GMT 2:48 Buzzsprout-2399354 false https://riskinsightsblogcast.substack.com/p/can-you-survive-the-damage-caused-194 6401d8064cfcac00119a9df9 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/survive-the-damage-caused-by-a-spreadsheet-model-error

In this episode, we explore three ways to reduce the risk of spreadsheet error.

Spreadsheets are often used for modelling and analysis, largely because they are easy to use and highly flexible. This has been the case for decades.

But what happens when a simple error like cutting-and-pasting the wrong formula, or omitting data in a calculation, ends up costing you thousands or even millions of dollars?

To build for sustainability and to reduce the number of inadvertent human errors, especially for large and complex models, you can reduce the risk of error.

But how do you do that?

Review

A minimum of 2 types of Quality assurance reviews for each model:

i) A technical peer review (ideally by someone who has not been involved in the development of your model) to review and evaluate the accuracy of the formulae, calculations and code.

ii) A business user review, (by someone who understands the purpose of the model and the underlying business rules), to determine whether the model is working as it is supposed to - functionally.

Protect

If you continue to use the spreadsheet model, lock the calculation cells.

This provides a layer of protection from unexpected changes; however, it does not necessarily prevent other users from unlocking the cells.


Change platform

Moving the model to an analytics platform allows you to enter your variable inputs through an interface (e.g. Excel, web form, visualisation tool) which can rerun the model on the fly (behind the scenes) and produce the scenario results.

With this approach, the model can be used more broadly, with reduced risk of change to the underlying formulae / algorithms.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/survive-the-damage-caused-by-a-spreadsheet-model-error

In this episode, we explore three ways to reduce the risk of spreadsheet error.

Spreadsheets are often used for modelling and analysis, largely because they are easy to use and highly flexible. This has been the case for decades.

But what happens when a simple error like cutting-and-pasting the wrong formula, or omitting data in a calculation, ends up costing you thousands or even millions of dollars?

To build for sustainability and to reduce the number of inadvertent human errors, especially for large and complex models, you can reduce the risk of error.

But how do you do that?

Review

A minimum of 2 types of Quality assurance reviews for each model:

i) A technical peer review (ideally by someone who has not been involved in the development of your model) to review and evaluate the accuracy of the formulae, calculations and code.

ii) A business user review, (by someone who understands the purpose of the model and the underlying business rules), to determine whether the model is working as it is supposed to - functionally.

Protect

If you continue to use the spreadsheet model, lock the calculation cells.

This provides a layer of protection from unexpected changes; however, it does not necessarily prevent other users from unlocking the cells.


Change platform

Moving the model to an analytics platform allows you to enter your variable inputs through an interface (e.g. Excel, web form, visualisation tool) which can rerun the model on the fly (behind the scenes) and produce the scenario results.

With this approach, the model can be used more broadly, with reduced risk of change to the underlying formulae / algorithms.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Three newer supply chain risks Three newer supply chain risks Wed, 18 Dec 2019 12:00:00 GMT 5:08 Buzzsprout-2308070 false https://riskinsightsblogcast.substack.com/p/three-newer-supply-chain-risks-fc8 6401d8064cfcac00119a9dfa 6401d7fffe3f500011e9f815
The original article was published here:
www.riskinsights.com.au/blog-1/supply-chain-risks

In this episode, we explore three newer supply chain risks – two that relate to being associated with questionable suppliers, and a third that relates to fraud.

The symantec guidance: Business email compromise



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
www.riskinsights.com.au/blog-1/supply-chain-risks

In this episode, we explore three newer supply chain risks – two that relate to being associated with questionable suppliers, and a third that relates to fraud.

The symantec guidance: Business email compromise



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> More access to data to reduce risk and enable better decisions More access to data to reduce risk and enable better decisions Tue, 17 Dec 2019 11:00:00 GMT 5:06 Buzzsprout-2300246 false https://riskinsightsblogcast.substack.com/p/more-access-to-data-to-reduce-risk-1e7 6401d8064cfcac00119a9dfb 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/openaccess


More access to data to reduce risk and enable better decisions

Controls are usually put in place to reduce risk.

Like user access controls to reduce data integrity risk.

But what if your access controls are actually increasing risk?

This can happen - particularly if there is no distinction made between systems of record (like ERPs) and systems of intelligence (like data warehouses).

In this article, we discuss an alternate approach.







This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/openaccess


More access to data to reduce risk and enable better decisions

Controls are usually put in place to reduce risk.

Like user access controls to reduce data integrity risk.

But what if your access controls are actually increasing risk?

This can happen - particularly if there is no distinction made between systems of record (like ERPs) and systems of intelligence (like data warehouses).

In this article, we discuss an alternate approach.







This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> SAS70 certification and other common SOC report myths SAS70 certification and other common SOC report myths Tue, 17 Dec 2019 07:00:00 GMT 5:54 Buzzsprout-2299457 false https://riskinsightsblogcast.substack.com/p/sas70-certification-and-other-common-57b 6401d8064cfcac00119a9dfc 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/sas70-certification-and-other-soc-report-myths

SAS70 certification and other common SOC report myths

If you use or plan to use a cloud/SaaS/hosted solution, how do you ensure that the service provider is protecting your systems and data?

Rely on their SAS70 reports, right?

Not quite.

In this article, we explain why this is not the right answer and explore a few other common myths.

Background

System and Organization Controls (SOC) reports used to be conducted in accordance with "SAS70" in the US.

A few years ago, SAS70 was replaced by:

  • In the US: SSAE18, now replaced by SSAE18.
  • Globally: ISAE3402.
  • In Australia: ASAE3402.

For audits that are conducted in accordance with these standards, a SOC report is produced.

SOC 1 Myths

1. Certification or compliance - Myth: The outsourced service provider is certified or compliant. 

2. Qualified Opinions - Myth: A qualified SOC report is the same as qualified financials, which is bad. 

3. Use of SOC 1 reports - Myth: The reports can be used to determine the level of control over all IT risks.




This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/sas70-certification-and-other-soc-report-myths

SAS70 certification and other common SOC report myths

If you use or plan to use a cloud/SaaS/hosted solution, how do you ensure that the service provider is protecting your systems and data?

Rely on their SAS70 reports, right?

Not quite.

In this article, we explain why this is not the right answer and explore a few other common myths.

Background

System and Organization Controls (SOC) reports used to be conducted in accordance with "SAS70" in the US.

A few years ago, SAS70 was replaced by:

  • In the US: SSAE18, now replaced by SSAE18.
  • Globally: ISAE3402.
  • In Australia: ASAE3402.

For audits that are conducted in accordance with these standards, a SOC report is produced.

SOC 1 Myths

1. Certification or compliance - Myth: The outsourced service provider is certified or compliant. 

2. Qualified Opinions - Myth: A qualified SOC report is the same as qualified financials, which is bad. 

3. Use of SOC 1 reports - Myth: The reports can be used to determine the level of control over all IT risks.




This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Five data in audit challenges to tackle Five data in audit challenges to tackle Sun, 15 Dec 2019 09:00:00 GMT 4:42 Buzzsprout-2284988 false https://riskinsightsblogcast.substack.com/p/five-data-in-audit-challenges-to-6cb 6401d8064cfcac00119a9dfd 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/5-data-in-audit-challenges

Five data in audit challenges, and how you can overcome these:

  1. Access to data – you can't get all the data, or you can't get it quickly enough.
  2. Low value – the analysis doesn't provide new insights.
  3. False positives – results are overwhelmingly noisy, distracting your focus.
  4. Superficiality – the results are not deep enough to properly understand and refine the problems or to provide opportunities for improvement.
  5. Timing – the results are not available in time for reporting/concluding.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/5-data-in-audit-challenges

Five data in audit challenges, and how you can overcome these:

  1. Access to data – you can't get all the data, or you can't get it quickly enough.
  2. Low value – the analysis doesn't provide new insights.
  3. False positives – results are overwhelmingly noisy, distracting your focus.
  4. Superficiality – the results are not deep enough to properly understand and refine the problems or to provide opportunities for improvement.
  5. Timing – the results are not available in time for reporting/concluding.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Audit analytics software - what you need and what to consider in selecting them Audit analytics software - what you need and what to consider in selecting them Sun, 15 Dec 2019 00:00:00 GMT 4:12 Buzzsprout-2283896 false https://riskinsightsblogcast.substack.com/p/audit-analytics-software-what-you-229 6401d8064cfcac00119a9dfe 6401d7fffe3f500011e9f815 This is an audio version of a blog article.
 
The original article was published here:
https://www.riskinsights.com.au/blog-1/3-analytics-software-sets-for-your-team-and-3-selection-advice-considerations
 
In this episode, we outline the 3 types of data and analytics software that audit teams should have access to, at a minimum. We also explore 3 questions to ask if you are obtaining external advice regarding software selection.

Link mentioned in the article: ASAP Utilities – an excel add-in.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.
 
The original article was published here:
https://www.riskinsights.com.au/blog-1/3-analytics-software-sets-for-your-team-and-3-selection-advice-considerations
 
In this episode, we outline the 3 types of data and analytics software that audit teams should have access to, at a minimum. We also explore 3 questions to ask if you are obtaining external advice regarding software selection.

Link mentioned in the article: ASAP Utilities – an excel add-in.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Why internal auditors and performance auditors need to consider adopting a specific approach to managing the data used on audits (DGIA #1) Why internal auditors and performance auditors need to consider adopting a specific approach to managing the data used on audits (DGIA #1) Sat, 14 Dec 2019 12:00:00 GMT 7:04 Buzzsprout-2281664 false https://riskinsightsblogcast.substack.com/p/why-internal-auditors-and-performance-847 6401d8064cfcac00119a9dff 6401d7fffe3f500011e9f815
The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-data-governance

It explains, using a case study, why internal auditors and performance auditors need to consider adopting a specific approach to managing the data used on audits.

This is the 1st article in the DGIA (Data and analytics Governance within Internal Audit) series.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>
The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-data-governance

It explains, using a case study, why internal auditors and performance auditors need to consider adopting a specific approach to managing the data used on audits.

This is the 1st article in the DGIA (Data and analytics Governance within Internal Audit) series.



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> Why auditors are increasingly using complaints data Why auditors are increasingly using complaints data Sat, 14 Dec 2019 11:00:00 GMT 9:00 Buzzsprout-2281724 false https://riskinsightsblogcast.substack.com/p/why-auditors-are-increasingly-using-625 6401d8064cfcac00119a9e00 6401d7fffe3f500011e9f815 This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/complaints-data-audit

Why are auditors increasingly using complaints data?

Most auditors that use complaints data are interested in one or more of these three key benefits:

  1. Customer complaints can provide an alternate perspective for a range of audits e.g., identifying revenue leakage like in the example above, triangulating customer requests that had not been acted on, highlighting control gaps.
  2. Understanding complaints data enables audit to help management improve the complaints process e.g., how complaints are reported on. 
  3. Exploring the complaints data enables audit to identify strategy achievement blockers – presuming that the strategy focuses largely on customers. For example, your complaints data may point to previously unidentified problems in how services are delivered.

 In this article we explore:

  • the historical problem with using complaints data and why this is no longer a challenge
  • what the data typically looks like – understanding complaints data
  • another use case (triangulating customer requests that had not been acted on)

What the article doesn’t cover:

  •  The third benefit above (strategy achievement blockers) – this is an interesting angle, but we’ll leave it for a future article
  • Complaints data that is recorded manually e.g., handwritten notes in a physical file.  This is not impossible to analyse but converting the physical data to electronic data is a separate topic.  The solutions in this article assume that the data is already in electronic form.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]> This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/complaints-data-audit

Why are auditors increasingly using complaints data?

Most auditors that use complaints data are interested in one or more of these three key benefits:

  1. Customer complaints can provide an alternate perspective for a range of audits e.g., identifying revenue leakage like in the example above, triangulating customer requests that had not been acted on, highlighting control gaps.
  2. Understanding complaints data enables audit to help management improve the complaints process e.g., how complaints are reported on. 
  3. Exploring the complaints data enables audit to identify strategy achievement blockers – presuming that the strategy focuses largely on customers. For example, your complaints data may point to previously unidentified problems in how services are delivered.

 In this article we explore:

  • the historical problem with using complaints data and why this is no longer a challenge
  • what the data typically looks like – understanding complaints data
  • another use case (triangulating customer requests that had not been acted on)

What the article doesn’t cover:

  •  The third benefit above (strategy achievement blockers) – this is an interesting angle, but we’ll leave it for a future article
  • Complaints data that is recorded manually e.g., handwritten notes in a physical file.  This is not impossible to analyse but converting the physical data to electronic data is a separate topic.  The solutions in this article assume that the data is already in electronic form.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 



This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

]]>