Frustrating Risk With the Right Internal Control Framework
Image: As cyber-security and IT controls rise up the priority list in corporate audits, a new wrinkle is emerging: numerous frameworks (COSO, NIST, CoBIT) used by numerous parties, all trying to build effective control systems. That could lead to painful detours in mapping controls, if compliance executives don’t plan carefully. ...
Related articles
-
Article
Despite heightened risks, auditors limit cyber-questions
Auditors are arming up to be more proactive in the escalating cyber-war, but this year they’re still limiting their focus to financial statement risk. Tammy Whitehouse has more.
-
OpinionThe Compliance - Audit gap in ESG and financial reporting
ESG reporting has moved from a voluntary PR exercise to an expectation for regulators and investors, but the compliance audit gap now threatens credibility.
-
PremiumU.K. financial regulator looks to streamline audit enforcement procedures
Auditors are supposed to keep businesses honest, but how much regulation is the optimum for the auditors – and how onerous and punitive should the enforcement regime be? A new consultation by the U.K. regulator, the Financial Reporting Council, opened on Oct. 1 and has put the vexed question of ...