Risk and Control: Ideas for a better tomorrow
A contrarian view on Risk and Control to make tinkle curiosity leading to creative and critical thinking.
Recently I participated in a Conference on Internal Audit. One of the recurrent theme across session was “Culture”. How culture of an organisation impacts Internal audit and how an internal auditor can make impacts on the organisation culture to have a right culture. This is my point of view on some of the questions raised. […]
Continue Reading
An Internal Audit Plan is the work schedule for Internal audit. Lots of thoughts, brainstorming, time gets spent in preparing Internal Audit Plan. Its imperative for internal audit to get it right to ensure that major risk faced by organization are covered. Get Audit Universe Right Getting Audit universe right will be the first step […]
Continue Reading
Companies are required to create internal control framework to ensure that things are working. Company while creating internal control framework want to have number of control as less as possible to ensure that they don’t get red flagged in reviews. Auditors are required to certify that internal controls are working. Auditors while reviewing controls want to have […]
Continue Reading
Note: This is an extract from another article to focus on eCommerce Companies. Indian companies act 2013 has mandated that CEO and CFO to certify that “internal financial Controls are adequate and operating effectively”. This is also required to be confirmed by external auditors. In my opinion this is what companies / auditors should do: […]
Continue Reading
Background: I got the opportunity to attend a meeting organised by ISACA and ICAI. The meeting was for launching “Guidance note on Corporate Governance, ERM and Assurance for COBIT 5”. Indian companies act 2013 has mandated that CEO and CFO to certify that “internal financial Controls are adequate and operating effectively”. This is also required to be confirmed […]
Continue Reading
Revenue assurance as a function is dominant in telecommunication industries. However the lessons learnt can be applied in any industry. What is revenue assurance? Revenue assurance is The activity is the use of data quality and process improvement methods that improve profits, revenues and cash flows without influencing demand. – Wikipedia How Internal audit can help an organization […]
Continue Reading
Definition of internal audit , IIA standards, professional organizations preaches internal audit to add value. Internal auditors claim that they always add value. Still organization demand value from internal auditors. What is that internal auditors are not doing to show organisation value added by them? is it a simple case of not measuring and not communicating the value added […]
Continue Reading
Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organization’s operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes. – Definition of internal audit. I believe Internal audit has […]
Continue Reading
There are three categories of audit clients: Clients who accepts all recommendations Clients who do not accept any recommendations Clients who are balanced who evaluates each recommendations, debate the necessity and offer their own solutions. 1. Clients who accepts all recommendations: An Internal Auditor need to be very careful when he is working with clients who accepts […]
Continue Reading
I had an interesting debate recently with another CAE over recommendation. In his organization, they do not give recommendations in Internal Audit Report. I was insisting on giving recommendation as it is suggested by IPPF. He had challenged me to provide IPPF reference specifying that in an assurance assignment recommendation has to be given. I […]
Continue Reading