Governance, Risk Management and Compliance
Practical insights on governance, risk, compliance, audit, ethics, fraud and technology.
Pages
(Move to ...)
Home
Book Reviews
About Me
Presentations
▼
Showing posts with label
Audit
.
Show all posts
Showing posts with label
Audit
.
Show all posts
Essential Skills for GRC, Finance, Legal and Cyber in 2027 and 2028
›
This article answers one worry: if AI now drafts the policies, tests the controls, reviews the contracts and triages the alerts, what is lef...
Agentic AI in Internal Audit, What to Automate, What to Keep
›
Consider an illustrative scenario, not a real engagement. A mid-sized distributor connects an audit agent to its ERP, its document reposit...
SOX Controls Over AI
›
Consider a composite situation, not a real engagement. A controller opens the monthly bank reconciliation, and the matching tool shows 1,250...
AI Governance Frameworks For Risk Managers
›
Corporate environments are adopting autonomous systems at a pace that outstrips traditional oversight mechanisms. Engineering teams ship a...
AI Agent Segregation of Duties Guide for GRC and SOX Compliance
›
Finance leaders are under constant pressure to cut costs, and automation is the fastest lever available. IT teams are asked to hand AI age...
The Risk Management Blueprint: A Practitioner's Guide to Quantitative GRC
›
Risk management has a credibility problem. Not because the profession lacks talent, but because color-coded heat maps, ordinal scoring mat...
SOC 2 Is Not Security: A Critical Guide for GRC Managers
›
Let us be direct. SOC 2 is not a security certification. It is an attestation report issued under AICPA standards in which a licensed publ...
Stop Chasing Evidence to Start Informing Decision-Making
›
Walk into most GRC departments in large global companies and you'll find talented professionals spending their weeks on the same treadmi...
AI Isn't Coming for GRC Jobs. It's Coming For The Manual Review Part of Every GRC Job
›
Here's the uncomfortable part nobody says out loud in a GRC conference room. AI is not replacing risk managers, compliance officers, aud...
A Practical Field Guide for Auditing SAP HR Systems
›
Auditing an SAP Human Capital Management (HCM) environment is one of the most consequential engagements an internal auditor or external re...
How to Stop Producing Risk Registers Nobody Uses
›
Enterprise Risk Management programs fail in the same quiet way. They produce polished registers, colorful heat maps, and quarterly reports t...
Skills for Compliance Officers, Risk Managers, and Auditors
›
7 Career Capabilities That Will Separate Compliance Officers Who Thrive in 2026 From Those Who Get Replaced by Algorithms ING just announced...
How to Use Large Language Models Securely in Risk Management, Compliance, Cybersecurity, and Audit
›
A compliance officer asked an LLM to analyze a vendor contract for GDPR obligations. The prompt included the full contract text. The con...
AI for GRC: 10 Use Cases Every Risk and Compliance Team Can Deploy in 90 Days
›
A compliance analyst at a mid-tier financial institution spent 14 hours last week reading regulatory updates. She flagged three items as ...
SAP S/4HANA: AIS Audit Information System, Analytics, Continuous Monitoring, and RPA
›
How to Use SAP S/4HANA Audit Tools, Data Analytics, RPA, and GRC Solutions Most SAP audits still leave value on the table. The team knows ...
How to Audit the SAP S/4HANA Forecast-to-Stock Cycle
›
Audit Controls for the SAP S/4HANA Forecast-to-Stock Cycle Inventory audits are rarely just about counting boxes. They are about trust. Tru...
How to Audit the SAP S/4HANA Purchase-to-Pay Cycle
›
Practical Audit Controls for the SAP S/4HANA Purchase-to-Pay Cycle Few audit areas get management’s attention faster than purchase-to-pay....
How to Audit the SAP S/4HANA Order-to-Cash Cycle
›
Practical Audit Controls for the SAP S/4HANA Order-to-Cash Cycle Revenue problems rarely begin in the income statement. They begin earlier....
How to Audit the SAP S/4HANA Record-to-Report Cycle
›
Practical Audit Controls for the SAP S/4HANA Record-to-Report Cycle Most finance audits focus on the final reports. That is too late. If yo...
How to Audit IT General Controls, Basis Settings, and SAP S/4HANA Security
›
Audit Guide for SAP S/4HANA IT General Controls, Basis Settings, and Security A minimum password length of 4 characters. SAP_ALL assigned ...
›
Home
View web version