On DemandOn-Demand Course
Applying and Integrating ERM
Mid Career
Dec 31, 2026
Member$324
Non-Member$406
Strategic Risk ManagementRisk Management
With the frequency and severity of cyberattacks on the rise, there is a significant need for improved cybersecurity risk management. Cybersecurity concerns have a tremendous impact on overall organizational strategy and must be considered holistically and systemically.
As fraud risks and fraudulent activities continue to play a role in an organization's overall financial and reputational stability, the recognition of current trends in fraudulent acts will grant internal auditors the advantage of fostering detective and preventive measures to safeguard the integrity of a business, its shareholders, products, services, and workforce.
Culture and conduct play a pivotal role in the well-being of an organization. Organizations with a culture based on strong values have a higher probability of successfully achieving their business objectives and retaining high-performance employees.
IT change management refers to the process in which an organization's technology changes; the effects that the changes have on systems, programs, or applications; and how the changes are managed. Change management in the IT environment is critical for organizational success.
Market risk is a key risk for financial services organizations. Regulators and their supervisors focus on this risk, emphasizing the necessity of having accurate models that can measure the capital impact of market activities on the financial viability of the institution. Regulatory requirements and supervisors' expanded expectations are giving internal audit a more relevant and active role in the assessment of market risk.
Organizations across various sectors of the economy recognize the benefit of utilizing mathematical models to validate decisions. With large amounts of data coming from a myriad of dynamic sources, organizations need to develop models to review, evaluate, validate, and transform data with the purpose of optimizing strategic forecasting and tactical actions.
Organizations across various sectors of the economy recognize the benefit of utilizing mathematical models to validate decisions. With large amounts of data coming from a myriad of dynamic sources, organizations need to develop models to review, evaluate, validate, and transform data with the purpose of optimizing strategic forecasting and tactical actions.
Using third parties invariably presents a variety of risks for organizations, including strategic, reputational, regulatory, operational, financial, transactional, security, compliance, and other risks. However, when utilized effectively, third parties can also provide tremendous value.
As organizations further their reliance on third party service providers, regulatory bodies around the world have increased their level of scrutiny regarding third party provider’s abilities to properly protect sensitive and internally used data and information assets. Today's organizations are expected to demonstrate strong, third-party governance and risk management.
ChatGPT launched as a prototype on November 30, 2022, and garnered attention for its detailed responses and articulate answers across many domains of knowledge. However, ChatGPT is not the first generative AI, nor will it likely be the last. Over two billion dollars have already been invested in generative artificial intelligence, a rise of 425 percent since 2020.
An internal auditor's success greatly depends on interaction with other people. In short, people skills greatly impact audit engagement work, as well as personal objectives.
The IIA's Code of Ethics includes two essential components: The Principles and the Rules of Conduct. The principles, which internal auditors are expected to apply and uphold, are relevant to the profession and practice of internal auditing. The rules of conduct describe behavior expected of internal auditors.
In a perfect world, processes, systems, and infrastructure never fail; however, a host of natural and human actions cause disruption to critical business processes. Maintaining a solid operational resiliency program aides organizations in combating disruptions.
The governance of enterprise IT plays a critical role in the effectiveness of IT operations. Without strong governance, IT management may not have the necessary direction to achieve their stated objective. It is important for organizations to take a strategic approach to implementing IT governance.
Critical thinking can be thought of as an art that is woven throughout the key elements of the audit process, including risk assessments, interviewing, testing and analysis, process documentation, and reporting. Effective critical thinking involves collecting and analyzing information, drawing compelling conclusions, and providing recommendations.
The definition of what we view as Geopolitical Risks has increased significantly in the past 50-100 years. Information technology, interconnected global economy, our understanding of climate change, global pandemic, internal and global political shifts all lead to an increasing set of risks impacting a business.
Physical and environmental controls provide the foundation for an effective suite of controls to protect data and information, hardware, and human resource assets. Physical security controls protect assets from inappropriate physical access, theft, or vandalism, while environmental security controls protect assets from accidental, intentional, and natural events, including fire and water damage or power disruption.
For organizations that seek to maintain successful pathways towards consistent revenue, sustainability, reputational stability, and risk mitigation efforts, the topic of fraud prevention must be front and center in the minds of management. In its 2020 Report to the Nations, the Association of Certified Fraud Examiners (ACFE) estimated close to $3.6 billion in losses attributed to fraud cases globally, which emphasizes the need to implement stark assessments to curtail opportunities for fraud.
Root cause analysis (RCA) is a technique for finding the core causes for problems an organization may face. Auditors can use a variety of identification and measurement tools for determining the root cause of the issues they analyze.
The insurance industry, which includes complex products such as property and casualty insurance, life insurance, health insurance, and variable annuities, is part of the larger financial services industry. While the two industries share some common characteristics, insurance organizations also face unique governance, risk management, and control issues.