Does risk management come in one size? Should the auditor use the same standard to assess risk management at every organization? blog
This week, I wrote about how to audit risk management on my IIA blog. Not everybody, either in comments on the blog or elsewhere on LinkedIn, understood my point.
The risk management program has to be sized and oriented to meet the needs of the organization.
Is there value in the concept of GRC? blog
I have blogged frequently about the concept of GRC, the definition I use (from OCEG), and why I believe there is value. For example, there was a lot of discussion here.
