The saying goes, “If it ain’t broke, don’t fix it.” However, in the culture of today’s business market, the saying should be adapted to say, “If the existing risk management program is working, still ...

One of internal audit's values is to tell management when the controls to manage risks and assure opportunities aren't working. Internal audit should have a plan for the work it will do, and by now we ...