Agility and innovation. Those are two words you probably don’t associate with internal auditing. And that’s a problem, according to a new report by the Institute of Internal Auditors (IIA), titled “Global Perspectives and Insights: Agility and Innovation.” The report makes a bold claim: if internal auditors are going to remain relevant and add value […]
My first experience with compliance was over a decade ago. My boss came by and dropped the PCI compliance requirements into my lap. Thus began 18 gut-wrenching months that culminated in an audit where I had to prove that we had done everything under the sun to meet compliance. That experience was mind-numbingly painful. There […]
As much as you enjoy working with clients on engagements, sometimes compliance assessment can feel more like babysitting than anything else. Don’t get me wrong—your clients are great people, and you’re grateful for their business. But let’s be honest a moment: some of your compliance engagements require a lot more individualized attention, and more of […]
Compliance impacts a broad spectrum of people across your organization, and even your vendors. Compliance affects IT, but it also impacts your hardware and software development teams. It has implications for the Sales team—especially how they treat information during the sales process, or handle payment information. HR touches compliance-related data every time they do hiring, […]
The General Data Protection Regulation (GDPR) went into effect on May 25, 2018, and within 24 hours Google and Facebook had both been targeted with non-compliance complaints. There’s a lot of confusion about GDPR—who it applies to, how to become compliant, and what happens afterward—and businesses are scrambling to get their arms around the whole […]
Your compliance auditor has a vested interest in your success—but a successful engagement is a LOT easier when you make it easy on your auditor to sign off on your compliance. Auditors are looking for clients that are willing participants who take compliance seriously. They love working with companies that want to do compliance correctly […]
Compliance management isn’t exactly known for being very Zen. For most companies, it’s chaotic, stressful, confusing and full of frustrating requirements that don’t make sense. That was true for Phoenix Financial Services, too…for a while. But Phoenix Financial breathes easy, now. They’ve found a way to manage compliance requirements without all the craziness. Phoenix Financial […]
As a compliance auditor, it’s not your job to be a buddy to your clients. You’re there to assess them, and your clients have hired you to be assessed. You’re not a consultant, and it’s not on you to provide solutions or show them how to do everything. But you do have a responsibility to […]
Let’s face it. Your compliance management process is a freaking mess. Nothing is organized, you have no idea where half of last year’s compliance evidence is hiding, and there’s a good chance that you gave some original documents to your auditor. The long and the short of it is, you’re pretty much starting from Square […]