How do you know if your vendors are doing their due diligence to protect your data? Supply chain security is a critical component of your own security and compliance efforts, but a lot of companies have no idea how to determine if their vendors are safe partners. How do you even begin to audit your […]
If your company needs to prove compliance, you’re probably using your own home-grown system to manage the process, collect evidence and track your progress. And that means you’re wasting hundreds of man-hours—and tens of thousands of dollars per year. I guarantee it. No matter what technologies and software you’re using, if it’s a system you’ve […]
If you’re assessing a client for compliance requirements, you’re probably using Excel spreadsheets as a data gathering tool. Many compliance assessors turn to spreadsheets to gather information, maintain checklists of documents, enter answers to questions and manage the overall engagement. But Excel was never intended to do all that, and that means you’re building your […]
Many auditing and assessment firms use their own home-grown system to manage client engagements. Usually, the system is built on Excel. Some companies have invested substantial time and money into their internal processes for running engagements—as much as several tens of thousands of dollars! Unfortunately, most internal solutions distract from your core business, costing you […]
Stop me if you’ve heard this one before. You begin a client engagement to assess their compliance, only to discover they’ve done the bare minimum since their last assessment a year ago. No one can remember where key documents are, processes are out of date and new staff are clueless about requirements. It’s going to […]
Cyberattacks are increasing every year—across industries, and among companies of every size. As a result, companies are turning to cyber liability insurance to protect their organizations and reduce their risks. But many companies are in for a rude awakening, because they’re not handling their insurance correctly. When you apply for cyber liability insurance, you need […]
Agility and innovation. Those are two words you probably don’t associate with internal auditing. And that’s a problem, according to a new report by the Institute of Internal Auditors (IIA), titled “Global Perspectives and Insights: Agility and Innovation.” The report makes a bold claim: if internal auditors are going to remain relevant and add value […]
My first experience with compliance was over a decade ago. My boss came by and dropped the PCI compliance requirements into my lap. Thus began 18 gut-wrenching months that culminated in an audit where I had to prove that we had done everything under the sun to meet compliance. That experience was mind-numbingly painful. There […]
As much as you enjoy working with clients on engagements, sometimes compliance assessment can feel more like babysitting than anything else. Don’t get me wrong—your clients are great people, and you’re grateful for their business. But let’s be honest a moment: some of your compliance engagements require a lot more individualized attention, and more of […]