The Institute of Internal Auditors has updated its Three Lines of Defense Model to emphasize more active forms of risk management and governance that go beyond merely defensive moves by the internal ...

Audit engagement risk is something all auditors think about and incorporate into their decisions, but recent research suggests that they might not be thinking about it as broadly as they should.

Generally accepted auditing standards (GAAS) require the auditor to identify and assess risks of material misstatement (AU-C §315, Understanding the Entity and Its Environment and Assessing the Risks ...

Risk-based audit needs a reset to enterprise risk and value auditing. When I became a chief audit executive (CAE) for the first time in 1990, I determined a risk-based approach was inadequate. A ...

Tax auditors and audit supervisors who are responsible for conducting audits in their current roles or will potentially be handling such roles in their future assignments. This course is designed to ...

The annual audit plan is typically out-of-date even before it is approved by the audit committee. It’s quite a few years since I first started talking about “auditing at the speed of risk” (since at ...