Is Your Risk Assessment Too Complex?
Field: Auditing | Delivery Method: Self Study | CPE Hours: 1.0
Description
For our risk assessments, we combine subjective measures with past audit results and data from different systems. Then we tack on hours of interviews with management that only adds more subjectivity. When I push deeper and ask who designed this risk assessment process, very few auditors can answer. Usually, it’s someone who left the organization years before or an external consultant who recommended the approach. When it takes so much effort to complete the assessment that it takes away from the actual audits that we could be working on, is it time to admit that our risk assessment process is just too complicated?
After completing this course, you will be able to:
- Evaluate your risk assessment process for adherence to the standards
- Utilize lessons from real risk assessment examples
- Apply strategies to improve your risk assessment processes
CPE Hours: 1.0
Field of Study: Auditing
Prerequisites: Basic knowledge of internal audit report writing.
Who Should Attend: This session is designed for all internal auditors.
Advanced Preparation: None
Program Level: Basic
Delivery Method: Self StudyFormat: Video
Your Instructor
Toby DeRoche is a bestselling business writer, highly credentialed governance professional, and entrepreneur. Toby has combined his background in English Literature, an MBA, and over 20 years of business experience by authoring more than 250 business thought leadership blogs for industry leaders across the U.S., Canada, and Europe, several of which have been featured in Forbes Business. He has also written 16 whitepapers and four books, including Agile Audit: Transformation and Beyond, Only Audit What Matters (an Amazon bestseller), Modernize Your Audit Department, and Not Yet: A Warming Tale About My Neighborhood, and he contributed two chapters to the 28th edition of ISACA's CISA Review Manual as an IT control subject matter expert.
Certifications:
- Certified Internal Auditor (CIA)
- Certified Information Systems Auditor (CISA)
- Certified in Cybersecurity (CC)
- Certified Agile Auditor Professional (cAAP)
- Certified Agile Auditor Professional - Scrum Master (cAAP-SM)
- Certified Fraud Examiner (CFE)
- Certified in Risk Management Assurance (CRMA)
- Certified in Control Self-Assessment (CCSA)
In 2019, he founded Insight CPE, a company focused on continuing education for audit, risk, and fraud professionals. Through this platform, he has delivered over 130 custom training programs and presentations, including the CyberControl System and the Certified Agile Audit Professional.
Today, Toby continues to write, consult, and coach, primarily working with organizations to enhance their governance and cybersecurity practices, combining strategic insight with practical solutions. Outside of work, Toby enjoys spending time with his wife and son, whether enjoying the outdoors or watching movies together.