As auditors we audit the effectiveness of controls and make recommendations for improving controls. If we are not careful, what we may actually do is recommend ineffective controls or try to over control our organizations, effectively strangling the organization and making it more difficult to achieve objectives. Here's a case study showing some ineffective and over control from one of the largest banks in the world that should know better. Makes me want to scream "give me a break."
Jason Mefford is a rock star in internal audit, risk management and compliance. He typically works with Chief Audit Executives and professionals in audit, risk and compliance with the technical and soft-skills needed to navigate the land mines of organizations. He takes complicated, confusing & hard things, makes them practical, proactive & simple to improve learning and transformation.
Jason is an edutainer, executive coach, professional speaker, facilitator and media producer. He serves the internal audit community through his companies Mefford Associates, cRisk Academy, Mefford CIA Review Course, and the Jamming with Jason Podcast.