As internal auditors and risk professionals, we are trained to scan the horizon for looming threats. Every year, headlines are filled with familiar risks—cybersecurity, economic volatility, geopolitical unrest, regulatory change. These are important, and rightly command our attention. But what about the risks that aren’t dominating the headlines? The ones that aren’t part of boardroom agendas, risk registers, or scenario planning models? In my experience, the most dangerous risks are of...| Audit Beacon
“Boards tell internal auditors they want “no surprises.” Yet every day in 2025 brings a new surprise.” If you’re like me, you entered 2025 cautiously optimistic. […]| Audit Beacon
In a recent article for AuditBoard, I shared 10 lessons I have earned in my 50 years on the (internal) audit trail. Number 3 on the […]| Audit Beacon
As companies continue to navigate the changing work environment brought on by the pandemic, it has become clear that business leaders will need to get comfortable revising and adapting their strategies to deal with disruption brought on from new technologies and new regulation. As risk management professionals, these rapid changes have made our job more important than ever to our organizations. Yet the majority of our organizations—particularly in C-suites—remain far from giving risk mana...| Risk Management Monitor