This is an audio version of a blog article.
 
The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-analytics-beyond-basic-rules
 
In this episode, we briefly discuss how assurance analytics goes beyond basic rules.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

This is an audio version of a blog article.
 
 The original article was published here:
 https://www.riskinsights.com.au/blog-1/going-beyond-the-initial-remedial-action
 
In this episode, we explore a common flaw in designing audit remediation actions.

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/risk-management-creating-risk

In this episode, we explore how poor risk management can result in more risk than it attempts to reduce.

Links mentioned in this episode:

1. The article in which we spoke about a PIA that did not consider all the risks and created a false sense of security
2. The article in which we outlined how a flaw in risk-thinking can increase risk by reducing efficiency and effectiveness
3. The article in which we looked at how to use the results of audits to reduce risk, rather than just ticking a box.

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

This is an audio version of a blog article.
 
The original article was published here:
https://www.riskinsights.com.au/blog-1/inadvertent-privacy-breaches
 
In this episode, we explore inadvertent privacy breaches.

 

Links mentioned in the article:

1. The travel card data privacy breach was reported on in this article in August 2019
2. The article in Science Daily  that says "Re-identifying anonymised data is how journalists exposed Donald Trump's 1985-94 tax returns in May 2019"
3. The article in The Guardian that says "anonymising data is practically impossible for any complex dataset"
4. OVIC wrote about the investigation in this blog article
5. Other false senses of security created by risk management in this separate blog article
6. The De-Identification Decision-Making Framework 
7. The Microsoft Guide to Data Governance for Privacy, Confidentiality, and Compliance
8. Uber: open source project for differential privacy
9. Google: open source version of their differential privacy library

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/emerging-risks-artificial-intelligence

In this episode, we explore artificial intelligence, and how to manage the risks associated with AI opportunities.

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/post/outside_in_risk_management_part1

In this episode, we explore customer focus as it applies to risk management.

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/post/3-open-source-myths-that-might-be-inhibiting-your-team-s-progress

In this episode, we explore 3 open source myths that might be inhibiting your team's progress.

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/post/3rd-party-risk-management-do-you-consider-customer-experience

In this article, we explore the need to consider customer experience in managing third party risks. 

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/audit-analytics-reducing-noise-false-positives

In this article, we explore an alternate approach to dealing with false positives that result from internal audit analytics. 

For more advice on analyzing data for audits, you can find The Data-Confident Internal Auditor on Amazon, with bonus resources available at data-confident.com. 
The book aims to demystify the use of data in internal audits through practical, step-by-step guidance. 

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.

This is an audio version of a blog article.

The original article was published here:
https://www.riskinsights.com.au/blog-1/survive-the-damage-caused-by-a-spreadsheet-model-error

In this episode, we explore three ways to reduce the risk of spreadsheet error.

Spreadsheets are often used for modelling and analysis, largely because they are easy to use and highly flexible. This has been the case for decades.

But what happens when a simple error like cutting-and-pasting the wrong formula, or omitting data in a calculation, ends up costing you thousands or even millions of dollars?

To build for sustainability and to reduce the number of inadvertent human errors, especially for large and complex models, you can reduce the risk of error.

But how do you do that?

Review

A minimum of 2 types of Quality assurance reviews for each model:

i) A technical peer review (ideally by someone who has not been involved in the development of your model) to review and evaluate the accuracy of the formulae, calculations and code.

ii) A business user review, (by someone who understands the purpose of the model and the underlying business rules), to determine whether the model is working as it is supposed to - functionally.

Protect

If you continue to use the spreadsheet model, lock the calculation cells.

This provides a layer of protection from unexpected changes; however, it does not necessarily prevent other users from unlocking the cells.


Change platform

Moving the model to an analytics platform allows you to enter your variable inputs through an interface (e.g. Excel, web form, visualisation tool) which can rerun the model on the fly (behind the scenes) and produce the scenario results.

With this approach, the model can be used more broadly, with reduced risk of change to the underlying formulae / algorithms.

This is a public episode. If you would like to discuss this with other subscribers or get access to bonus episodes, visit riskinsightsblogcast.substack.com

Hosted on Acast. See acast.com/privacy for more information.