Internal Auditor’s blogs reflect the personal views and opinions of the authors. These views may differ from policies and official statements of The Institute of Internal Auditors and its committees and from opinions endorsed by the bloggers’ employers or the editors of Internal Auditor.

Maybe Objectives, Risk, and Controls Are the Wrong Focus

Comments Views

Here's a radical idea.

Think about it.

Who takes risk? It's the decision-makers across the extended enterprise.

If we want reasonable assurance that they are taking the desired level of risk to achieve objectives, we need to know they are making effective decisions.

How many of us think about whether people know how to, let alone actually make, quality decisions?

I recently wrote about audits that I performed to obtain assurance that people had reliable information on which to base their decisions.

But what if they don't give the decision enough thought, don't involve others, or so on?

Maybe this should be a focus of our attention.

Perhaps we should talk to and perhaps partner with human resources and make training in decision-making a required course for every decision-maker.

Maybe we should think about how we can prevent or detect poor decisions.

What do you think?

I welcome your comments.



Internal Auditor is pleased to provide you an opportunity to share your thoughts about these blog posts. Some comments may be reprinted elsewhere, online or offline.



Comment on this blog post

comments powered by Disqus
  • Your-Voices-Recruitment-January-2022-Blog-1
  • Fraud-Virtual-Conference-January-2022-Blog-2
  • IT-General-Controls-Certificate-January-2022-Blog-3