IIA-Australia White Papers – Linking Data Lifecycle Management to Data Security

IIA-Australia White Paper – Linking Data Lifecycle Management to Data Security Download Paper Author Ashwin Pal, BCA, CISSP, CISA, CSSLP, CGEIT, CRISC, CDPSE, CCSK, C|CISO, PCIP, MACS CP (Cyber Security) […]

IIA-Australia White Paper – The Obligation Hierarchy

This white paper provides internal auditors with a matrix to expose the unknown unknowns in their organisation’s obligations registers.

IIA-Australia White Paper – The Obligations Register and the Rumsfeld Matrix

This white paper provides internal auditors with a matrix to expose the unknown unknowns in their organisation’s obligations registers.

IIA-Australia White Paper – Operational Compliance Management and Reporting

In the same way that organisations rely on a company-wide single source of truth and standardised reports for all their financial reporting, organisations will benefit from a companywide single source of truth and standardised reports for operational compliance.

IIA-Australia White Paper – GORC – New and improved GRC with added O

The term GRC creates a risk-centric bias by focusing on risk management, risk control and risk governance.
The term GRC can create confusion and bias, increasing the possibility of decision-making errors. The term GRC should be updated to describe the totality more accurately. By including Obligations in the GRC acronym (by changing it to GORC where the O stands for Obligational awareness), risk centric bias is eliminated by recognising the equal and parallel importance of obligations.

IIA-Australia White Paper – The ORC Model for Compliance Management

By applying the ORC model, Internal Audit will have a foundational structure similar to a financial chart of accounts; that is, a digestible breakdown of all of the organisation’s obligations broken down into subcategories. This foundation will provide the basis for further tools and standardised reporting.

IIA-Australia White Paper – The Obligations Register – Structure and Content

An effective obligations register is a vital tool in the administration of governance, obligations awareness, risk management and compliance. This white paper proposes both the structure of a comprehensive obligations register and a strategy for populating it.

IIA-Australia White Paper – Auditing your entity’s Compliance Framework

An effective compliance framework is a critical element of good governance. Given that almost nine out of ten executives across the world believe that reputation risk is the most important strategic risk, it is essential for the compliance framework to be factored into internal audit planning.