Bringing GRC Federation into IT Security
GRC, by definition, involves bringing together governance, risk and compliance disciplines from across an increasingly complex, extended enterprise with deep interlocks to customer and supplier eco-systems. The article identifies steps organizations can take to establish an integrated GRC and security approach using a ’federated’ model. FDA Inspections: Face the Challenge Through Proactive Preparation
This article provides insight on FDA's inspection from Entry to Exit and how Life Sciences companies can adopt the 3I approach of "Implement-Inspect-Incorporate" instead of Retrospect. The article also discusses the Quality System Inspection Technique (QSIT) used by FDA for inspections and how technology can be leveraged to be better prepared. Is your internal audit fit for the future?
The Internal Audit function has moved beyond the traditional assurance model owing to the dynamism in the business environments and has progressed to a transformational role as a "Strategic partner". Hence there is a need for systematic makeover of Audit functions within organizations to drive this advantage for business decision making. This article highlights the key areas for transformation to enable internal audit function to deliver greater value to an organization for gaining competitive advantage. Increased supplier ownership for sustainable social compliance
Increasing supplier ownership is key to performance of social compliance programs. Implementing a successful and sustainable social compliance program requires companies to ensure that there is ownership across the entire supply chain. Companies need to understand the root cause of factory noncompliance, and then focus on capacity building and training, both internally and externally, to solve the problems. CPA Journal - "Effective Audit Report Writing"
In this recently published CPA Journal article Gaurav Kapoor and Connie Valencia discusses about creating & structuring an effective audit report, aligning your audit reports to your business objectives, and addressing multiple audiences. Strengthen IT Auditing with COBIT
MetricStream's latest insight on "Strengthening IT Audit with COBIT" will provide guidance on how you can leverage COBIT for effective execution of IT Audits & integrating it within the General IT Audit process. Banks Need Better-Rounded Boards
This article, written by Susan Palm, Vice President of Industry Solutions at MetricStream, highlights how community banks are missing out on opportunities for driving success by not having seasoned board members whose experience and skill sets align to the bank's challenges. The article discusses the importance of the role of board members and why it is key for them to work hand in glove with the management to drive growth. With new regulations being introduced, The board of directors of banks of all sizes are under tremendous regulatory scrutiny and pressure to add value to the organization and this can be only achieved if the board members have a well-rounded experience in the industry. The Auditor’s Role in Adding Organizational Value - Aligning various aspects of GRC auditing to fulfill the new responsibilities
This articles talks about how auditors can contribute to streamlining GRC program by evaluating its effectiveness and aligning various aspects of GRC auditing, thereby fulfilling the new responsibilities and adding immense organizational value. Social Media and HIPAA Compliance: Balancing Benefits and Risks
Compliance Today, a leading publication of the Health Care Compliance Association, published this article on the topic "Social Media and HIPAA Compliance: Balancing Benefits and Risks" co-authored between Jim Sheldon-Dean, Director, Lewis Creek Systems and Vidya Phalke, PhD, CTO at MetricStream Inc. Add Business Value and Gain Competitive Advantage
Article published in Sox Journal: discusses about how implementing an ongoing, sustainable and cost-effective strategy supported by adequate technology can bring true competitive advantage and business value Demystifying a Mature and Cost-effective SOX Program
Article published in Sox Journal: sharing insights on how the growth and evolution of businesses' compliance with financial, reporting and operational requirements, including those imposed by regulations as well as those adopted pursuant to Sarbanes-Oxley, present significant challenges to business executives and about the ways to simplify it. CPA Journal - "The Transformation of Internal Auditing"
In this recently published CPA Journal article Gaurav Kapoor and Michael Brozzetti share their views on "Audit’s Role in Enterprise-wide Transformational Change" Laying the Groundwork for Your GRC Journey
A leading healthcare products manufacturer successfully embarks on the path towards building a robust, collaborative, and harmonized approach to GRC, supported by an integrated technology infrastructure Five Tips: How to measure the value of your internal audit department
Measuring the performance of an organizational process is second nature to internal auditors. But measuring the performance of the internal audit department is a different ball game altogether. Connie Valencia CIA, CCSA, principal with Elevate Consulting and Gaurav Kapoor COO with MetricStream offer five fundamental ways to verify the value of IA. Internal Auditors: Step up to the plate
The article published in the “IIA magazine” recently, written by experts, discusses how internal auditors have the opportunity to play a fundamental role in directing company strategy and enabling it to move forward into a new era of profitability.
Are You Ready for the HIPAA Compliance Audits?
The Health Care Compliance Association (HCCA)’s leading magazine “Compliance Today” publishes articles written by experts belonging to various fields from the Healthcare and Life Sciences Industry, sharing insights on compliance, ethics, information security and privacy related issues that are relevant concerns in these industries. Six Steps to Implementing a Risk-based Approach to Regulatory and Reliability Compliance in the Energy and Utilities Industry
The energy industry is in a state of intense transformation due to the forces of technology, competition and regulation. As the industry adapts to these changes, company personnel are seeking to maintain their value proposition for their customers in a climate of uncertainty and risk. Regulatory compliance, once a footnote in the company annual report, has now become a major driver of profits and shareholder return. Cloud Presents Healthcare Providers with Challenges for HIPAA Compliance
Read this interesting MetricStream insight that brings out the challenges that cloud computing offers the healthcare industry in addition to the increased regulatory vigilance. Maximizing the Value of a Risk-Based Audit Plan
An effective risk-based audit plan overcomes all the limitations by viewing risks through the prism of strategic objectives, which enables a more targeted and efficient audit Technology Transforms the Healthcare Industry
This article looks at the role of regulations like HIPAA, through the implementation of Electronic Health Records, and now the Patient Protection and Affordable Care Act (PPACA) has played in bringing technology in the fore front in the healthcare industry. Basel II: Building Risk-resilient Banking Systems
When Barings Bank declared bankruptcy in 1995, the world was stunned. As Britain's oldest merchant bank, Barings had weathered disasters like the Great Depression and Two World Wars – only to be later brought down by a single man in a small office in Singapore. By the time Barings uncovered his actions, it was too late. Leeson had cost the bank over $1 billion. Learn More about this. Risk Management : A Fresh Assessment
Aligning risk management to strategic goals yields more accurate and focused results. Integrating a strategy-based risk model with compliance, audit and governance processes, and confidently walking the tightrope of risks, will build resilience and keep stakeholders and customers happy. Fundamental Practices of Internal Audit Function
This article discusses how to plan an effective internal audit program focusing on risk assessment and key risks to be considered, which will help in appropriate resourcing of internal audit efforts, tied to board level issues and significant areas of the organization that can be impacted by the financial wellbeing of the organization. Challenges to PCI Compliance
With the burgeoning popularity of online shopping and banking, credit card transactions are flourishing. Consequently, credit card fraud is on the rise. To combat this growing menace, the Payment Card Industry Data Security Standard (PCI DSS) was developed. The standard is mandated by leading credit card institutions like Visa and MasterCard. The article describes key challenges in PCI compliance and how businesses that engage in card payments should protect cardholder data and maintain the highest levels of information security.
Internal Audit Software Application, Continuous Auditing Systems
After making circles in the academic networks for years, continuous auditing is now within reach for businesses looking to derive greater value from their auditing processes. Its implementation is no more complex and the benefits are real. By adopting the right auditing tools, developing a complete system with technological adequacy and an environment conducive to its application, every organization can gain from continuous auditing. Alarming Rise in Automotive Safety Issues
Quality issues in automobiles can not only result in commercial implications for the manufacturer, they also become life-threatening for customers and can severely damage reputation of the automotive company. In order to manage such crises, automakers need to comply with the Transportation Recall Enhancement Accountability and Documentation (TREAD) Act and diagnose the impairment, thus nullifying further recurrence of the impairment. ISO 31000: Streamlining Risk Management to Achieve Corporate Goals
The new ISO 31000 Risk Management standard provides a universally recognized paradigm for risk professionals to clearly define terminologies, establish formal processes, understand the context of their efforts, and evaluate opportunities vested in taking risks. MetricStream's ERM approach is well aligned with the overall approach and the guidelines of ISO 31000. Audit Performance Measurement
While the Internal Audit function is gaining popularity as a guardian of good corporate governance and the leader of business performance, measuring the Internal Audit’s performance can play a critical role. Regulators and investors are demanding increased scrutiny of an organization’s operation, making the Chief Audit Executive’s (CAE) job more complex and challenging. Effective Governance through Internal Auditing
Internal Audit supports the Board of Directors (BoD) and its committees by independently assessing the effectiveness of an organization’s system of internal controls as well as compliance with statutory, legal and regulatory requirements. Given the importance the BoD attaches to this role, organizations are making every effort to adopt Internal Audit across the enterprise for better management of risk and effective compliance with regulation.