Tools

The following tools were published on KnowledgeLeader this week:

Expense Reporting Policy Violation Memo

This expense reporting violation review focuses on an employee’s potential noncompliance with this standard corporate policy. It is employed during monthly audits when an employee's expense report is randomly selected and found to potentially breach company guidelines. This structured approach ensures clarity and consistency in addressing policy breaches, reinforcing adherence to corporate standards.

Internal Audit Re-Engineering Questionnaire

Our Internal Audit Re-Engineering Questionnaire document provides a framework to enhance the effectiveness and scope of internal audit functions within organizations. It emphasizes the need for internal audits to go beyond financial compliance, such as Sarbanes-Oxley Act (SOX) requirements, and include broader evaluations of operational, legal and regulatory risks.

Elder Care Audit Work Program

Strengthen your elder care program's compliance and efficiency with our Elder Care Audit Work Program, which offers a structured approach for auditing, starting from planning to reporting, and details specific audit procedures such as documenting the elder care program, verifying compliance with insurance and reimbursement policies, and assessing the effectiveness of Employee Assistance Programs (EAPs).

Cost Estimation Audit Work Program

Access our detailed Cost Estimation Audit Work Program for accurate cost estimation, covering bids, labor/material cost, and comprehensive planning steps. Through this tool, you can expect to systematically evaluate the adequacy of compliance with established cost estimation policies and procedures, scrutinize the efficiency and effectiveness of internal controls, and identify areas for process improvements.

IT Physical Security Audit Work Program

Physical access to information processing and storage areas and their supporting infrastructure must be controlled to prevent, detect and minimize the effects of unintended access to these areas (e.g., unauthorized information access). Access control is established by imposing standards for protection at the building, processing area and supporting infrastructure areas.

Internal Audit Status Update Report

Access the internal audit status update report for detailed information on enterprise risk planning (ERP) control changes and NIST CSF key areas. This document, approved by the audit and compliance committee, offers a detailed summary of an internal audit plan, including the status and completion percentages of various audit projects. It highlights completed audits, such as a company’s post-implementation review, providing insights into the scope, results and identified opportunities for improvement.

Publications 

KnowledgeLeader has also published several publications this week.

Generative AI Study: Business Rewards Vs. Security Risks

Information Security Media Group’s second annual Generative AI study, sponsored by Protiviti, captures the pulse of the business world as it relates to Gen AI. The findings show how organizations are currently integrating Gen AI technologies, identifying key trends and practices that are helping drive successful adoption. In this report, we shed light on how businesses are leveraging AI to drive innovation while navigating the obstacles and complexities associated with its integration.

Former Apple, Google CPOs Talk Tech, Data, AI and Privacy’s Evolution

Jane Horvath is a partner and co-chair of global law firm Gibson Dunn’s privacy, cybersecurity and data innovation practice group. Previously, Jane was CPO at Apple, Google’s global privacy counsel, and the DOJ’s first chief privacy counsel and civil liberties officer. Keith Enright is a partner in Gibson Dunn and serves as co-chair of both the firm’s tech and innovation industry group and the artificial intelligence practice group. In this VISION by Protiviti interview, Tom Moore, senior managing director of Protiviti, sat down with Horvath and Enright to discuss their work and views on shaping data privacy policy for millions of everyday users.

The Global Risk Landscape Rewards a Commitment to Agility

Protiviti’s 13th annual global top risks survey captures insights from 1,215 C-level executives and directors, with 44% representing companies based in North America, 14% in Europe and the United Kingdom, 22% in the Asia-Pacific region, and the remaining 20% from Latin America, the Middle East, India and Africa. This issue of Board Perspectives suggests several questions boards should consider based on the survey. 

Recommended Resources 

This list of recommended resources from the web may be of interest to you. Click each link to learn more. 

1. Why CFOs Must Take Control of Pricing Strategy
2. Privacy and Profits: How Responsible Data Protection Can Drive Revenue
3. The Will and the Way: How Public Utilities Can Overcome Common Transformation Challenges