New Content on KnowledgeLeader - 9/22/2025
Resources for Developing and Acheiving Organizational Goals
Tools
The following tools were published on KnowledgeLeader this week:
Develop and Set Organizational Goals RCM
A successful risk management strategy requires a strong internal control environment. The risk control matrix (RCM) format emphasizes that strong and risk-oriented internal control environments are often optimized with automated/manual controls, depending on the situation. An RCM provides an overview of different control objectives that organizations should take into consideration and the corresponding controls to safeguard the company against risks, which may arise if not checked timely.
Social Engineering Audit Work Program
This sample work program provides general steps organizations should follow when performing a social engineering audit. Controls tested in this program include: awareness programs are in place requiring employees to maintain confidentiality of credentials and proprietary information; incident management procedures are in place requiring employees to report social engineering attacks immediately; and employees do not divulge sensitive information to unknown individuals.
Bank Investments Department Audit Work Program
This sample program includes steps that can be used to audit an organization’s investments department. This audit addresses risks such as: obtain trial balances for outstanding repurchase agreements and customer repurchase agreements, ensure that the market value of the securities pledged is greater than the principal amount of the repurchase agreement, reconcile the general ledger accrued interest payable account, obtain a copy of the bank investment policy and verify approval by the board in the board minutes, and verify that classifications comply with the investment policy.
Technology Acquisition Policy
Ensure effective technology management with our Technology Acquisition Policy, which outlines guidelines for acquiring technology and integrating new systems. It is an essential resource for organizations navigating the complexities of acquiring, managing and disposing of technology assets. This document is presented in three tailored samples, each addressing unique aspects of technology acquisition to meet diverse organizational needs. Sample 1 focuses on the financial and accounting practices surrounding technology acquisitions, including equity investments and research-related costs. It provides clear guidelines on expense thresholds, capitalization criteria and documentation processes.
Segregation of Duties Review Report
Our Segregation of Duties Review Report is designed to help organizations strengthen their internal controls by systematically identifying and resolving conflicts in user access and role assignments within key financial systems. By leveraging advanced SAP analysis tools, this audit solution enables companies, especially those with complex systems, to proactively address compliance requirements, streamline remediation efforts and reduce the risk of fraud or error. This tool not only supports regulatory compliance such as SOX but also empowers management with actionable insights and a clear remediation plan, promoting long-term operational efficiency and confidence in access governance.
Fixed Asset Identification Inventory Impairment
Our Fixed Asset Identification Inventory Impairment Policy is an essential tool designed to help organizations maintain strict control over their fixed assets. This document outlines best practices for asset identification, including the use of unique numbering and permanent tagging, as well as maintaining detailed records in specialized software. It covers the entire asset lifecycle, from acquisition and marking to transfers and disposals, assuring that every movement and change in status is accurately tracked and properly accounted for. This policy also addresses the importance of periodic physical inventory and the need to reconcile records, providing a robust framework for compliance and audit readiness.
Publications
KnowledgeLeader has also published several publications this week.
How Integrated Assurance Transforms Enterprise Security Architecture Into a Strategic Execution Capability
The Integrated Assurance model is revolutionizing the way organizations approach enterprise security architecture (ESA), transforming it into a vital strategic asset. Instead of viewing security as merely a reactive measure or a compliance obligation, this innovative framework weaves risk management and governance into the very fabric of business operations, technology and processes. By bridging the divide between corporate strategy and operational execution, Integrated Assurance fosters a cohesive environment where cybersecurity, IT, compliance and risk management work in harmony toward shared goals. As a result, ESA becomes the backbone of the organization, embedding security controls and resilience within business capabilities, processes, data flows and technology foundations. This integration empowers organizations to pursue their strategic objectives with confidence, ensuring that assurance is not just an afterthought but a measurable and traceable design principle.
Slimmed-Down CFPB Scales Back Regulatory Priorities, Shifts Focus Back to Big Banks
The Consumer Financial Protection Bureau (CFPB) is making waves with a major shift in its regulatory priorities, scaling back its oversight of non-bank financial institutions while refocusing on large depository institutions. Plans to cut examinations by 50% reflect a move toward addressing "tangible harm" to consumers through collaboration and remediation rather than punitive financial penalties. By reducing redundant supervision in states with capable local regulators, the CFPB signals a deregulatory stance that could provide breathing room for emerging financial institutions. This shift comes at a critical time, offering these organizations the chance to innovate and refine their risk management strategies without looming regulatory pressures.
Evolving Risk Landscape Refocuses Healthcare Audit Priorities
As the healthcare industry adapts to the lasting effects of digital transformation, regulatory shifts and emerging cyber threats, organizations are encountering increasingly complex and unpredictable risks. AI-driven fraud, data privacy challenges and escalating ransomware attacks are reshaping the priorities for healthcare internal auditors. Their role remains critical in safeguarding operations, helping to ensure compliance, strengthening financial and IT controls, and addressing evolving vulnerabilities in an environment that demands resilience and strategic foresight.
Recommended Resources
This list of recommended resources from the web may be of interest to you. Click each link to learn more.