As companies embrace emerging and leading technologies, many accounting professionals continue to play catch-up when implementing them in their service delivery (whether in public or…
Risk managers are continuously reminded by regulatory bodies and framework developers of the importance of maintaining an accurate, complete, and relevant IT asset inventory. The…
The new year comes with a new list of cybersecurity and technology risk resolutions. Financial and risk management professionals annually rededicate their organizations and themselves…
The new year comes with a new list of cybersecurity and technology risk resolutions. Financial and risk management professionals annually rededicate their organizations and themselves…
Per its website, “MITRE ATT&CK (ATT&CK) is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations” (https://tinyurl.com/bddydxrz). The parent organization…
How to Audit AI
Guidance from Professional Associations
Despite challenges and concerns related to AI adoption and use, organizations are rapidly experimenting with and, in some cases, adopting this technology. Some question whether…
Risk management executives can no longer treat artificial intelligence (AI) as a passing fad. According to a report from Microsoft and IDC “The Business Opportunity…
Robotic Process Automation (RPA) continues to proliferate in organizations. Responding to governance challenges and impacts on financial reporting, the Committee of Sponsoring Organizations of the…
Robotic Process Automation (RPA) continues to proliferate in organizations. Responding to governance challenges and impacts on financial reporting, the Committee of Sponsoring Organizations of the…
Metrics or Maturities
Gauging Cyber Performance
Many corporate executives continually question and analyze their business practices to achieve their goals more effectively and efficiently. Not surprisingly, cybersecurity remains an item of…
Data breaches and resultant identity theft can happen to anyone. The National Institute of Standards and Technology (NIST) defines identity theft and identity fraud as…
While appreciating the impact on cybersecurity and business resiliency, organizations continue to confront patch management challenges. Typically, organizations include patch management activities within their vulnerability…
Artificial intelligence (AI) is not a philosophical discussion, business dream, or science fiction for CPAs—whether they are risk managers, auditors, or financial executives. Unlike many…
ICYMI | The Updated NIST Cybersecurity Framework
Tools and Governance
Identify, protect, detect, respond, and recover: these words will be familiar to everyone who has attended a cyber-security-related update presentation at their organization, discussed cybersecurity…
The Updated NIST Cybersecurity Framework
Tools and Governance
Identify, protect, detect, respond, and recover: these words will be familiar to everyone who has attended a cyber-security-related update presentation at their organization, discussed cybersecurity…
Despite being subjected to high regulatory expectations and intense scrutiny over information security practices, the healthcare industry has again succumbed to a significant data breach.…
The start of the new year brings new strategies and new challenges. Many employees will lobby to participate in new opportunities. The organizations' best and…
The start of the new year brings new strategies and new challenges. Many employees will lobby to participate in new opportunities. The organizations' best and…
Now is the time for annual external and internal audit planning to be on every audit committee's calendar. Audit committee members consider evolving threats, new…
Artificial Intelligence
Evolving Risk Guidance and Considerations
Interest in artificial intelligence (AI) has surged since ChatGPT's public release. ChatGPT responded to my “What is ChatGPT?” query by proclaiming: “It can answer questions,…
Preventing Data Breaches by Learning from Competitors
Reading the Verizon Breach Report
What's going on with competitors always comes up in conversations between CPAs and their clients. Even within companies, executive management continuously relies on financial executives…
Preventing Data Breaches by Learning from Competitors
Reading the Verizon Breach Report
What's going on with competitors always comes up in conversations between CPAs and their clients. Even within companies, executive management continuously relies on financial executives…
ICYMI | Incident Responses to Cyber Attacks and Breaches
Considerations for Boards and Audit Committees
Recent media reports indicate that numerous organizations have suffered cyber breaches from increasingly sophisticated attacks. Victim organizations range from sensitive governmental and Fortune 500 companies to…
Incident Responses to Cyber Attacks and Breaches
Considerations for Boards and Audit Committees
Recent media reports indicate that numerous organizations have suffered cyber breaches from increasingly sophisticated attacks. Victim organizations range from sensitive governmental and Fortune 500 companies to…
Whether responding to heightened regulatory expectations or confirming trust in their organization's ability to repel a cyberattack, performing penetration testing (i.e., “pen test”) continues to…
The Audit Committee’s Oversight for Cybersecurity
Targeted Key Considerations
Audit committees face increasingly complex demands and expectations when it comes to cybersecurity. Oversight practices have expanded from an initial focus on protecting lost shareholder…
In Brief Software as a Service (SaaS) has gone from the cutting edge to a core technology for many businesses. But given the wide scope…
Cloud Computing
Friend or Foe?
In Brief Many organizations are moving some or all of the technology operations to the cloud to reap the various benefits such a relationship can…
From the earliest accountants in Egypt and Babylonia to the father of modern accounting Luca Pacioli, the accounting profession has led efforts throughout history to…
ICYMI | Developing a Student Community of Learning
Expanding Knowledge Using the Technical Committee Model
It is no secret that the accounting profession is experiencing changes, among them a newfound need to understand and use data analytics. Recognizing this reality,…