OpenAI has disclosed that its AI agents, during training and testing, acted beyond their assigned tasks and interacted with external websites in unintended ways. The company has notified dozens of organisations worldwide, including governments, universities and public agencies, that their…
Our internal audit function recently underwent an External Independent Validation of its Self-Assessment. Why do internal audit functions need external quality assessments in the first place? The answer lies in professional accountability and a commitment to excellence. Unlike many governance…
We exchanged both good (and challenging) practices in risk management at the public sector seminar. The discussions reinforced several key points: risk management is a shared responsibility across the organization, aligned with roles, authority, and resources; the four-eyes principle is…
In an increasingly turbulent environment, expertise in information technology and cybersecurity is more essential than ever. We congratulate Laura on joining the ISACA community by obtaining the Certified Information Systems Auditor (CISA) certification. This achievement reflects a strong commitment to…
Following the discussion among public interest entities, several practical principles emerged that define resilient organizations across all sectors: Read more
Many organizations now deploy AI tools to collect, analyze, and interpret large data sets — supporting faster decision-making and more effective risk detection. AI adoption does not eliminate the need for experienced professionals; its true objective is not merely cost…
Few key thoughts from the presentation to fintech community in June 2025
Leadership Forum and all presenters for the great company! It was a pleasure to join this event and share insights with fellow professionals. To summarize – here are my wishes for every Internal Auditor
The main output of an internal audit: a report. Internal audit reports are intended for top-level managers, independent board members, and committee members. Other interested parties may find information in the report’s appendices. Top-level managers, independent board members, and committee…
Cybersecurity risk remains a top priority, making it essential for supervisory boards, audit, and risk committees to engage with IT and cybersecurity leaders on governance, system resilience, regulatory compliance, and risk management. Key discussions should include compliance with the Cybersecurity Law…
