Archive - September 2017

Digital Transformation Tops Internal Audit Priorities for Financial Institutions in 2017

Financial institutions are undergoing profound change as digital technology sweeps the financial services industry (FSI), bringing web-enabled products and services, as well as new competition and new risks. The internal audit (IA) function is...

Meeting the Challenges of NYDFS’ Financial Cybersecurity Regulation

Since March 1, 2017, banks, insurers and other financial services companies regulated by the New York Department of Financial Services (NYDFS) must maintain a cybersecurity program to protect consumers and ensure the safety and soundness of New York...

Multidisciplinary GRC Requires a Balanced Approach to a Common Language, Scope Management and Program Management

Despite great strides in governance, risk and compliance (GRC) software, it’s unlikely we will ever see a single plug-and-play software solution that satisfies all the demands of multidisciplinary GRC. Instead, GRC leaders who want to make real...

GDPR: Developing Your Compliance Program

As we discussed here and here, the new General Data Protection Regulation (GDPR), is scheduled to become effective May 25, 2018. It represents the most important change in data regulation in 20 years, and it applies to any company that collects or...

PCAOB Issues Preview of 2017 Inspection Process of Registered Auditors and Their Audits of Issuers

On August 30, the PCAOB published a Staff Inspection Brief that offers guidance into the plan, scope and objectives of its 2017 inspections of registered auditors and their audits of issuers. This is the third year that the PCAOB has provided...