Mere compliance with a Framework is an insufficient audit approach; it is critical to assess whether it is current, timely, communicated broadly, and meets the needs of the business. The 4 biggest mistakes are:
With the release of the Final Draft of ISO9001:2015 this week and its focus on risk-based Compliance Management, I thought I would share our approach to Risk-Based Auditing from our experience with the likes of Defence Aviation and the Australian Quarantine Inspection Service, both leaders in the field. Continue reading
Last night I made the mistake of attending a local IT Forum meeting. In addition to the usual cliché ridden talk of establishing a “silicon valley” locally, perceptions and strategies were 20 year out of date and based on requiring government lead. Bureaucracy driven innovation, now that’ll work! Needless to say I left early. That got me thinking about the problem with our field of Governance, Risk and Compliance. Why, with the number of fertile minds that exist in our field, is it still a case of an irresistible force meeting an immovable object. The paradox I believe, like our would-be entrepreneurs above, is one of approach. Continue reading
ROI does not come for automating a process but from using it to add value. Value adding comes from targeting time and resources, risk based thinking, and Business Intelligence where they can deliver the greatest benefit to achieving the organisation’s strategic goals. Continue reading
Maybe “Greed is Good” but with a 300% increase in Shareholder Value Berkshire Hathaway proves Ethics pays better! But if Ethics pays, the traditional “zero tolerance” preach & penalize awareness training approach won’t get you there, nuturing will. Continue reading