Norman Marks

Blogger, speaker, and author considered by some a thought leader on internal audit, risk, governance, and GRC.

[Norman Marks @normanmarks]

@farman4x 7

[Norman Marks @normanmarks]

Is Risk Management a 2nd line function in the updated Three Lines Model? Does the model serve a valuable purpose any more? I discuss today at: https://t.co/EwNhtOkH74 via @normanmarks

[Norman Marks @normanmarks]

More great #risk stuff from COSO! Effective risk management enables decision-making and success.
There's a lot to like and I provide excerpts at: https://t.co/xKQD64HeSy via @normanmarks

[Norman Marks @normanmarks]

@farman4x 12

[Norman Marks @normanmarks]

Today, I discuss my five favorite #audits. My team and I have performed thousands, but these stand out, and I explain why.

What have been your favorite audits and why?

https://t.co/uUsuHga3nC via @normanmarks

[Norman Marks @normanmarks]

Is #risk appetite relevant?

Does it help management and the board lead the organization to success?

I discuss and ask whether it helps you in your personal life. If not, why does it make sense in your business life?

https://t.co/KYsQdO1kLL via @normanmarks

[Norman Marks @normanmarks]

@hicasamadim 3

[Norman Marks @normanmarks]

The #IIA mandates an approach that may lead you to perform the wrong audits because its #GIAS is not enterprise risk-based.

I discuss and share real-life examples in today's blog post.

What do you think?

https://t.co/Nnq7V3qGXU via @normanmarks

[Norman Marks @normanmarks]

There are some excellent insights in a new #risk survey. It includes several related to #AI.

I think it is worth considering and discussing.

What do you think?
https://t.co/Nklpkbi0sk via @normanmarks

#audit #GRC #boards #governance #IIA #ISACA

[Norman Marks @normanmarks]

Layoffs can be a huge risk for #risk and #audit practitioners. Serious risk and #control issues may result from a RIF that cuts the wrong people.

What should practitioners do? See https://t.co/hTypC63gh3 via @normanmarks

[Norman Marks @normanmarks]

A critical and difficult role for internal audit: providing assurance that #AI agents are doing what they should.

Idiscuss this and share some guidance on how to test an #AI at https://t.co/T8WIVmFoIJ via @normanmarks

[Norman Marks @normanmarks]

#COSO has just issue new #ERM guidance. How good is it? I highlight some fine content and point out its missing content.

https://t.co/w2aBEd40nK via @normanmarks

[Norman Marks @normanmarks]

Its confirmation bias, not conformance bias.

[Norman Marks @normanmarks]

Can you trust ChatGPT? I share how it made up facts based on its conformance bias. Its answer was influenced by other information and was wrong. It even admitted it.

Do you have controls to ensure your #AI is not making stuff up?

https://t.co/8JkceMk6gu via @normanmarks

[Norman Marks @normanmarks]

The Clean Audit Report. Is it valuable or does it mean the #audit was a waste of time?

I discuss today at:
https://t.co/v6SfWRCJtX via @normanmarks

#IIA #ISACA #GRC #governance

[Norman Marks @normanmarks]

@bucfanjoe @Arden_2210 Or:

88-70=18
70-54=16
54-40=14
40-28 (missing)=12
28-18 (answer)=10

[Norman Marks @normanmarks]

https://t.co/uanenFhi0B

[Norman Marks @normanmarks]

Can and should you come up with a quantification of #cyber #risk? Does that make sense? Does it help with making business decisions on how much to invest?

I discuss in today's blog post at:
https://t.co/KQ1ByHDHK5 via @normanmarks

#audit #GRC #IIA #ISACA #governance #ERM

[Norman Marks @normanmarks]

What is in the future for internal #auditing? How will we evolve as businesses, processes, and controls evolve?

As I discuss in today's blog post, it's so much more than learning to use #AI ourselves.

Don't delay.

What do you think?

https://t.co/MWgaCwqOni via @normanmarks

[Norman Marks @normanmarks]

Does it make sense to talk about #riskappetite when it comes to #fraud? Is there such a thing as an amount of #risk that should be quantified in monetary terms?Is there a better way?
I discuss in today's blog post at https://t.co/n5JyxZEAdk