In the world of Internal Controls or GRC (Governance, Risk, and Compliance), there is tons more value we can extract from documentation and processes, but too many people leave that value on the table. And that’s where the topic of minutes comes in. They are obviously...

In my many years on the ground (and in the trenches) running internal controls* programs, I can tell you that internal controls programs are a goldmine of opportunity. But only when you “get” what audit and control concepts are about (and not about).  Unfortunately,...

Risk Management is something I get asked about because of the name of our consulting firm, and of course it’s a subject that matters a lot to me and our clients. To give you a quick definition, Risk Management is a process for organizations to identify, rank, track,...