Auditing culture and behavior
The fundamental idea behind cultural risk is that, on paper, things may appear to be fine, but, in practice, reality is not the same.
Håkan Jankensgård is Associate Professor at Lund University School of Economics in Sweden and holds a PhD in risk management. He is keenly interested in developing a practical approach to Enterprise Risk Management (ERM). We had an opportunity to ask Håkan a few key questions to sound out his approach to ERM.
In a previous blog we dismissed talk of coronavirus as a black swan event and introduced the concept of grey rhinos – the known unknowns that are seen but not addressed. Similarly, we suggested that climate change is a further grey rhino specimen.
This report from the IIA serves as a how-to guide to assist internal auditors in assessing their current level of preparedness regarding privacy and data protection issues, particularly as their approaches relate to the present state of the profession overall.
A quick google search of “Black Swan” “Corona” reveals numerous articles have already been written equating the effects of the Coronavirus with a Black Swan. Is this a fair comparison? A “Black Swan” is an event which is both random and unpredictable. A key definition is that the event was unthought of, unimaginable beforehand. Was it? Most definitely not. It was a “Grey Rhino.”