Publikasjoner

COSO-rammeverk

Realize the full potential of artificial intelligence

Applying the COSO Framework and principles to help implement and scale artificial intelligence.

Veiledere fra IIA Norge

Good Practice Guidelines for the Enterprise Risk Management Function

The target group for these guidelines is organisations that would like to either establish an Enterprise Risk Management function or develop their existing risk management function further.

Veiledere fra IIA Norge

Risk Management Maturity model

In need of a practical tool to assess the maturity of your risk management program? In 2017 Ayse Nordal and Ole Martin Kjørstad developed a practical maturity model. T...

COSO-rammeverk

COSO Thougt Paper: Creating and Protecting value

The guidance is based on successful practices used by organizations in taking an incremental, step-bystep approach to implementing ERM.

Veiledere fra IIA Norge

Modenhetsmodell risikostyring

Modellen tar derfor sikte på å håndtere svakhetene ved løsninger som måler modenhet i trappetrinn, for å beskrive kvaliteten på virksomhetens «risikostyringsprosess». I stedet tar den for seg egenskaper som til sammen sier noe om hvordan helhetlig risikostyring utøves i virksomheten.

Veiledere fra IIA Norge

Spørsmål et styre bør stille for å forstå hvordan en virksomhet styrer sine risikoer

Formålet med denne veilederen er å gi styret et verktøy formulert som spørsmål. Ved å belyse områdene spørsmålene dekker kan styret få en bedre forståelse av sentrale risikoområder for virksomheten og diskutere hvordan disse bør håndteres.

IIA International Guidance

Auditing Model Risk Management

Short of a crystal ball, there is no fool-proof way to predict outcomes in the financial services industry. However, models provide a powerful tool to empower organizations to make important decisions using information from a variety of sources.

IIA International Guidance

Auditing Third-party Risk Management

This practice guide is a useful tool to become better informed on risks related to third-party provider management. Risks across the full vendor life cycle are considered, including the appropriate sourcing, ongoing management, and termination of vendors.

Veiledere fra IIA Norge

Questions a Board may ask to understand how an organisation controls its risks

The holding of a position on a Board or in a control committee in an organisation is a considerable responsibility and may also lead to personal liability.

COSO-rammeverk

COSO ERM – Integrating with Strategy and Performance

The most widely recognized and applied risk management framework in the world, Enterprise Risk Management – Integrating with Strategy and Performance addresses the evolution of enterprise risk management and the need for organizations to improve their approach to managing risk to meet the demands of an evolving business environment. This new version replaces Enterprise Risk Management—Integrated Framework from 2004.