Articles on EQA, internal audit, risk management, and the IIA Standards 2024. Hand-written, no marketing. For boards and their audit/risk functions who want to understand the practical side of standards, from theory to boardroom.
The IIA conformance scale looks simple: Full, General, Partial, Non. In practice, 70 % of discussions get stuck on the distinction between the middle two. A calm explanation.
A workable risk appetite statement fits on two pages: one with qualitative tolerance statements per category, one with the quantitative limits. Here is the structure we use with boards.
Nine months before the deadline, organisations began DORA readiness. What ran smoothly, what got stuck, and what I would advise differently a year later.
QAIP is not an internal audit policy. It is not an annual check. And it is not a tool. An explanation with practical examples of what it does mean, and how to get calm with it.
In our Risk Health Check, AI runs on document mapping, inconsistency detection, and standards matching. Scoring remains the work of humans. Here is why, and what that means technically.
