STRONG INTERNAL AUDIT DEPARTment
not only knows how an organization
monitors risk, but it also has an opinion
about how well the organization does it.
Organizations with good risk management
and governance processes monitor
risk proactively. Yet, despite their efforts,
, some organizations fail to monitor risk
effectively either because they are not
watching the right metrics, the reporting
is not accurate, or the right people are not
receiving well-balanced reports.