I have a couple of suggestions (with a lot of detail) that will help a risk, audit, security, or other practitioner be successful and enjoy their work.
But first, I send my congratulations to Mohsin Aqeel for his recent LinkedIn post, Welcome to Internal Audit – Hard Skills to Build in Your First 2 Years.
He makes several good points, especially this one for internal auditors:
Ask…
-
-
- Why was this area selected in the audit plan?
- How was risk assessed?
- What are we expecting from this engagement?
-
Whether you are in your first two years or a seasoned veteran, I have two suggestions.
1. Understand the business
The better you understand the business, the better you will be able to support it.
You may never know as much as those who are leading or in the trenches; but the more you know, the better your ability to assess its effectiveness and efficiency, see opportunities for improvement, and work with management to get needed changes made.
Do all of these, not just once but on a regular basis:
- Meet with and listen to leaders of the business. (Notice that I didn’t say talk to them; I said listen to them. Read and think about this article.) Get them to talk about:
- How it works and what they are trying to achieve
- How well it works
- Where they spend their time (a very valuable question to ask)
- Their…
