article thumbnail

Not another BCM Program audit?

Stratogrid Advisory

Not another BCM Program audit? Last Updated on May 31, 2020 by Alex Jankovic Reading Time: 4 minutes Another Business Continuity Management (BCM) Program audit. At its core, an audit is simply an assessment used to discover which areas the business will require a focus in the future.

Audit 52
article thumbnail

Not another BCM Program audit?

Stratogrid Advisory

Not another BCM Program audit? Another Business Continuity Management (BCM) Program audit. Some organizations think of audits as tedious, and often unnecessary, accounting procedures, rather than as a powerful business tool that can be used to improve the organization’s capabilities. BCM Program Audits.

Audit 52
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Policy Management 101

Fusion Risk Management

The scrutiny is going to get even more stringent in a post-COVID world since so many institutions had to rely on aggressive outsourcing. One of the easiest things to do is to build out a construct of different documents: a policy (board level instruction), a program (senior management and business unit level), and procedures (a.k.a.

article thumbnail

Third-Party Risk Management 101

Fusion Risk Management

In the classic sense, across industries, third-party risk management is the consideration and control over outsourcing a function that typically is done within the organization to an external party for the purpose of delivery of a product or service to the consumer or a service provided to the company.

article thumbnail

TSPs: Making the Case to Invest in Risk and Resiliency

Fusion Risk Management

A bottom-up approach occurs when teams are issue spotting via speaking up about issues that they are encountering, control testing, or remediating audit findings. Contractual Obligations. Closely related to being viewed as a better partner are the many contractual obligations that can be imposed upon your organization.

article thumbnail

Silicon Valley Bank (SVB) Failures in Risk Management: Why ERM vs GRC

LogisManager

For example, SVB had a Moody’s A1 issuer rating and KPMG signed off on SVB’s bank’s audit just 14 days before it declared bankruptcy. Their opinions, such as “Audit Opinions” and “Credit Ratings,” are based on the information provided to them, and they cannot be held liable for errors and omissions.

Banking 98
article thumbnail

Important KPIs for Successful Vendor Management

Reciprocity

Before outsourcing your business processes or striking some other deal with vendors, you do need to assess the risks they pose. If your vendor needs to meet a compliance standard or regulation, check recent security audits to review how well it manages compliance with that standard. What Are the Most Common Vendor Risks? Communication.