Auditing at the speed of risk requires internal auditors to rethink the way we work. Agile auditing provides a path forward that blends the best elements from agile project management and internal audit best practices. Leaders in internal audit are ready to incorporate an agile audit mindset in their departments, but most of the available resources provide theoretical ideas. Even when outside consultants lead an agile transition, the consultants primarily focus on adding agile ceremonies without addressing the fundamental mindset change required for an agile audit transformation. This book provides a practical guide for audit leaders to follow as a playbook for implementing agile across their department, impacting every facet of the audit lifecycle, and addressing the mental shift required for making a lasting change. Every chapter includes discussion questions to facilitate discourse or just to help you analyze your own department. Next, we look at a typical internal audit department as they attempt the transition from a traditional audit methodology to agile auditing so we can learn from their missteps and successes. The guidance in Agile Audit Transformation and Beyond includes the basics of agile auditing, practical directions for shifting each phase of the audit life cycle, common hurdles faced during the transition, and forward-looking thought leadership on expanding beyond internal audit into agile assurance.

Cognitive Risk is a book about the least understood but most pervasive risk to mankind – human decision-making. Cognitive risks are subconscious and unconscious influence factors on human decision-making: heuristics and biases. To understand the scope of cognitive risk, we look at case studies, corporate and organizational failure, and the science that explains why we systemically make errors in judgment and repeat the same errors. The book takes a multidisciplinary and pedestrian stroll through behavioral science with a light touch, using stories to explain why we consistently make cognitive errors that not only increase risks but also simultaneously fail to recognize these errors in ourselves or our organizations. This science has deep roots in organizational behavior, psychology, human factors, cognitive science, and behavioral science all influenced by classic philosophers and enabled through advanced analytics and artificial intelligence. The point of the book is simple. Humans persist with bounded rationality, but as the speed of information, data, money, and life in general accelerates, we will need the right tools to not only keep pace but to survive and thrive. In light of all these factors that complicate risk, the book offers a foundational solution. A cognitive risk framework for enterprise risk management and cyber security. There are five pillars in a cognitive risk framework with five levels of maturity, yet there is no universally prescribed maturity level. It is more a journey of different paths. Each organization will pursue its own path, but the goal is the same – to minimize the errors that could have been avoided. We explain why risks are hard to discuss and why we systematically ignore the aggregation of these risks hidden in collective decision-making in an organization. The cognitive risk framework is a framework designed to explore the two most complex risks organizations face: uncertainty and decision-making under uncertainty. The first pillar is cognitive governance, which is a structured approach for institutionalizing rational decision-making across the enterprise. Each pillar is complimentary and builds on the next in a succession of continuous learning. There is no endpoint because the pillars evolve with technology. Enterprise risk is a team effort in risk intelligence grounded in a framework for good decision-making. We close with a call to become designers of risk solutions enabled by the right technology and nurtured by collaboration. We hope you enjoy the book with this context.

1. Equip professionals with holistic and structured knowledge regarding establishing and implementing privacy framework and program. 2. Gain practical guidance, tools, and templates to manage complex privacy and data protection subjects with cross-functional teams. 3. Gain the knowledge in measuring privacy program and operating it in a more efficient and effective manner.

Let’s be realistic here. Ordinary K-12 educators don’t know what "cybersecurity" is and could probably care less about incorporating it into their lesson plans. Yet, teaching cybersecurity is a critical national priority. So, this book aims to cut through the usual roadblocks of confusing technical jargon and industry stovepipes and give you, the classroom teacher, a unified understanding of what must be taught. That advice is based on a single authoritative definition of the field. In 2017, the three societies that write the standards for computing, software engineering, and information systems came together to define a single model of the field of cybersecurity. It is based on eight building blocks. That definition is presented here. However, we also understand that secondary school teachers are not experts in arcane subjects like software, component, human, or societal security. Therefore, this book explains cybersecurity through a simple story rather than diving into execution details. Tom, a high school teacher, and Lucy, a middle school teacher, are tasked by their district to develop a cybersecurity course for students in their respective schools. They are aided in this by "the Doc," an odd fellow but an expert in the field. Together they work their way through the content of each topic area, helping each other to understand what the student at each level in the educational process has to learn. The explanations are simple, easy to understand, and geared toward the teaching aspect rather than the actual performance of cybersecurity work. Each chapter is a self-contained explanation of the cybersecurity content in that area geared to teaching both middle and high school audiences. The eight component areas are standalone in that they can be taught separately. But the real value lies in the comprehensive but easy-to-understand picture that the reader will get of a complicated field.

Beyond Agile Auditing shows auditors and organizational leaders how to revolutionize the audit experience. For decades, auditors have unintentionally struck fear in their clients. They are rarely welcomed into an area with open arms and are often viewed as one more obstacle to delivering value. But internal audit serves a vital function in reducing risk and ensuring success for all organizations. In Beyond Agile Auditing, experienced audit and risk management leader Clarissa Lucas shows organizations how to go beyond collaboration and build a partnership between auditors and clients. By leveraging this partnership, organizations can experience more value-added audit work, faster time to results (and resolution), greater engagement and satisfaction from all parties involved, and gain a competitive advantage in the marketplace, By building upon the work of the DevOps community, which reinvented the relationship between two groups that historically saw each other as adversaries and obstacles, Lucas applies new and better ways of working to the audit process. In this reimagined world, auditors (as well as other assurance providers) work closely with their clients to become strategic differentiators instead of obstacles, providing stakeholders value they never imagined. Come join us in this brave new world of audit.

The 21st century has been host to a number of information systems technologies in the areas of science, automotive, aviation and supply chain, among others. But perhaps one of its most disruptive is blockchain technology whose origin dates to only 2008, when an individual (or perhaps a group of individuals) using the pseudonym Satoshi Nakamoto published a white paper entitled Bitcoin: A peer-to-peer electronic cash system in an attempt to address the threat of “double- spending” in digital currency. Today, many top-notch global organizations are already using or planning to use blockchain technology as a secure, robust and cutting-edge technology to better serve customers. The list includes such well-known corporate entities as JP Morgan, Royal Bank of Canada, Bank of America, IBM and Walmart. The tamper-proof attributes of blockchain, leading to immutable sets of transaction records, represent a higher quality of evidence for internal and external auditors. Blockchain technology will impact the performance of the audit engagement due to its attributes, as the technology can seamlessly complement traditional auditing techniques. Furthermore, various fraud schemes related to financial reporting, such as the recording of fictitious revenues, could be avoided or at least greatly mitigated. Frauds related to missing, duplicated and identical invoices can also be greatly curtailed. As a result, the advent of blockchain will enable auditors to reduce substantive testing as inherent and control audit risks will be reduced thereby greatly improving an audit’s detection risk. As such, the continuing use and popularity of blockchain will mean that auditors and information systems security professionals will need to deepen their knowledge of this disruptive technology. If you are looking for a comprehensive study and reference source on blockchain technology, look no further than The Auditor’s Guide to Blockchain Technology: Architecture, Use Cases, Security and Assurance. This title is a must read for all security and assurance professionals and students looking to become more proficient at auditing this new and disruptive technology.

Future IT leaders won't be technology leaders, they'll be business leaders who understand technology. Leading the Digital Workforce takes a fresh look at technology leadership, exploring how to lead and manage in today’s digital workplace where the pace of change is exponential. This book walks you through building personal resiliency and avoiding stress and burnout to creating a strategy, building a high-performance team, and examining how technology will change the workforce of the future. Technology leadership requires a unique set of skills, which is why traditional leadership approaches don't always work. This book provides actionable advice on how to create a culture of innovation while driving successful change initiatives. Leading the Digital Workforce provides strategies for empowering people, optimizing processes, and inspiring innovation. This book offers insights into managing change, leveraging technology, and building strong relationships within your organization, including how to understand and work with company culture. Finally, it shares strategies for using technology and innovation to create a competitive edge to unlock new opportunities. Leading the Digital Workforce is essential reading for IT leaders who want to develop their skills, stay ahead of the digital curve, and lead their organizations into the future. No matter if you’re a new IT leader, an aspiring one, or a seasoned leader who’s been at it for years, there’s something in this book that will help you level up your game.

The book will review how new and old privacy-preserving techniques can provide practical protection for data in transit, use, and rest. We will position techniques like Data Integrity and Ledger and will provide practical lessons in Data Integrity, Trust, and data’s business utility. Based on a good understanding of new and old technologies, emerging trends, and a broad experience from many projects in this domain, this book will provide a unique context about the WHY (requirements and drivers), WHAT (what to do), and HOW (how to implement), as well as reviewing the current state and major forces representing challenges or driving change, what you should be trying to achieve and how you can do it, including discussions of different options. We will also discuss WHERE (in systems) and WHEN (roadmap). Unlike other general or academic texts, this book is being written to offer practical general advice, outline actionable strategies, and include templates for immediate use. It contains diagrams needed to describe the topics and Use Cases and presents current real-world issues and technological mitigation strategies. The inclusion of the risks to both owners and custodians provides a strong case for why people should care. This book reflects the perspective of a Chief Technology Officer (CTO) and Chief Security Strategist (CSS). The Author has worked in and with startups and some of the largest organizations in the world, and this book is intended for board members, senior decision-makers, and global government policy officials—CISOs, CSOs, CPOs, CTOs, auditors, consultants, investors, and other people interested in data privacy and security. The Author also embeds a business perspective, answering the question of why this an important topic for the board, audit committee, and senior management regarding achieving business objectives, strategies, and goals and applying the risk appetite and tolerance. The focus is on Technical Visionary Leaders, including CTO, Chief Data Officer, Chief Privacy Officer, EVP/SVP/VP of Technology, Analytics, Data Architect, Chief Information Officer, EVP/SVP/VP of I.T., Chief Information Security Officer (CISO), Chief Risk Officer, Chief Compliance Officer, Chief Security Officer (CSO), EVP/SVP/VP of Security, Risk Compliance, and Governance. It can also be interesting reading for privacy regulators, especially those in developed nations with specialist privacy oversight agencies (government departments) across their jurisdictions (e.g., federal and state levels).

Becoming a customer-focused, versatile, and resilient organization is the goal of many of the agile transformations we are seeing in Germany and Austria, regardless of company size or industry. The journey for organizations is not easy - sometimes it is even bumpier than it needs to be. One thing is certain: there is no single right way - no "happy path" - to achieve an agile transformation, because the individual requirements of countless organizations cannot be met by a one-size-fits-all approach to change. However, there are tools that make the journey easier and sustainable success more likely. Even when transformations go through a crisis - which is more common than you might think - there are reasons to remain optimistic. The authors of this book work at the heart of transformation activities. They design strategies for agile transformations, bring derailed transformations back on track, and guide people in the organization until they are able to design the next stages of change themselves. All of the approaches presented in this book are backed by experience and proven to work.

** Business Book Awards 2023 Finalist ** If you have an interest in agility but you’re not working specifically in IT, this book is for you. It shows how agile principles can be adapted and applied in almost any sector to manage projects more effectively. It explains what agility looks like for ALL aspects of the management of projects - from leadership, roles and responsibilities through planning, implementation, change control, risk management and more. Whether you’re a new or seasoned project professional, or an executive or senior manager seeking to generate value by bringing agility beyond the IT department, Adrian Pyne shows you how an organization can become agile for projects, and what that journey looks like. Based on over 30 years’ experience and drawing on case studies from multiple sectors, this is the essential guide to managing projects more effectively at a time when agility and sustainability matter more than ever. A project professional for over 30 years, Adrian Pyne has led change in 11 industries and in the public sector, in the UK and abroad. The author of books on programme management and agile governance and assurance, he has contributed to the evolution of programme, portfolio and PMO standards and is a regular speaker, visiting lecturer, blogger and researcher.