-
Dark Towers by David Enrich: Summary and Lessons for Auditors
Enrich’s history of Deutsche Bank, summarised for auditors: the transformation and its control failures, the main penalties checked against regulators’ releases and updated to 2026, the Trump record…
Updated
·
30–45 minutes -
Enterprise Risk Management by James Lam: Summary and Lessons for Auditors
Lam’s practitioner’s manual on ERM, summarised for auditors: the seven lessons, the seven components, the ten predictions and how they fared, three later failures, COSO 2017 and the…
Updated
·
32–48 minutes -
The Bankers’ New Clothes by Admati and Hellwig: Summary and Lessons for Auditors
Admati and Hellwig’s case for far more bank equity, summarised for auditors: the claims and answers, the arithmetic of leverage, the 2024 edition and the 2023 failures, US…
Updated
·
29–43 minutes -
No One Would Listen by Harry Markopolos: Summary and Lessons for Auditors
Markopolos’s account of exposing Madoff, summarised for auditors: the red flags, the SEC inspector general’s findings, the aftermath to 2026, nine ideas, a vocabulary, an audit map and…
Updated
·
29–43 minutes -
Money Men by Dan McCrum: The Wirecard Fraud, Summarised for Auditors
Dan McCrum’s account of the Wirecard fraud, summarised for auditors: the timeline, the mechanics, the seven gates that failed, a vocabulary, a failure-by-failure audit map and a worked…
Updated
·
20–30 minutes -
Portfolio Heads and Divisional Chief Auditors: Leading Audit at Business-Line Level
Between the CAE and the audit directors in a large function sits a layer nobody describes: portfolio heads and divisional chief auditors at managing director grade, each owning…
Updated
·
18–28 minutes -
Auditing Insurance Claims: The Core Process From First Notice of Loss to Settlement
Claims is the insurer’s product delivered: the promise sold at underwriting is kept or broken by an adjuster, under time pressure, with authority to spend the company’s money.…
Updated
·
22–34 minutes -
Auditing the Underwriting Process: Where Credit Risk Is Born and How to Test It
Every credit loss a lender ever takes was approved by someone, on some day, against some policy, and the underwriting process is where the decision was made. This…
Updated
·
22–33 minutes -
Internal Audit in Telecom and Media: The Complete Guide to Networks, Billing and Content
A telecom operator bills hundreds of millions of events a month from systems that nobody fully understands, runs networks that governments treat as critical infrastructure, and sells through…
Updated
·
25–38 minutes -
Internal Audit in Higher Education and Nonprofits: The Complete Guide
Universities and nonprofits exist to pursue a mission with other people’s money under conditions those people attached, and internal audit in both sectors is the assurance that the…
Updated
·
23–35 minutes -
Internal Audit in Energy and Utilities: The Complete Guide to Rates, Reliability and Risk
Utilities are the industry where the regulator sets the price, the public cannot refuse the product, and a failure of the asset can start a wildfire, freeze a…
Updated
·
24–35 minutes -
Internal Audit in Retail: The Complete Guide to Stores, Shrink, Omnichannel and Supply Chain
Retail is the industry of small transactions at enormous volume, performed by a workforce that turns over every year in locations head office rarely sees, and internal audit’s…
Updated
·
22–33 minutes -
Internal Audit in Government: The Complete Guide to Public-Sector Assurance
Government internal audit answers to the public rather than to shareholders, publishes what it finds, works under standards that carry the force of law and audits an organization…
Updated
·
21–32 minutes -
Internal Audit in Manufacturing: The Complete Guide to Plants, Supply Chains and Cost
Manufacturing is where internal audit was born, and it remains the industry where the function’s work is most physical: inventory that can be counted, scrap that can be…
Updated
·
22–33 minutes -
Internal Audit at Tech and SaaS Companies: The Complete Guide to a Function Built Fast
Technology companies build their internal audit functions late, fast and under a deadline that is usually an IPO, and the function that results looks different from any other…
Updated
·
22–33 minutes -
Internal Audit in Healthcare: The Complete Guide for Providers and Payers
Healthcare is the industry where the customer rarely pays the bill, the price is set by the payer, and the law treats a billing error as potential fraud,…
Updated
·
21–32 minutes -
Internal Audit in Insurance: The Complete Guide to Auditing Insurers and Reinsurers
Insurance is the industry where the product is a promise priced before its cost is known, and internal audit’s job is shaped by that inversion: reserves are estimates,…
Updated
·
22–33 minutes -
How to Audit HIPAA Compliance: Privacy Rule, Security Rule and Breach Notification Assurance
HIPAA is the rule set every healthcare organization claims to comply with and the one whose enforcement record shows how often the claim is wrong: the Office for…
Updated
·
21–32 minutes -
Yellow Book vs IIA Standards: GAGAS for Internal Auditors, Mapped Standard by Standard
Government internal auditors in the United States work under two sets of standards: the Yellow Book, GAO’s Government Auditing Standards (GAGAS, 2024 revision), which many audit organizations are…
Updated
·
22–32 minutes -
Building an Operational Risk Framework: Taxonomy, Tools and Governance
An operational risk framework is the machinery through which an organization sees the losses that come from its own processes, people, systems and external events before they arrive,…
Updated
·
21–32 minutes -
SR 11-7 and SR 26-2 Explained: The Model Risk Guidance, From 2011 to 2026
For fifteen years SR 11-7, the 2011 interagency Supervisory Guidance on Model Risk Management, defined how US banks govern their models, and its vocabulary (effective challenge, conceptual soundness,…
Updated
·
18–27 minutes -
PD, LGD and EAD Explained: The Building Blocks of Credit Risk Measurement
Every quantitative statement about credit risk rests on three parameters: the probability that a borrower defaults (PD), the share of the exposure lost when it does (LGD) and…
Updated
·
20–30 minutes -
Liquidity Stress Testing: Scenarios, Horizons and the Death Spiral Dynamics
A liquidity stress test asks how many days an institution survives a defined stress before it runs out of cash and unencumbered collateral, and what it would have…
Updated
·
22–33 minutes -
How to Audit Model Risk Management End to End: Inventory, Validation, Remediation
Model risk management has a framework audit of its own, and the 2026 interagency guidance that replaced SR 11-7 changed what the auditor measures against. This guide gives…
Updated
·
18–28 minutes -
MRAs, MRIAs and Consent Orders Explained: A Field Guide to Bank Supervisory Findings
Bank supervisors have a vocabulary for what they find, and the words carry consequences: a matter requiring attention is a deficiency management must fix; a matter requiring immediate…
Updated
·
18–27 minutes -
How to Audit the BSA/AML Program: Independent Testing That Satisfies Examiners
Independent testing is one of the pillars of a bank’s anti-money laundering program and the one internal audit owns. This guide gives the test as examiners expect it:…
Updated
·
18–27 minutes -
The Bank Internal Audit Universe: A Worked Example With 126 Entities, Ratings and Cycles
Practitioners ask for a real bank audit universe and nobody publishes one. This guide does: the full 126-entity universe of Lakeshore Bancorp, the $9 billion regional bank used…
Updated
·
19–29 minutes -
Internal Audit in Banking: The Complete Guide to the Most Regulated Audit Job
Bank internal audit is the same profession as everywhere else and a different job. This guide explains why: the supervisory expectations that shape the function (the interagency policy…
Updated
·
19–29 minutes -
Audit Software for Banks and Credit Unions: Regulatory Issues, Exam Support and Fit
What regulated institutions need from audit software that a generic buyer does not, the nine platforms with a documented bank or credit union base, certifications and hosting product…
Updated
·
18–27 minutes -
MetricStream vs SAI360: Two Financial-Services GRC Suites Compared for Audit
What MetricStream and SAI360 are and who owns each, how their audit and SOX modules, editions, and 2025-2026 AI releases actually differ, a head-to-head scorecard and fit-by-situation table…
Updated
·
21–32 minutes