A selection of blog posts by James Paterson.
Coronavirus: Business not as usual…
and that applies to internal audit as well…
The following article has had over 500 views in 2 days on LinkedIn, I hope you find it helpful.
I’ve just facilitated a two-day head of audit event, with only one person pulling out because of COVID19. However, it was inevitably a key topic of conversation, and here are some reflections that might be of interest:
COVID19 has reinforced, again, the problem with a “failure of imagination” in many risk management processes.
A failure of imagination was one of the key learnings from the 9/11 tragedy, and it looks like many organisations have found themselves with a similar problem with COVID19, and all its knock-on impacts. It may not be a big priority right now, but all organisations who have felt blind-sided by what has happened should be prepared, at the right time, to take a long hard look at their risk management processes.
What other risks are there where might we be thinking “that will never happen”?
How do we make sure we prioritise impact over probability?
How good is your organisation in thinking through the knock-on consequences of one risk on other aspects of its operations? Continue Reading
2019 ECIIA Conference – Plenary presentation
Does internal audit have a blind spot concerning organizational politics?
I was pleased to be asked to present at the 2019 ECIIA conference in Luxembourg. It was an honour and a privilege to present to around 700 attendees. The key messages I delivered were:
- We (in internal audit) may not be doing enough to proactively identify and manage political pressure:
- First at the level of (audit) teams, but also at the level of the IIA itself; and
- The wrong sort of politics may even be a problem within the Internal Audit profession
I defined organizational politics as:
- The networking, influencing approaches, and use power that managers deploy to get the organization to make a decision they want, and/or
- The strategies and tactics managers use to slow down decision making, or even to stop decisions being made..
Organizational politics can be seen in a good or bad light, depending on whether the political activity is genuinely for an organizational benefit, compared to primarily benefiting an individual’s career, power and/or influence.
Culture and behaviour and Auditing Culture
A primer (part 1)
I’ve just run another course on Culture and auditing culture in London with 12 in attendance. This brief article gives a summary of key points concerning common misperceptions, and is offered as a counter-balance to much of what is currently being said about this topic. The second article will discuss specific approaches that, on my analysis, will lead to long-term progress in this arena.
Expectations of those attending
We discussed why people had come to the course and they said:
- “Our new company is defining its culture, so we want to input to that”;
- “We have many mergers and acquisitions and see culture issues as businesses try to merge, which we want to better understand”;
- “We know it’s important, and want to think about a culture audit universe”;
- “Auditing culture came up as an External Quality Assessment topic, so we want to learn about it”;
- “Senior stakeholders have been talking about it, so we wanted to know more”;
- “Our internal audits of risks point to root causes of issues coming from culture, so want to be clearer about what’s going on”;
- The remaining 6 attendees (50%) explained they had put a culture on their audit plan because it is a current hot topic, and now wanted to be clearer about how to do an audit.
Root cause analysis for internal audit – CPD credit
I have released an article, with CPD credit, on Root cause analysis for internal audit.
The article and a Q&A (to gain 1 CPD) can be found here.
Corporate Governance Theatre: Risk culture, plausible deniability and wilful blindness
Very pleased to have been asked by the ACCA to write an article on ‘Corporate Governance Theatre: Risk culture, plausible deniability and wilful blindness’.
An overview follows immediately below, after which is a link to the full article on the ACCA’s website.
Background and introduction
My role as a consultant is to work closely with clients on governance, risk, compliance (GRC) and assurance challenges. Our aim is to ensure GRC improvements are genuinely welcomed and used by business managers, alongside risk, compliance and audit professionals; balancing rigour with pragmatism and cultural fit.
Earlier in 2018, I wrote an article on why we continue to get GRC and assurance surprises of some magnitude, despite management assurances and auditor sign offs. My perspective is that too often we have ‘corporate governance theatre’. Things look good in many ways, but – just below the surface – there are ‘hairline cracks’ that are missed by management, boards and even auditors and regulators, until it is too late.
After writing this article, I was happy to be asked by ACCA to write an article on risk culture – including ‘plausible deniability’ and ‘wilful blindness’, which are part of the theatre problem – and here this article:
- provides an overview of plausible deniability, wilful blindness and associated phenomena
- how and why these behaviours arise
- warning signs to watch out for
- practical steps in the context of GRC to make meaningful progress.
Note that, in my experience, progress is not about implementing new systems (though these may help), but rather by looking at what is currently being done from a different angle, with the objective of ‘getting real’ about the issues, and potential gaps, that matter the most.
Read the full article here
Contact
Contact and appointments:
Risk & Assurance Insights
T: +44 (0)7802 868914
Email
Please also use our contact form
Risk Assurance Testimonials - Services
Lean Auditing Testimonials - Services
James had conversations with us and read through our existing methodology documentation, before proposing an agenda and associated materials for a workshop. We had a very enjoyable and energising time, and James’ experience and facilitation style helped us to identify a raft of efficiency ideas, two of which we prioritised and worked on in more detail at the workshop itself.
Coaching Testimonials - Services
James has been excellent in terms of helping me to focus on key themes and messaging specific to my organisation, whilst ensuring that the general assurance strategy we have drawn up reflects best practice. I have enjoyed our sessions together, and I think a large part of that is the way James has not imposed a standard one size fits all approach, rather working with me to really understand our business and drawing on my knowledge to shape a suitable risk, audit and assurance strategy. This has all been done within a fairly demanding timeframe so I have appreciated James’ flexibility in working around my day to day business demands. Consequently I feel the output is very much tailored to our business, and represents an efficient and effective investment of time and money.
I look forward to working with James in the future and would certainly recommend him for any work of this nature given the experience that I have had.
Audit Team Testimonials - Services
James brought very strong project management skills and a clarity of insight to the project. He was extremely effective at simply getting things done and maintained his sense of humour during what was a challenging time for all of us. I am pleased to say that we met all the deadlines and the department is now functioning as it should.
Lean Auditing Driving Added Value & Efficiency in Internal Audit - Testimonials
Lean Auditing Testimonials - Training