Tag Archives: accountancy

4Q for quality assurance

To go beyond the usual, downtrodden ‘quality in assurance’ epitome of dullness, herewith something worth considering. Which is about the assessment of controls, to establish their quality (‘qualifications’) on four, subsequent, characteristics [taking some liberties, and applying interpretation and stretching]: … Continue reading

Posted in ERM, GRC, Information Risk Management, Information Security, Innovation (technologicallly driven) | Tagged , , , , , , , , , , , , , | Leave a comment

“Compliance auditing”

Is two distinct things, or a contradictio if taken as one. The ‘compliance’ thing is just rote checking of the implementation of all petty rules. The Certificate certification type. If I’d even need to say more…Some even claim that by … Continue reading

Posted in ERM, GRC, Information Risk Management, Sociological, psychological notes | Tagged , , , , , | Leave a comment

Two stikes and you’re out of third party standards

What a wobbling title. When already for a second time (here), the European Supreme Court has ruled that laws requiring broad (meta)data retention for trawling are illegal per se, with a minute few exceptions, making it illegal to consider it … Continue reading

Posted in ERM, GRC, Information Risk Management, Information Security, Innovation (technologicallly driven), Privacy, Sociological, psychological notes | Tagged , , , , , , , , , , | Leave a comment

Low standards

The compliance check-box approach is an atrocious thing for and to many things and reasons, but has been induced by the very growth of the industry. Since all margin calls at all controls and controls objectives achievement have been whipped … Continue reading

Posted in ERM, GRC, Information Risk Management, Information Security, Sociological, psychological notes | Tagged , , , , , , , | 1 Comment

Some quick notes on Audit / service development

An invitation for co-development or I go it alone… [This also being a copyright / idea claim] Undecided what name will stick; either Ethics Test Services, or Autonomous Judgement/Decision Analysis Services; Because it is about checking the morality baked into, … Continue reading

Posted in ERM, GRC, Information Risk Management, Information Security, Innovation (technologicallly driven) | Tagged , , , , , , , , , , , | 2 Comments

Plusquote: LogiC PA

Be ware, dear people. Recently, an accountant, of the CPA type, came with the following quote: The partner model isn’t part of the problem with our industry sector, because look at banks; they left the partner model ages ago and … Continue reading

Posted in ERM, GRC, Information Risk Management, Sociological, psychological notes | Tagged | Leave a comment

Plusquote: Qua Quantification

Qua quantification, maximal isn’t the optimal that minimal is. If quantification were good, or worth pursuing even anything more than a bit or minimally, Yoda would talk about hidden Markow chains not The Force. Not all that can be counted, … Continue reading

Posted in Books by Quote, ERM, GRC, Information Risk Management, Information Security, Innovation (technologicallly driven) | Tagged , , , , , , , | Leave a comment