#141 - Auditing with Agility: Stop Fearing Your Auditors - Clarissa Lucas
Listen now
Description
“You should never do something just because the auditors want you to do it. They should be able to explain the risk and controls in accordance with your risk appetite and tolerance." Clarissa Lucas is an audit and risk management leader and the author of “Beyond Agile Auditing”. In this episode, Clarissa shared a novel approach to internal auditing called auditing with agility. She shared this concept at the DevOps Enterprise Summit 2022, which drew some parallels to the revolutionary birth of the DevOps movement. Clarissa explained the three core components of auditing with agility, which are value-driven auditing, integrated auditing 2.0, and adaptable auditing.   Listen out for: Career Journey - [00:04:27] Purpose of Internal Audit - [00:08:38] Challenges with Traditional Auditing - [00:11:01] How Auditing with Agility Started - [00:16:48] Parallels with the Birth of DevOps - [00:22:02] Segregation of Duty - [00:25:04] Auditing with Agility & Value-Driven Auditing - [00:30:21] Integrated Auditing 2.0 - [00:33:52] Adaptable Auditing - [00:41:33] Extending to External Auditing - [00:45:32] 3 Tech Lead Wisdom - [00:47:26] _____ Clarissa Lucas’s BioClarissa Lucas is an experienced audit and risk management leader with over 15 years of experience. As a thought leader on Auditing with Agility, she has written articles on the topic published by both the Institute of Internal Auditors (IIA) and IT Revolution press, as well as her first book, Beyond Agile Auditing: Three Core Components to Revolutionize Your Internal Audit Practices. Clarissa has spoken at a number of IIA, ISACA, and IT Revolution conferences, as well as local IIA chapter events and various podcasts, on this topic. Clarissa is a Certified Internal Auditor, Certified Information Systems Auditor and a Certified Investments and Derivatives Auditor. Follow Clarissa: Website – clarissalucas.com LinkedIn – linkedin.com/in/clarissalucas _____ Our Sponsors Are you looking for a new cool swag? Tech Lead Journal now offers you some swags that you can purchase online. These swags are printed on-demand based on your preference, and will be delivered safely to you all over the world where shipping is available. Check out all the cool swags available by visiting techleadjournal.dev/shop. And don't forget to brag yourself once you receive any of those swags. Like this episode? Show notes & transcript: techleadjournal.dev/episodes/141 Follow @techleadjournal on LinkedIn, Twitter, and Instagram. Buy me a coffee or become a patron.
More Episodes
“The quality is connected to the risk, and the risk is connected to the testing. If we don’t keep an eye on quality, our testing and development will drift, because we are no longer building the thing that people care about anymore." Mark Winteringham is a quality engineer and the author of...
Published 04/29/24
Published 04/29/24
“Bureaucracy in itself is neither good nor bad. However, it often gets in the way and prevents important things you need to do. A good bureaucracy is lean, learning, and enabling." Mark Schwartz is an Enterprise Strategist at AWS and the author of multiple books from IT Revolution. In this...
Published 04/22/24