IT Compliance and Controls

As one may expect, given massive amounts of defaults, bad lending practices, nonexistent risk management departments, and essentially a complete lack of due diligence is there any expectation that fraud did not occur?  One of many to be coming to light is that of AIG.  According to recent findings AIG hid financial distresses and practices […]

[Read more →]

To my colleagues in the technology, audit, and security field:
The Association of Certified Fraud Examiner conference in July this year was a huge success.  For anyone in the business of attesting, securing, or managing the integrity of an organization this conference is for you.  Bottom line - the conference is a constant learning environment.  I […]

[Read more →]

Yesterday I highlighted that organizations must consider the value of information based on the party that possesses it, i.e. If the information was made available to anyone - what could they do and how bad would the impact be to your organization?
Today’s Wall Street Journal had an article entitled “Another Liechtenstein Bank Suffers Theft of […]

[Read more →]