Moving from Risk Based Internal Auditing to Consequence Based Internal Auditing I have written extensively on my approach to determining likelihood, as a function of control effectiveness rather than determining likelihood based on time, frequency and/or probability. What’s important to note though, is that using this latter approach means that we also have to shift … Continue reading Changing the Audit Paradigm