44
FUTURE YOUR MAPPING Your Career Issue 4 – October 2014 4 Serving the Needs of Today’s Internal Auditor 12 Making the Connection 34 Mapping Your Future - The IIA Career Map 42 Leading by Example

October 2014 Your Career Compass

Embed Size (px)

DESCRIPTION

Your Career Compass – The guide to everything The IIA has to offer to support you and your team’s career development needs

Citation preview

Page 1: October 2014 Your Career Compass

FUTURE

YOUR

MAPPING

Your Career

I s sue 4 – Oc tobe r 2014

4 Serving the Needs of Today’s Internal Auditor

12 Making the Connection

34 Mapping Your Future - The IIA Career Map

42 Leading by Example

Page 2: October 2014 Your Career Compass

OUR PRINCIPAL PARTNERS MAKE A DIFFERENCEThe IIA acknowledges the ongoing support from our Principal Partners, who help enhance the internal audit profession by sharing their resources and knowledge with our most valuable asset – our members. These partners actively serve as members and volunteers within The IIA, participate in the introduction of new guidance, develop world-class training, and show their commitment in many other ways in an effort to advance the internal audit profession.

The IIA encourages you to tap into the expertise of our Principal Partners in 2014!

Page 3: October 2014 Your Career Compass

Dear Friends and Colleagues:

As busy internal audit professionals, we are often reminded that time is one of our most precious resources. Before we know it, we will be ushering in a new year and implementing new strategies to add value to our organizations.

Keeping a sharp focus on talent development is one of the best ways to do this. As you begin thinking about how you can enhance your knowledge and skill sets and those of your team in 2015, I urge you to explore all the resources available to you.

In this issue of Career Compass, you will learn about an exciting new initiative I have had the honor and privilege of helping bring to life — The IIA’s Career Map. I believe this self-assessment tool, based on The IIA’s Competency Framework, will help to ensure that we are developing the leaders of the future who can take our profession to greater heights by adding value to or-ganizations and positioning our leaders to sit confidently in the C-Suite. The new tool will allow users to:

■ Assess their knowledge, skills, and abilities against the Competency Framework.

■ Create a Personalized Learning Plan to address skill gaps. ■ Access appropriate development activities and resources.

Plus, a special component of the new program will allow CAEs to assess and enhance the performance of their teams as a whole.

I am excited about the opportunity this tool presents for The IIA to service its members in North America and across the globe in pursuit of their career ambitions, and I hope after reading the article, you will share my enthusiasm for using the new tool in your future talent development planning.

Sincerely,

Harold C. Silverman, CIA Vice President, Internal Audit The Wendy’s Company IIA Global Board of Directors

Table of ContentsServing the Needs of Today’s Internal Auditor ....................... 4-5

IIA News .............................................. 6-9

Seminar/eLearning Calendar.................15

Certification Corner ......................... 10-11

Making The Connection ................... 12-13

Certification Spotlight ..................... 14-15

Fraud............................................... 16-19

GRC ................................................. 20-23

Internal Audit Practice .................... 24-29

Information Technology ................... 30-33

Mapping Your Future ....................... 34-37

Local Highlights .............................. 40-41

Leading by Example ........................ 42-43

Learn more about Career Compass at www.theiia.org/goto/CareerCompass. We welcome comments, questions,

and feedback at [email protected].

Connect with us on: Twitter Facebook LinkedIn Group www.theiia.org/goto/connect

The Institute of Internal Auditors 247 Maitland Ave. Altamonte Springs, FL 32701-4201 USA +1-407-937-1100 www.theiia.org

All contents copyright ©The Institute of Internal Auditors (IIA) 2014.

Your Career

9/141549/PM/JP www.theiia.org | 3

Your Career

Page 4: October 2014 Your Career Compass

Serving the NEEDS of

with New Courses

Why should you care about emo-tional intelligence? The answer, according to Margaret Maat, a leading organizational development professional and business strategist and the course’s developer, is simple. “Studies have shown that technical skills and cognitive ability account for only one-third of a person’s success; the other two-thirds are rooted in an individual’s emotional intelligence.”

This year’s IIA General Audit Management (GAM) Conference affirmed that internal auditors could benefit from a focus on emotional intelligence. “A panelist commented that she wished universities would teach students how to communi-cate rather than teaching internal audit. She could teach them how she wanted internal audit done; she needed them to come to the table with communication skills and business acumen. Those soft skills roll up into emotional intelligence.” It was then that Jim Eagen, IIA director of curriculum development, reached out to Maat to have her customize her course on emotional intelligence to incorporate an inter-nal audit perspective.

The course uses the principles of neuroscience to raise self-awareness and create a deeper understanding of the communication styles of those with whom internal auditors interact. While Maat acknowledges everyone is born with a different level of emotional intelligence, she maintains it’s like any other muscle; you can strengthen and grow it. “I wasn’t born with above-average emo-tional intelligence. I’m continually

TODAY’SINTERNAL AUDITOR

You’ve heard of street smarts and book smarts. What about emotional in-

telligence? Do you have it? Can you acquire it? Are you sure you know what

it is? Similar questions can be posed about the 2013 COSO Framework.

Is your internal audit activity transitioning to it? What are you doing well?

What could you be doing better? The good news is The IIA has introduced

two new courses, The Effective Auditor: Understanding and Applying Emo-

tional Intelligence and COSO-based Internal Auditing, which provide clarity

on these important topics.

4 | The Institute of Internal Auditors

Your Career

Page 5: October 2014 Your Career Compass

working to strengthen it and I think that’s what makes me an effective facilitator on the topic. I have expe-rienced the growth process myself,” says Maat. “This course is about learning how emotions and cogni-tion work together to drive decision making. It’s a great way for people to build self-awareness and then make behavioral changes that can make a difference on the job.”

Making a difference on the job is also at the heart of another new course just released, COSO-based Internal Auditing. The course exam-ines COSO’s landmark frameworks, Internal Control–Integrated Frame-work (2013) and Enterprise Risk Management–Integrated Framework (2004), to enable internal auditors to use the frameworks to be more effective and efficient in their roles. “I’ve had the privilege of working with leading practitioners in many locations. They have told me now that they have a good understanding of the basic principles of COSO 2013, they need to know how to use it from an internal audit perspective and push it through to their audits. That’s what this course does,” says Donald Espersen, CIA, CRMA, despersen & associate, the course’s developer. “It will not only validate their knowledge level of the frame-works, but it will allow them to exchange ideas about what they are currently doing with it and brain-storm ideas about what they could be doing.”

The course is not about theory, but rather application. Participants should come with a basic under-standing of the frameworks, be

aware of what their audit group is doing in relation to using it, and have the authority to make a change within the department. For Espers-en, COSO-based Internal Auditing is a “pay me now or pay me later” proposition. “It is easier to do the due diligence now and share prac-tices to improve upon what you’re doing. Organizations that don’t have it on their radar would benefit from getting a head start on the process.”

“You’re most likely already audit-ing using some COSO principles without even recognizing it. We’ve

designed a course that empowers you to employ of all of them,” says Eagen. To that end, the course helps participants understand how to use COSO to improve their organiza-tion’s control processes, strengthen governance, and identify what is im-portant so practitioners know where to focus their efforts.

Both of The IIA’s new courses launch in November and are also available through IIA On-Site Training. For course schedules and complete details, please visit www.theiia.org/seminars.

10 New Courses Added To On-Site Training’s 100+ Course Lineup

• Advanced Risk Assessment

• Audit Evidence and Professional Judgment: How to Effectively Use Critical Thinking

• Communication and Negotiation Skills for the 21st Century Auditor

• CRMA Study System

• Developing Audit Work Programs

• Innovation and Internal Audit

• Interviewing Techniques for Successful Audits

• Intro to IT Auditing for Non-IT Auditors

• IT Auditing Principles for Non-IT Auditors

• Root Cause Analysis

You have a variety of courses to choose from on topics including audit report writing; cloud computing; governance, risk, and control; ethics; fraud; technology; soft skills; and skill development. The IIA On-Site Training is customized to accommodate your team development needs and specifications. The IIA can deliver on-site training using the platform that best suits your needs. Perhaps a live classroom is your preference, but remote staff need a virtual delivery. The IIA is positioned to accommodate you so that your staff can benefit from training, regardless of their location. www.theiia.org/onsite.

www.theiia.org | 5

Your Career

Page 6: October 2014 Your Career Compass

NewsWeigh in on the Proposed Changes to the IPPF Hundreds of practitioners from the across the globe have responded so far, and only a few days remain for additional input. A comprehensive explana-tion of all proposed modifications can be found in the exposure draft. If you have not yet had the opportunity to review and respond to the proposed updates, there is time to share your views. Respond by Nov. 3! www.theiia.org/NewFramework.

Get Ready for the Study that Will Move Our Profession Forward!

The Global Common Body of Knowledge® (CBOK®) Study is updated every few years, but the 2015 edition is going deeper for the benefit of internal auditors around the world. Exciting developments are taking place to make CBOK happen, including new research topics, formats and access to global trends that all come out of the robust CBOK data-base. Visit the CBOK Resource Center today! www.theiia.org/CBOK

Core Principles

Implementation Guidance

Supplemental Guidance

Emerging Issues Guidance

Recommended Elements

Required Elements

Mission

DefinitionCode

of EthicsStandards

Global Public Sector Insight: Policy Setting for Public Sector Auditing in the Absence of Government Legislation Research ReportLooking to build your arsenal of tools to further advocate for public sector audit activities? Public sector practitioners may find the suggested policy and procedure elements of this publication as a useful foundation for their efforts to encourage legislation and attendant regulation requirements. www.theiia.org/guidance

Get Involved, The IIA is Seeking Volunteer Leader Nominees for 2015–16 PositionsThe IIA is seeking qualified members who are willing to serve in the following positions for 2015–16:

■ Executive Committee members ■ Institute Directors ■ The IIA Research Foundation Board of Trustees ■ Committee Members, District Representatives,

and District Advisors

The deadline for nominations is Nov. 3, 2014. Visit The IIA Call for Volunteers website for more informa-tion and qualifications. www.theiia.org/volunteernow

CBOKThe Global Internal Audit Common Body of Knowledge

6 | The Institute of Internal Auditors

Your Career

Page 7: October 2014 Your Career Compass

Record Attendance, Continued Success at the 2014 Governance, Risk, and Control Conference The collaboration between The IIA and ISACA has yet again proven to be an event members of both organizations found beneficial, with a depth of content and sharing of perspectives not available elsewhere.

In August, more than 600 participants con-verged at The Breakers in Palm Beach, Fla., for this year’s Governance, Risk, and Control Conference™ (GRC™) that provided internal audit and IT risk professionals with networking and professional development options to more than fill their bandwidth. The IIA’s Richard Chambers and ISACA’s Robert Stroud opened the event with a warm welcome. Opening remarks were followed by Stroud’s keynote, How Emerging Technologies Will Impact You and Your Enterprise and What You Can Do About It, with insights into the impact of emerging and disruptive technologies — from the present to those that may impact us tomorrow. Other key-note speakers included Anton B. van Wyk, CIA, QIAL, CRMA, Partner, PricewaterhouseCoo-pers, 2014–15 Chair, The IIA Global Board of Directors, the Honorable Theresa Grafenstine, CISA, CGEIT, CRISC, CIA, CGAP, Inspector General, U.S. House of Representatives, and Bob Treadway, Principal, Treadway & Associ-ates, Inc. Get the full recap at www.theiia.org/goto/GRC2014.

Are You Ready to Lead? Registration Open for New QIAL Designation The IIA announced the new Quali-fication in Internal Audit Leader-ship™ (QIAL™), which aims to enhance and affirm career achievements of top internal auditors globally. Twelve IIA members were recognized at the International Conference earlier this year with the new QIAL designation. Registration is now open and candidate documents are available for those interested in pursuing the new qualification. Visit www.theiia.org/QIAL for more information or to begin the application process.

IIA Announces CGAP Application Fee Waiver Find the key to your success with the Certified Government Auditing Professional® (CGAP®) designa-tion. For a limited time, Oct. 1–31, The IIA is waiving the application fee (up to a US$200 value) for the CGAP designation.

The CGAP is designed especially for auditors working in the public sector at all levels — federal/national, state/provincial, local, quasi-governmental, or crown author-ity — and is an excellent professional credential that prepares you for the many challenges you face in this demanding arena. Visit www.theiia.org/cgap for informa-tion and to apply.

Final Opportunities to Comply With 2014 CPE RequirementsThere are still many training opportunities available for certified individuals to comply with their Continuing Professional Education requirements for 2014. IIA Seminars will visit Raleigh, Houston, San Francisco, Orlando, and New York with a variety of courses for all levels by year’s end. For departments looking to develop their team’s skills, IIA On-site Training offers cost-saving and convenient solutions. The IIA’s eLearning options include eSeminars, eWorkshops, and webinars to earn CPE credits from the comfort of your home or office. Visit www.theiia.org/training for all CPE options.

www.theiia.org | 7

Your CareerYour Career

Page 8: October 2014 Your Career Compass

ACGA Introduces New Microsoft Excel eWorkshops in OctoberACGA continues to offer more training and course offerings for government members:

Oct. 7, 2014: Basic Data Integrity, Mining, and Analysis in ExcelEnsuring the basic integrity of and fully understanding a data set are the very foundations of any analysis of quantitative information and, as such, are criti-cal skills for auditors, investigators, evaluators, reviewers, and analysts.

Oct. 21, 2014: Using Excel to Extract, Analyze, and Report on Audit Samples Appropriate choice and use of sampling methods tools is a core competency for all auditors, investigators, evaluators, reviewers, and analysts as they apply criteria to, determine the condition of, and make assertions about manage-ment processes and environments, especially when a balance must be struck between conflicting calls for economy, efficiency, and effectiveness.

Register today at acga.theiia.org/events.

Minding the Gap: New IIA Chairman’s Video Drawing Strong InterestThe 2014–15 Chairman’s video, which debuted at July’s International Confer-ence in London, is drawing strong interest from members. Requests have poured in from around the world for IIA Global Chairman Anton van Wyk’s “Minding the Gap” video, which urges members to be cognizant of potential expectation gaps with stakeholders while stressing the four C’s for doing so – Communication, Competency, Credibility, and Connectivity.

The IIA’s 2014 Annual Compensation Study Report Is Now Available The latest report indicates compen-sation is leveling off for the majority, with some silver linings for internal audit positions. Learn more about these latest trends in the 2014 Internal Audit Compensation Study Report, a comprehensive analysis of the compensation of internal audit professionals published annually by The IIA’s Audit Executive Center. Download a complimentary copy of the Executive Summary. A detailed report is available for purchase from The IIA’s Research Foundation Bookstore. www.theiia.org/goto/ compstudy.

Tap into Today’s News - Opt In to IIA SmartBriefThousands of members have subscribed to IIA SmartBrief since its launch in January 2014. IIA SmartBrief provides a weekly snapshot of market news and issues affecting internal auditors and their stake-holders from leading global news sources. SmartBrief is a service that curates thousands of news sources and delivers timely articles and news affecting the profession straight to your email inbox. Opt in for this complimentary service at www.smartbrief.com/iia.

8 | The Institute of Internal Auditors

Your Career

Page 9: October 2014 Your Career Compass

NEW RESEARCHCybersecurity: What the Board of Directors Needs to Ask The overwhelming number of cybercrime incidents in recent months has forced boards of directors to ask strategic and thoughtful questions directed

toward management and internal audit. Boards need to take a more proactive role in cybersecurity or face the possibility of lawsuits in the event of a security breach. The IIA Research Foundation, in partnership with ISACA, commissioned the research report. The report also outlines the NACD’s five “must-do’s” principles to identify for boards, and provides a list of top questions every board needs to ask.

Performance Auditing in Major Cities in the United States and Canada In an era of increasing public scrutiny of government ser-vices and integrity, performance auditing provides critical information needed for government accountability. This report will help public sector audit leaders, audit com-mittees, and government leaders to understand:

■ How audit functions with limited resources can over-come challenges to conducting performance audits.

■ How to define appropriate funding levels for the scope of the internal audit mandate.

■ The critical role legislation plays in effective perfor-mance auditing.

■ Twelve best practices used by leaders in performance auditing.

Internal Audit Capabilities and Performance Levels in the Public SectorCBOK RESEARCH – The Internal Audit Capability Model for the Public Sector was benchmarked against findings from the ongoing The IIARF’s Global Internal Audit Common Body of Knowledge (CBOK) Study. In-ternal auditors and their stakeholders can use the results of this study to identify areas of strength and areas that

need improvement in order to increase the effectiveness of their internal audit function.

IIA members download research free. Visit www.theiia.org/research.

LATEST BOOK RELEASESMergers, Acquisitions & Sales: How Internal Audit Adds Value and Effectiveness Seasoned or novice, you will bene-fit from the latest release from The IIARF Bookstore on auditing the mergers, acquisitions, and sales pro-cess. This book addresses global best

practices providing practical advice and support aides for what can be the greatest strategic risk or opportunity for an organization.

Become a Strategic Internal Auditor: Tying Risk to StrategyBusinesses today are spending more time on strategic issues and seeking more help from those with strategic capabilities. This has created a unique opportunity for internal auditors to help their organizations both manage

their risks and achieve their strategic goals. In Become a Strategic Internal Auditor, you can learn how leading internal audit functions work with management to play a role in strategic initiatives.

Financial Planning and Budgets: Understanding the Auditing Process Financial Planning and Budgets is a comprehensive refer-ence guide designed to help experienced audit managers and internal auditors to plan, organize, perform, and report on the financial planning and budgeting processes. A strong risk management capability is very important in today’s automated, fast-paced business world.

Access hundreds of other practitioner-reviewed educa-tional products at www.theiia.org/bookstore.

www.theiia.org | 9

Your Career

Page 10: October 2014 Your Career Compass

Raleigh, NCOct. 28 - 31

Houston, TXNov. 11 - 14

San Francisco, CANov. 18 - 21

Orlando, FLDec.8 - 11

New York, NYDec. 16 - Dec. 19

San Antonio, TXMar. 2 - 5

Los Angeles, CAMar. 24 - 27

New York, NYApr. 14 -17

Chicago, ILMay 11 - 14

Dallas, TXMay 18 - 21

Four Day Courses

Audit Manager Tools and Techniques Nov. 11 - 14 Nov. 18 - 21 Mar. 24 - 27 Apr. 14 -17 May 18 - 21

Auditor-in-charge Tools and Techniques Dec. 8 - 11 Mar. 2 - 5 May 11 - 14 May 18 - 21

Beginning Auditor Tools and Techniques Oct. 28 - 31 Nov. 11 - 14 Nov. 18 - 21 Dec. 8 - 11 Dec. 16 - 19 Mar. 2 - 5 Mar. 24 - 27 Apr. 14 -17 May 11 - 14 May 18 - 21

Communication Skills for Auditors Dec. 16 - 19 Mar. 24 - 27 May 11 - 14

Leadership Skills for Auditors Nov. 18 - 21 Dec. 16 - 19 Mar. 2 - 5 Apr. 14 -17

Core Curriculum–Courses Under Four Days

Analyzing and Improving Business Processes Nov. 11 - 12 Mar. 4 - 5 Apr. 14 -15 May 11 - 12

Anti-Fraud Toolkit: The Auditor's Role in Detection and Prevention May 18 - 19

Assessing Risk: Ensuring Internal Audit's Value Oct. 28 - 29 Nov. 11 - 12 Nov. 18 - 19 Dec. 8 - 9 Mar. 4 - 5 May 13 - 14

Audit Report Writing Nov. 11 - 12 Nov. 20 - 21 Mar. 2 - 3

Auditing Contracts : From Planning to Reporting Nov. 13 - 14 May 20 - 21

Best Practices in Internal Auditing Nov. 20 - 21 Dec. 10 - 11

Building a Sustainable Quality Program Nov. 11 - 12 Dec. 16 - 17 Mar. 24 - 25 May 18 - 19

CIA Review Part 1 Mar. 24

CIA Review Part 2 Mar. 25

CIA Review course Part 3 Mar. 26 - 27 May 18 - 19

Construction Activity: Audit Strategies Nov. 13 - 14 Dec. 18 - 19 May 13 - 14

Continuous Auditing Nov. 13 - 14

Control Self-assessment: An Introduction Dec. 8 - 9 May 18 - 19

Control Self-assessment: Facilitation Skills Dec. 10 - 11 May 20 - 21

COSO 2013: Implementing the Framework Oct. 28 - 29 Nov. 11 - 12 Nov. 20 - 21 Dec. 8 - 9 Dec. 16 - 17 Mar. 24 - 25 Apr. 16 -17

COSO-based Internal Auditing Nov. 18 - 19 Dec. 18 - 19 Mar. 4 - 5 Mar. 26 - 27 Apr. 16 -17

Creative Problem-solving Techniques for Auditors Nov. 13 - 14 Dec. 18 - 19 May 18 - 19

The Effective Auditor: Understanding and Applying Emotional Intelligence Nov. 11 - 12 Dec. 16 - 17 May 20 - 21

Enterprise Risk Management: An Introduction Dec. 10 - 11 Mar. 24 - 25 Apr. 14 -15 May 18 - 19

Essential Skills for Today's Internal Auditor Mar. 24 - 25

Financial Auditing for Internal Auditors Mar. 2 - 3 Apr. 14 -15

Lean Six Sigma Tools for Internal Audit Fieldwork Dec. 18 - 19 Mar. 4 - 5 Apr. 16 -17

Lean Six Sigma Tools for Internal Audit Planning Mar. 2 - 3 Apr. 14 -15

Operational Auditing: Influencing Positive Change Nov. 13 - 14 Dec. 18 - 19 Mar. 2 - 3 Apr. 16 -17 May 20 - 21

Performing an Effective Quality Assessment Nov. 13 - 14 Dec. 18 - 19 Mar. 26 - 27 May 20 - 21

Project Management Techniques May 18 - 19

Purchasing Fraud Nov. 18 - 19

Risk-based Auditing: A Value Add Proposition Nov. 18 - 19 Dec. 10 - 11 May 11 - 12

Risk Management Assurance: Developing Your Internal Audit Strategy Dec. 8 - 9 Mar. 26 - 27

Statistical Sampling for Internal Auditors Nov. 20 - 21 May 11 - 12

Value-Added Business Controls: The Right Way to Manage Risk Mar. 26 - 27 Apr. 16 -17 May 13 - 14

Deloitte Public Offerings - Courses Under Four Days

Internal Auditing for FCPA & Anti-Corruption: Leading Practice Considerations from the SEC and DOJ Guidance Nov. 20 - 21 May 20 - 21

2014-2015 SEMINAR COURSE MATRIX

10 | The Institute of Internal Auditors

Page 11: October 2014 Your Career Compass

Raleigh, NCOct. 28 - 31

Houston, TXNov. 11 - 14

San Francisco, CANov. 18 - 21

Orlando, FLDec.8 - 11

New York, NYDec. 16 - Dec. 19

San Antonio, TXMar. 2 - 5

Los Angeles, CAMar. 24 - 27

New York, NYApr. 14 -17

Chicago, ILMay 11 - 14

Dallas, TXMay 18 - 21

Four Day Courses

Audit Manager Tools and Techniques Nov. 11 - 14 Nov. 18 - 21 Mar. 24 - 27 Apr. 14 -17 May 18 - 21

Auditor-in-charge Tools and Techniques Dec. 8 - 11 Mar. 2 - 5 May 11 - 14 May 18 - 21

Beginning Auditor Tools and Techniques Oct. 28 - 31 Nov. 11 - 14 Nov. 18 - 21 Dec. 8 - 11 Dec. 16 - 19 Mar. 2 - 5 Mar. 24 - 27 Apr. 14 -17 May 11 - 14 May 18 - 21

Communication Skills for Auditors Dec. 16 - 19 Mar. 24 - 27 May 11 - 14

Leadership Skills for Auditors Nov. 18 - 21 Dec. 16 - 19 Mar. 2 - 5 Apr. 14 -17

Core Curriculum–Courses Under Four Days

Analyzing and Improving Business Processes Nov. 11 - 12 Mar. 4 - 5 Apr. 14 -15 May 11 - 12

Anti-Fraud Toolkit: The Auditor's Role in Detection and Prevention May 18 - 19

Assessing Risk: Ensuring Internal Audit's Value Oct. 28 - 29 Nov. 11 - 12 Nov. 18 - 19 Dec. 8 - 9 Mar. 4 - 5 May 13 - 14

Audit Report Writing Nov. 11 - 12 Nov. 20 - 21 Mar. 2 - 3

Auditing Contracts : From Planning to Reporting Nov. 13 - 14 May 20 - 21

Best Practices in Internal Auditing Nov. 20 - 21 Dec. 10 - 11

Building a Sustainable Quality Program Nov. 11 - 12 Dec. 16 - 17 Mar. 24 - 25 May 18 - 19

CIA Review Part 1 Mar. 24

CIA Review Part 2 Mar. 25

CIA Review course Part 3 Mar. 26 - 27 May 18 - 19

Construction Activity: Audit Strategies Nov. 13 - 14 Dec. 18 - 19 May 13 - 14

Continuous Auditing Nov. 13 - 14

Control Self-assessment: An Introduction Dec. 8 - 9 May 18 - 19

Control Self-assessment: Facilitation Skills Dec. 10 - 11 May 20 - 21

COSO 2013: Implementing the Framework Oct. 28 - 29 Nov. 11 - 12 Nov. 20 - 21 Dec. 8 - 9 Dec. 16 - 17 Mar. 24 - 25 Apr. 16 -17

COSO-based Internal Auditing Nov. 18 - 19 Dec. 18 - 19 Mar. 4 - 5 Mar. 26 - 27 Apr. 16 -17

Creative Problem-solving Techniques for Auditors Nov. 13 - 14 Dec. 18 - 19 May 18 - 19

The Effective Auditor: Understanding and Applying Emotional Intelligence Nov. 11 - 12 Dec. 16 - 17 May 20 - 21

Enterprise Risk Management: An Introduction Dec. 10 - 11 Mar. 24 - 25 Apr. 14 -15 May 18 - 19

Essential Skills for Today's Internal Auditor Mar. 24 - 25

Financial Auditing for Internal Auditors Mar. 2 - 3 Apr. 14 -15

Lean Six Sigma Tools for Internal Audit Fieldwork Dec. 18 - 19 Mar. 4 - 5 Apr. 16 -17

Lean Six Sigma Tools for Internal Audit Planning Mar. 2 - 3 Apr. 14 -15

Operational Auditing: Influencing Positive Change Nov. 13 - 14 Dec. 18 - 19 Mar. 2 - 3 Apr. 16 -17 May 20 - 21

Performing an Effective Quality Assessment Nov. 13 - 14 Dec. 18 - 19 Mar. 26 - 27 May 20 - 21

Project Management Techniques May 18 - 19

Purchasing Fraud Nov. 18 - 19

Risk-based Auditing: A Value Add Proposition Nov. 18 - 19 Dec. 10 - 11 May 11 - 12

Risk Management Assurance: Developing Your Internal Audit Strategy Dec. 8 - 9 Mar. 26 - 27

Statistical Sampling for Internal Auditors Nov. 20 - 21 May 11 - 12

Value-Added Business Controls: The Right Way to Manage Risk Mar. 26 - 27 Apr. 16 -17 May 13 - 14

Deloitte Public Offerings - Courses Under Four Days

Internal Auditing for FCPA & Anti-Corruption: Leading Practice Considerations from the SEC and DOJ Guidance Nov. 20 - 21 May 20 - 21

Access More Than 100

Courses To Train Your Team On Site. Contact

The IIA’s On-site Training Depart-ment to discuss

your team development

needs by e-mail at GetTraining@

theiia.org or call +1-407-

937-1388. www.theiia.org/onsite

www.theiia.org | 11

Page 12: October 2014 Your Career Compass

The IIA’s 2014 International Conference Draws Thousands – By the NumbersThe IIA’s 2014 International Confer-ence in London, England, was a great success with attendees from more than 110 countries, surpassing last year’s record of 109 countries. Those sending the most delegates included the United Kingdom, the United States, Korea, South Africa, and Ghana.

Nearly 2,400 delegates enjoyed four days of more than 60 educational sessions, six world-class general session speakers, a state-of-the-art exhibit hall with more than 40 exhibitors, and their choice of two superlative evening events among other exciting happenings. More than 130 member volunteers contribut-ed to the success of the event.

See the conference in action through the Flickr photo album.

Royal Greeting for International Conference AttendeesThe IIA’s 73rd International Conference got off to a mem-

orable start with a surprise welcome video from HRH Prince Charles. His royal highness delivered a strong call to action for internal audit professionals to “help shine a far brighter light on the risks we all face.”

General Session Speakers Draw Big CrowdsSix outstanding speakers shared their wisdom and experience with attendees at the conference. First up was Alastair Campbell (bottom left), former director of communications to Tony Blair, past prime minister of the U.K. He was followed by Richard Chambers, IIA president and CEO, who moderated a panel to address Leading Multi-cultural Internal Audit Functions.

Tuesday’s speakers included Michael Woodford, former president and CEO of Olympus Corporation, whose pre-sentation, The Power of the Whistle, reviewed his career with Olympus, its abrupt end, and the dramatic after-math. In the afternoon, Judge Profes-sor Mervyn King of the International Integrated Reporting Council addressed How Integrated Reporting is Chang-

Making TheConnection

12 | The Institute of Internal Auditors

Your Career

Page 13: October 2014 Your Career Compass

ing the Role of Internal Audit, a topic HRH Prince Charles referred to in his welcome address.

Outstanding Service and Achievements Recognized Two longtime leaders in the internal audit profession, Roderick Winters and Andrew Chambers (pictured top right with IIA Chairman Paul Sobel, left), received career achievement awards at the conference. Winters was honored with the Victor Z. Brink award for Distinguished Service and Chambers received the Bradford Cadmus award for contributions to the global internal audit profession. Other IIA members were awarded for their contributions to the profession as well as academic achievement.

IIA Awards 12 Leaders With the new Qualification in Internal Audit LeadershipOne of the most interesting announce-ments at the conference was the launch of The IIA’s new leadership program, which has been years in the making. The IIA has developed the Qualification in Internal Audit Leadership™ (QIAL™) to support aspiring leaders on their journey to being the next generation of visionaries for the profession.

Members of the inaugural class of conferees (pictured above right) were in-troduced to Conference attendees and a video premiered that explained more about the new qualification. Learn more about QIAL at www.theiia.org/QIAL.

Global Pulse Is a Call to Action The 2014 Global Pulse of the Profession report, which premiered at the conference, cross-references the survey results with findings from some of the world’s top man-

agement consultancies, providing more insight into the findings and a depth of global perspective.

This year’s report echoed HRH Prince Charles’ opening comments that inter-nal audit departments are paying greater attention to areas of organizational concern outside of the usual focus

on finance.

Special Thank You to Our Hosts and SponsorsThe IIA is grateful to all International Conference Sponsors and Exhibitors whose support is crucial at events such as these. Nine major sponsors in four categories and 44 exhibitors contributed immensely to the success

of the conference. Special thanks to our top sponsors: Protiviti, TeamMate, EY, KPMG, PwC, Deloitte, Ideagen, MetricStream, and RSM.

Members and volunteers from IIA– UK and Ireland provided indispensable support and were exemplary working partners during the planning of this global affair. We invite you to review the online wrap-up of the 2014 International Conference at www.ic.globaliia.org.

See You in Vancouver – July 5-8, 2015The IIA and IIA–Canada will host a not-to-be-

missed IIA International Conference themed “Moun-tains of Change … Oceans of Opportunities.” The IIA’s 74th International Conference promises to be another phenomenal experience that’s just the right blend of fun, work, learning, and camaraderie. Reserve your space now at www.ic.globaliia.org.

www.theiia.org | 13

Your Career

Page 14: October 2014 Your Career Compass

CERTIFICATION SPOTLIGHT ANNALENA BAER, CIA, CCSA, CRMA, CFE Manager - Enterprise Risk Services Deloitte NorwayIIA–Norway

1. What prompted you to become certified?I saw certification as a chance to go more in-depth in a subject matter that was genuinely interesting to me, and I liked the opportunity to see how my knowledge measured up against what is expected, especially regarding the CIA.

I also felt that being certified would show my qualifications more clearly, and would therefore be helpful to my career.

2. If you hold multiple IIA designations, what order did you earn them in and why?

I started with the CCSA, as I was at the time working on a project where control self-assessment was a central feature. I then got certified as a CRMA through the Professional Experience Recognition process. Meanwhile, I was working toward my CIA, which had been my goal for a while. As there are three parts to the exam, this was a longer and more demanding process.

3. Did your organization fund your exam fees or preparation materials? If yes, was it the corporate culture or did you have to sell the value of certification?

Deloitte is very committed to upholding professional standards, and certification is one way to do so, so the organization funded the necessary fees.

4. How many of your colleagues are certified?Many of my colleagues are already certified, and my organization encourages us to get certified in our fields of expertise.

CERTIFICATION Corner

14 | The Institute of Internal Auditors

Your Career

Page 15: October 2014 Your Career Compass

5. How does having an IIA certification set you apart from your non-certified peers?

I feel that certification showcase qualifications and shows that I meet professional standards. Also, preparing for the exams had the effect of improving and/or refreshing my knowledge of the subject matter, so I felt I became a better auditor in the process.

Additionally, being willing and able to pass the exams with good results, despite an otherwise heavy workload, signals that I am interested in the subject matter and willing to go the extra mile professionally.

6. How did you prepare for the exam?I studied using The IIA’s CIA Learning System and Gleim materials. The self-assessment and practice tests were highly useful.

7. How has your certification helped your career?I learned quite a bit in the process, so I feel I became a better auditor, especially while taking the CIA exams. It helps to take the time to study the different concepts — for example, how to strengthen organizational inde-pendence. Also, I received positive feedback from Deloitte for taking the exams and passing with good results.

8. What advice do you have for others who are seeking certification?

Go for it!

Choose one and prepare thoroughly. I found taking practice exams was especially helpful. Also, try to take an assessment of your strong and weak areas, and prepare accordingly. I would also recommend to get comfort-able with the exam interface and the pace (how long you have for each question) well before the exam.

Originally from Germany, Annalena Baer is presently living in Norway where she works as a manager for Deloitte’s Enterprise Risk Services. She is experienced in working with internal control and data analytics. Annalena has a strong interest in statistics and has worked with quantitative analytics and modeling in sectors like utilities and retail, gaining experience in working with large and complex organizations, as well as working for non-profits. She is also experienced in IT audit, process mapping, and financial audit.

Fluent in four languages, among them Norwegian and English, Annalena Baer has an international background, and has studied Business Administration and Economics in Norway and the U.S. She also holds a Master of Fine Arts from the Berlin University of Arts. She volunteers for the IIA–Norway Chapter Conference Committee. Having a strong interest in human rights, she worked previously as a Human Rights Observer in Mexico, as a fundraiser for several grassroots organizations and for Doctors without Borders Norway.

www.theiia.org | 15

Your Career

Page 16: October 2014 Your Career Compass

According to the ACFE’s Report to the Nations on Occupational Fraud & Abuse, the typical organization loses

5 percent of its revenues to fraud each year. Although it is management’s responsibility to design internal

controls to prevent, detect, and mitigate fraud, internal auditors are the appropriate resource for assessing

the effectiveness of what management has implemented. The IIA has a host of resources to ensure that you,

as an internal auditor, are equipped to do just that.

TRAINING RESOURCESLearn more about these courses at www.theiia.org/training.

Data Analysis for Internal AuditorsAre you seeking to improve the effectiveness of your audit planning and to ensure whether or not your results can be generalized to total populations? This course provides the opportunity to learn about the analysis of large data sets, particularly how to sum-marize and display data, and determine the appropri-ate measures for describing data.

eSeminar Session Dates: Oct. 6–7

CPE Hours Available: 8

Internal Auditing for FCPA & Anti-corruption: Leading Practice Considerations from the SEC and DOJ GuidanceCompliance with anti-corruption laws such as the U.S. Foreign Corrupt Practice Act (FCPA) has been a growing focus of many organizations due to increased business activity in emerging markets, and an uptick in FCPA enforcement and fines that often reach hundreds of millions of dollars.

This interactive one-day course, a joint effort be-tween The IIA and Deloitte & Touche, will provide an overview of the FCPA and UK Bribery Act and

will discuss the various roles internal auditors can play in auditing for corruption.

Upcoming Offering: Nov. 20, Dallas, TX

Course Duration: 1 day / CPE Hours Available: 8

Purchasing Fraud: Auditing and Detection TechniquesThis interactive course, a joint effort between The IIA and Deloitte, helps you to assess an organiza-tion’s risks relating to purchasing fraud, identify con-trols that can mitigate those risks, design audit tests to detect purchasing fraud, and investigate evidence of fraud occurring.

Upcoming Offering: Nov. 18–19, Dallas, TX

Course Duration: 2 days / CPE Hours Available: 16

FRAUD

SEMINARS ON-SITE TRAINING CONFERENCESeLEARNING

Certified Auditors! Dec. 31 is closer than you think. Have you earned all the CPE credits you need to fulfill your certification requirements?

16 | The Institute of Internal Auditors

Your Career

Page 17: October 2014 Your Career Compass

Onsite TrainingGet your entire team up to speed on techniques to tackle fraud-related issues. Have our On-site Train-ing team schedule any of the courses on the previous pages or additional courses for your team of five or more at your location.

• Detecting, Preventing, and Reporting Internal and External Fraud

• Developing a Fraud Risk Management Program for Your Organization

• Evaluating Organizational Ethics• Financial Statement Fraud Detection for Inter-

nal Auditors• Fraud Auditing Using ACL• Fraud Awareness for CAEs and Management• Fraud Detection and Investigation for Govern-

ment Auditors• Fraud Detection and Investigation for Internal

Auditors• Fraud Investigation Tools and Techniques• Internal Auditing for Fraud

Explore more benefits of On-site Training by visiting www.theiia.org/onsite or contact The IIA’s On-site Training Department by e-mail at [email protected] or call +1-407-937-1388.

eLEARNING

The IIA’s wide variety of webinars, eSeminars, on-de-mand self-study courses, and eWorkshops mean you can spend less time traveling and more time learning.

eWorkshopsNov. 10–12: Fraud and Abuse: What Is It To You?

eSeminarsOct. 6–7: Data Analysis for Internal Auditors

CPE Hours Available: 8

Learn more about these training opportunities at www.theiia.org/elearning.

CONFERENCES

Conferences offer a great way to delve into fraud issues with these educational tracks and network with your peers who are facing the same tough challenges.

All Star ConferenceOct. 28–30, 2014 / Las Vegas, NV

• Building Fraud Detection Into Routine Audit Activity

• Dissecting Dodd-Frank and the Consumer Protection Bureau:

What to Expect From the New Sheriff in Town

• Aggressively Addressing Anti-corruption Risk

General Audit Management ConferenceMarch 9–11, 2015 / Aria / Las Vegas, NV

• Offers a full educational track featuring seven sessions

focused on Fraud Insights.

International ConferenceJuly 5–8, 2015 / Vancouver Convention Center

Vancouver, BC, Canada

• Offers a full educational track featuring seven sessions

focused on fraud, bribery, and corruption.

Governance, Risk, And Control Conference (IIA/ISACA)Aug. 17–19, 2015 / Biltmore / Phoenix, AZ

FRAUD

Learn more about any of the above courses and register today at www.theiia.org/training.

www.theiia.org | 17

Your Career

Page 18: October 2014 Your Career Compass

BOOKS AND EDUCATIONAL PRODUCTS

Bribery–Identify Hidden Risks in Your OrganizationBribery is often covert, tricky to prevent, and notoriously tough to uncover. Forensic accountants and fraud-focused auditors are often successful at detecting bribes, but it is

difficult for generalist internal auditors to find such transactions through regular auditing techniques. Bribery: Identify Hidden Risks in Your Organization offers practical information and advice on:

• Anti-bribery controls over an organization’s expenditures, revenue, assets, and liabilities.

• Legislative and regulatory considerations.• Organizational whistleblowing hotlines.• Third-party bribery.

Item No.: 1155

Member Price: $40.00 / Nonmember Price: $50.00

Order Your Copy through the IIA Research Foundation Bookstore. www.theiia.org/Bookstore

The Intermediate Audit Library Collection BUY A BUNDLE - SAVE A BUNDLE! IIA Members save $453.00!

• COSO Internal Control – Integrated Frame-work: 2013 Framework NEW!

• Internal Auditing: Assurance & Advisory Ser-vices, 3rd Edition NEW!

• International Professional Practices Framework (IPPF) 2013 NEW!

• Quality Assessment Manual for the Internal Audit Activity NEW!

• Sawyer’s Internal Auditing, 6th Edition NEW! • The Internal Auditor’s Guide to Risk

Assessment NEW! • And more

Item No.: 1042

Member Price: $1,100.00 / Nonmember Price: $1,553.00

GUIDANCE RESOURCES

Practice Guide: Auditing Anti-bribery and Anti- corruption ProgramThe IIA’s new Practice Guide: Auditing Anti-bribery and Anti-corruption Programs offers internal audit practi-tioners insight on the nature of

bribery and corruption in organizations throughout the world. It discusses the current business land-scape and stresses that no organization, regardless of whether it is public, private, large or small is immune from the devastating impacts bribery and corruption bring.

FRAUD

18 | The Institute of Internal Auditors

Your Career

Page 19: October 2014 Your Career Compass

GTAG 13: Fraud Preven-tion and Detection in an Automated WorldThrough a step-by-step process for auditing a fraud prevention program, an expla-nation of the various types of data analysis to use in detect-

ing fraud, and a technology fraud risk assessment template, this GTAG aims to inform and provide guidance to CAEs and internal auditors on how to use technology to help prevent, detect, and respond to fraud.

Practice Guide: Internal Auditing and FraudThis guide discusses fraud and provides general guidance to help internal auditors comply with professional standards. Because fraud negatively impacts organizations in

many ways — financial, reputational, and through psychological and social implications — it is important for organizations to have a strong fraud program that includes awareness, prevention, and detection programs, as well as a fraud risk assessment process to identify risks within the organization.

Consult these guidance resources, part of the International Professional Practices Framework® (IPPF®), at www.theiia.org/guidance.

THOUGHT LEADERSHIP AND RESEARCH

Internal Auditor Magazine: Businesswide CybersecurityFrom the board and management to the chief infor-mation officer and the CAE, organizational leaders typically now discuss cyberthreats not solely as an IT problem but as a fully fledged business risk. Internal auditors can help assess security weaknesses, but they must also be engaged at a more strategic level, knowing what the board’s approach to security is, working proactively with systems administrators, and getting involved with new IT implementations at an early stage. www.internalauditoronline.org

Case Study: Combating Financial Reporting Fraud, Builds on Prior Case Study SuccessThe Anti-Fraud Collaboration published a second innovative case study for members of the financial reporting supply

chain. The Carolina Wilderness Outfitters Case Study explores potential material fraud at a fictitious public company. The hypothetical examination is designed to facilitate a discussion of how and when to conduct an internal investigation when fraud is suspected. Download at www.theiia.org/goto/ anti-fraudcollaboration.

AuditChannel.tvCatch the latest insight into fraud with leading ex-perts on www.AuditChannel.tv – Approaching Fraud Risk Proactively, Data Analytics and Fraud, Future of Fraud, Vendor Fraud Case Study, and more.

Carolina Wilderness OutfittersCase Study (A)

FRAUD

www.theiia.org | 19

Your Career

Page 20: October 2014 Your Career Compass

As an internal auditor, you are called upon to assess and make appropriate recommendations for improving the

governance process; evaluate the effectiveness and contribute to the improvement of risk management processes;

and assist the organization in maintaining effective controls by evaluating their effectiveness and efficiency and by

promoting continuous improvement. As the professional association established to support you, the internal auditor,

we have developed a host of resources to assist you in achieving those objectives.

TRAINING RESOURCESLearn more about these courses at www.theiia.org/training.

Assessing Risk: Ensuring Internal Audit’s ValueThis course provides practical insights relating to contemporary best practices of risk assessment activ-ities and allows participants to apply what they have learned so they can implement risk assessment ac-tivities at their organization. Covering fundamentals and nuances such as audit universe, risk appetite, and fraud; and the challenges of implementation.

Upcoming Offerings: Oct. 7–8, Chicago, IL

Oct. 28–29, Raleigh, NC

Nov. 11–12, Houston, TX

Nov. 17–20, eSeminar

Nov. 18–19, San Francisco, CA

Dec. 8–9, Orlando, FL

March 4–5, San Antonio, TX

May 13–14, Chicago, IL

Course Duration: 2 days / CPE Hours Available: 16

NEW! COSO-based Internal AuditingThis course provides internal auditors an opportunity to deepen their understanding of the COSO internal control and ERM integrated frameworks required to carry out their roles and responsibilities. Through interactive exercises, participants will explore how to leverage the frameworks in their audit process.

Upcoming Offerings: Nov. 18–19, San Francisco, CA

Dec. 18–19, New York, NY

March 4–5, San Antonio, TX

March 26–27, Los Angeles, CA

April 16–17, New York, NY

Course Duration: 2 days / CPE Hours Available: 16

Risk-based Auditing: A Value Add PropositionParticipants will come to understand the importance of corporate governance and enterprise risk management, while learning to identify risks, perform risk assessments, develop a risk-based assurance plan, understand entity wide controls, and plan a risk-based engagement.

Upcoming Offerings: Nov. 18–19, San Francisco, CA

Dec. 10–11, Orlando, FL

May 11–12, Chicago, IL

Course Duration: 2 days / CPE Hours Available: 16

GOVERNANCE, RISK, AND CONTROLS

Consult the course matrix on pages 4-5 for offering dates and locations.

Learn more about any of the above courses and register today at www.theiia.org/training.

SEMINARS ON-SITE TRAINING CONFERENCESeLEARNING20 | The Institute of Internal Auditors

Your Career

Page 21: October 2014 Your Career Compass

On-site TrainingGet your entire team up to speed on techniques to tackle GRC issues. Have our On-site Training team schedule any of the courses on the previous pages or additional courses for your team of five or more at your location. Access the 100-plus course offering at www.theiia.org/onsite.

eLEARNING

The IIA’s wide variety of webinars, eSeminars, on-demand self-study courses, and eWorkshops are available conveniently whenever and wherever you are. www.theiia.org/elearning

eSeminarsOct. 6–7: Data Analysis for Internal Auditors

Oct. 14–17, Dec. 2–11: Enterprise Risk Management: An Introduc-

tion

Oct. 15–24: Lean Six Sigma Tools For Internal Audit Fieldwork

Oct. 28–Nov. 6: Operational Auditing: Influencing Positive Change

Nov. 3–12: Audit Report Writing

Nov. 4–7: Statistical Sampling for Internal Auditors

Nov. 17–20: Assessing Risk: Ensuring Internal Audit’s Value

Dec. 8–10: Performing An Effective Quality Assessment

Dec. 8–11: Control Self-Assessment: An Introduction

Dec. 8–17: Operational Auditing: Evaluating the Supply Chain

Members-only WebinarsSave the date for this Members-only webinar addressing governance and risk-related issues. Learn more about free CPE opportunities at www.theiia.org/goto/MOW:

Oct. 21: Integrated Reporting: Case Studies

Financial Services Auditor Group WebinarsNov. 6: The Intersection of the Audit and Risk Committees

Dec. 4: Hot Topics in Compliance

CONFERENCES

Conferences offer a great way to gain additional information to assist you in managing your role addressing governance, risk management, and con-trols issues. Check out these upcoming sessions at conference events:

All Star ConferenceOct. 28–30, 2014 / Las Vegas, NV

• Data Governance and Electronic Discovery: Trends, Case Law,

and Leading Practices

• Risk: It’s More Than Just Compliance

• Internal Audit’s Role in Introducing the Three Lines of Defense

Governance Model

General Audit Management ConferenceMarch 9–11, 2015 / Aria/Las Vegas, NV

• Offers full educational tracks focused on Risk and Strategic

Insights and Compliance Risks and Emerging Issues.

Governance, Risk, And Control Conference (IIA/ISACA)Aug. 17-19, 2015 / Biltmore / Phoenix, AZ

• The IIA and ISACA are collaborating again — leveraging the

strength of both organizations to bring renowned speakers and

relevant topics in governance, risk, and controls.

Visit www.theiia.org/conferences for more info.

GOVERNANCE, RISK, AND CONTROLS

www.theiia.org | 21

Your Career

Page 22: October 2014 Your Career Compass

CERTIFICATIONS

CRMAFind the Key to Your Success with the Certification in Risk Management Assurance® (CRMA®) Designation.

The CRMA is designed for internal auditors and risk management professionals with responsibility for and experience in providing risk assurance, governance processes, quality assurance, or control self-assessment (CSA). It demonstrates your individual ability to evaluate the dynamic components comprising an organization’s governance and enterprise risk management program and provide advice and assurance around these issues.

QIAL Today, growth and change in the internal auditing field is demanding a new type of leader — one who drives a high-performing audit team while delivering value by

consistently addressing stakeholder needs, top-down risks, and expectations of an evolving marketplace. The IIA has developed the Qualification in Internal Audit Leadership™ (QIAL™) to support you on this journey to be the next generation of visionaries for the profession.

Visit www.theiia.org/QIAL for more information or to apply.

BOOKS AND EDUCATIONAL PRODUCTS

The Balanced Scorecard: Applications in Internal Auditing and Risk Management – eBookThe Balanced Scorecard performance management system has become an essential framework for strate-gy execution throughout the world. The book provides an overview of concepts and terminology of the Bal-anced Scorecard framework to begin developing it as a strategic leadership skill and delves deeper into how the Balanced Scorecard can help CAEs to:• Use the Mission-Driven Strategy framework to

develop a strategy for internal audit.• Connect internal audit strategy to enterprise

strategy.• Facilitate continuous improvement in the internal

audit function.

Item No.: 1153.ep

Member Price: $35.00 / Nonmember Price: $45.00

The Internal Auditor’s Guide to Risk Assessment – ebookRisk assessment is a core activity that impacts internal auditors on a daily basis. That is why it is so important for everyone in the internal audit function to have the skills and knowledge to assess risk. The Internal Auditor’s Guide to Risk Assessment will show you how to:

• Conduct a risk assessment, step by step.• Use the risk assessment to create the audit plan.• Align risk assessment to business objectives.

Item No.: 1134.ep

Member Price: $105.00 / Nonmember Price: $125.00

Access hundreds of other practitioner-reviewed educational products at www.theiia.org/bookstore.

GOVERNANCE, RISK, AND CONTROLS

22 | The Institute of Internal Auditors

Your Career

Page 23: October 2014 Your Career Compass

GUIDANCE RESOURCES

IPPF Practice Guides Covering GRC:• Assessing the Adequacy of Risk Management using ISO 31000

• Assessing Organizational Governance in the Private Sector

• Auditing Privacy Risks, 2nd Edition

• Auditing External Business Relationships

• Coordinating Risk Management and Assurance

IPPF Practice Guides – GTAGs Covering GRC:• GTAG 10: Business Continuity Management

• GTAG 9: Identity and Access Management

• GTAG 8: Auditing Application Controls

• GTAG 7: Information Technology Outsourcing, 2nd Edition

• GTAG 2: Change and Patch Management Controls

IPPF Practice Advisories covering GRC:• Board Interaction

• Linking the Audit Plan to Risk and Exposures

• Using the Risk Management Process in Internal Audit Planning

• Assurance Maps

• Reporting to Senior Management and the Board

• Governance: Definition

• Governance: Relationship With Risk and Control

• Governance: Assessments

• Assessing the Adequacy of Risk Management Processes

• Managing the Risk of the Internal Audit Activity

• Assessing the Adequacy of Control Processes

• Evaluating an Organization’s Privacy Framework

Consult these guidance resources in the Interna-tional Professional Practices Framework® (IPPF)® at www.theiia.org/guidance.

THOUGHT LEADERSHIP AND RESEARCH

Cybersecurity: What the Board of Directors Needs to Ask The overwhelming number of cybercrime incidents in recent months has forced boards of directors to ask strategic and thoughtful questions directed toward the management and internal audit. Boards need to take a more proactive role in cybersecurity or face the possi-bility of lawsuits in the event of a security breach. The IIA Research Foundation, in partnership with ISACA, commissioned the research report.

It also outlines the NACD’s five principles for the Board, and provides a list of top questions every board needs to ask.

Internal Auditor Magazine: The Winds of ChangeRapid changes in business are challenging organi-zations to adapt to an ever-shifting risk landscape. Boards and executive management have turned to their internal audit departments for help, and CAEs increasingly are being judged and valued for their ability to be more forward looking. InternalAuditor.org

AuditChannel.tvCatch the latest insight into governance, risk, and control on www.AuditChannel.tv:

• New IIA Guidance on Anti-bribery and Corruption• Keys to the Kingdom: Attack & Penetration

Testing• How NOT to Sell Your Leadership Team on

COSO• And more!

GOVERNANCE, RISK, AND CONTROLS

www.theiia.org | 23

Your Career

Page 24: October 2014 Your Career Compass

Whether you are just starting your career, coming into internal audit midway through your career, or needing to

enhance your skill sets with latest best practices, here are resources to support your internal audit expertise to make

an impact and maintain relevancy with your colleagues, superiors, executive leadership, board, and audit committee.

TRAINING RESOURCESLearn more about these courses at www.theiia.org/training.

Analyzing & Improving Business Processes This course provides participants with tools and techniques that can be used in any process analysis engagement and includes opportunities to apply learnings in real-world scenarios. The best way to build business process analysis skills is by doing the work, and this course is full of hands-on applications using case studies and the participants’ understand-ing of their own processes to do that.

Upcoming Offerings: Nov. 11–12, Houston, TX

March 4–5, San Antonio, TX

April 14–15, New York, NY

Course Duration: 2 days / CPE Hours Available: 16

Audit Manager Tools and Techniques Through practical exercises and case studies, participants will learn how to manage the roles and relationships of the diverse parties involved in the auditing process. Participants will learn how to maintain lines of communication with the CAE and executive management, and problem-solve while motivating a team and delegating tasks.

Upcoming Offerings: Nov. 11–14, Houston, TX

Nov. 18–21, San Francisco, CA

March 24–27, Los Angeles, CA

Course Duration: 4 days / CPE Hours Available: 32

Audit Report WritingThis is a hands-on course that focuses on the orga-nization and structure of audit reports, and includes case study activities for practicing the basics of audit report writing. This course is a good prep course for more advanced audit report writing courses.

Upcoming Offerings: Nov. 3–12, eSeminar

Nov. 11–12, Houston, TX

Nov. 20–21, San Francisco, CA

March 2–3, San Antonio, TX

Course Duration: 2 days / CPE Hours Available: 16

Auditor-in-charge Tools and TechniquesWhether you are a recently promoted audi-tor-in-charge, assuming the role, or seeking a re-fresher, this informative session covers the organiza-tional, time management, and problem solving skills necessary to manage a successful team. Through the use of a case study that is woven into the course, participants will learn about the roles and responsi-bilities of an auditor-in-charge for the phases of an internal audit.

Upcoming Offerings: Dec. 8–11, Orlando, FL

March 2–5, San Antonio, TX

May 11–14, Chicago, IL

May 18–21, Dallas, TX

Course Duration: 4 days / CPE Hours Available: 32

INTERNAL AUDIT PRACTICE

SEMINARS ON-SITE TRAINING CONFERENCESeLEARNING24 | The Institute of Internal Auditors

Your Career

Page 25: October 2014 Your Career Compass

Beginning Auditor Tools and Techniques To become a successful auditor, a strong base of knowledge and an understanding of basic audit skills are essential. With this program, new auditors, as well as non-auditors with internal control responsi-bilities, can learn the ins-and-outs of an audit from beginning to end. Through team exercises, group discussion, and facilitator presentations, attendees will gain a foundation of knowledge that will allow them to prepare properly for and conduct a success-ful audit.

Upcoming Offerings: Oct. 28–31, Raleigh, NC

Nov. 11–14, Houston, TX

Nov. 18–21, San Francisco, CA

Dec. 8–11, Orlando, FL

Dec. 16–19, New York, NY

March 2–5, San Antonio, TX

March 24–27, Los Angeles, CA

April 14–17, New York, NY

May 11–14, Chicago, IL

May 18–21, Dallas, TX

Course Duration: 4 days / CPE Hours Available: 32

Best Practices in Internal AuditingThis course will use best practices to help attendees transform their audit departments, create a desired culture, market their valuable capabilities, and mea-sure the results.

Upcoming Offerings: Nov. 20–21, San Francisco, CA

Dec. 10–11, Orlando, FL

Course Duration: 2 days / CPE Hours Available: 16

Building a Sustainable Quality Program An internal audit activity demonstrates its commit-ment to quality by meeting the expectations of its stakeholders while continuing to improve the effec-tiveness and efficiency of its operations. A successful quality assurance and improvement program (QAIP) is crucial to achieving this goal.

Upcoming Offerings: Oct. 7–8, Chicago, IL

Nov. 11–12, Houston, TX

Dec. 16–17, New York, NY

March 24–25, Los Angeles, CA

May 18–19, Dallas, TX

Course Duration: 2 days / CPE Hours Available: 16

Communication Skills for AuditorsThrough facilitator presentations, group discussions, case studies, practical exercises, and individual coaching and feedback, participants will learn to see themselves as others see them, in terms of style and the impressions they create, and increase their ability to reach negotiated agreements.

Upcoming Offerings: Oct. 7–10, Chicago, IL

Dec. 16–19, New York, NY

March 24–27, Los Angeles, CA

May 11–14, Chicago, IL

Course Duration: 4 days / CPE Hours Available: 32

INTERNAL AUDIT PRACTICE

SEMINARS ON-SITE TRAINING CONFERENCESeLEARNING

Consult the course matrix on pages 4-5 for offering dates and locations.

Learn more about any of the above courses and register today at www.theiia.org/training.

www.theiia.org | 25

Your Career

Page 26: October 2014 Your Career Compass

COSO 2013: Implementing the Framework This course examines how a principles-based approach can be used to design, implement, and evaluate a system of internal controls. You will have an opportunity to discuss the implications that the updated COSO Framework presents to the internal audit profession and to individual internal audit activities. You will also identify opportunities for uti-lizing the updated Framework in your internal audit process and increase the value of your assurance and consulting services.

Upcoming Offerings: Oct. 7–8, Chicago, IL

Oct. 28–29, Raleigh, NC

Nov. 11–12, Houston, TX

Nov. 20–21, San Francisco, CA

Dec. 8–9, Orlando, FL

Dec. 16–17, New York, NY

March 24–25, Los Angeles, CA

April 16–17, New York, NY

Course Duration: 2 days / CPE Hours Available: 16

NEW! COSO-based Internal AuditingThis course provides internal auditors an opportunity to deepen their understanding of the COSO internal control and ERM integrated frameworks required to carry out their roles and responsibilities. Through interactive exercises, participants will explore how to leverage the frameworks in their audit process.

Upcoming Offerings: Nov. 18–19, San Francisco, CA

Dec. 18–19, New York, NY

March 4–5, San Antonio, TX

March 26–27, Los Angeles, CA

April 16–17, New York, NY

Course Duration: 2 days / CPE Hours Available: 16

Creative Problem-solving Techniques for AuditorsThrough facilitator presentations, group discussions, practical exercises, case studies, and self-assess-ments, this course will help participants define creativity and the dimensions of creative problem solving. Experienced facilitators will demonstrate five strategies for creativity and divergent thinking and explain the ground rules for convergent think-ing. By the end of the course, participants will know how to jump-start creative approaches to problems and have new, immediately usable tools for logical problem solving.

Upcoming Offerings: Nov. 13–14, Houston, TX

Dec. 18–19, New York, NY

May 18–19, Dallas, TX

Course Duration: 2 days / CPE Hours Available: 16

Financial Auditing for Internal Auditors Taking on such topics as “common recipes for cook-ing the books,” and covering information flow from business process to financial statement and more, this course will help participants understand how key business processes relate to financial statements, as well as the impact of information technology on financial statements.

Upcoming Offerings: Oct. 7–8, Chicago, IL

March 24–25, Los Angeles, CA

Course Duration: 2 days / CPE Hours Available: 16

INTERNAL AUDIT PRACTICE

SEMINARS ON-SITE TRAINING CONFERENCESeLEARNING26 | The Institute of Internal Auditors

Your Career

Page 27: October 2014 Your Career Compass

Statistical Sampling for Internal Auditors The course includes different methods of random sampling and non-random sampling; explains how to calculate sample size and adjust for population size and resource constraints; and examines the concept of strategic sampling to get the most information for minimum cost, including how to combine results and extrapolate, and what to report.

Upcoming Offerings: Nov. 4–7, eSeminar

Nov. 20–21, San Francisco, CA

May 11 – 12, Chicago, IL

Course Duration: 2 days / CPE Hours Available: 16

NEW! The Effective Auditor: Understanding and Applying Emotional IntelligenceResearch indicates approximately two-thirds of the difference between top and average performance is attributed to emotional competence. Improve your effectiveness with others by enhancing your emo-tional intelligence in this hands-on 2-day course.

Upcoming Offerings: Nov. 11–12, Houston, TX

Dec. 16–17, New York, NY

May 20 – 21, Dallas, TX

Course Duration: 2 days / CPE Hours Available: 16

eLEARNING

The IIA offers a wide variety of webinars, eSeminars, on-demand self-study courses, and eWorkshops. www.theiia.org/elearning.

eWorkshopsOct. 7–16: Basic Data Integrity, Mining, and Analysis in Excel

Oct. 21–30: Using Excel to Extract, Analyze, and Report on Audit

Samples - Microsoft Excel Audit Training

Dec 8–12: COSO 2013’s Impact on Ethics Evaluation

eSeminarsOct. 6–7: Data Analysis for Internal Auditors

Oct. 14–17: Enterprise Risk Management: An Introduction

Oct. 15–24: Lean Six Sigma Tools For Internal Audit Fieldwork

Oct. 28–Nov. 6: Operational Auditing: Influencing Positive Change

Members-only WebinarsSave the dates for this line-up of Members-only we-binars addressing internal audit activity. Learn more about these free CPE opportunities at www.theiia.org/goto/MOW.

Oct. 21: Integrated Reporting: Case Studies

Nov. 18: Transforming Your Audit Department With Technology

Dec. 16: Creativity and Innovation in Internal Audit

Specialty Group WebinarsFinancial Services Auditor Group

Oct. 2: Internal Audit – the World’s Greatest Profession

Nov. 6: The Intersection of the Audit and Risk Committees

Dec. 4: Hot Topics in Compliance

VISION UNIVERSITY

Aspiring and new CAEs can get the CAE Strategic Framework, a vital element that underpins good leadership and outlines the professional practices necessary to achieve strategic goals, at Vision Uni-versity. Apply now to learn the fundamentals that can take you to the next level in your career.

Nov. 10–13 / Hotel Palomar, San Diego, CA

Consult the course matrix on pages 4-5 for offering dates and locations.

Learn more about any of the above courses and register today at www.theiia.org/training.

INTERNAL AUDIT PRACTICE

SEMINARS ON-SITE TRAINING CONFERENCESeLEARNINGwww.theiia.org | 27

Your Career

Page 28: October 2014 Your Career Compass

CONFERENCES

Check out these upcoming conference sessions focused on internal audit best practices:

All Star ConferenceOct. 28–30, 2014 / Las Vegas, NV

• Risk: It’s More Than Just Compliance

• Big Data Risks & Opportunities

• Leading Transformational Change

General Audit Management ConferenceMarch 9–11, 2015 / Aria / Las Vegas, NV

• Offers a full educational track featuring seven sessions

focused on Executive Leadership Insights.

International ConferenceJuly 5–8, 2015 / Vancouver Convention Center / Vancouver, BC, Canada

• Offers a variety of sessions focused on fundamentals and best

practices.

Visit www.theiia.org/conferences.

CERTIFICATIONS

Your Master Key to Career Success –IIA Global Certifications and QualificationsWhether you are mastering the fundamentals of internal audit or moving into audit management, you owe it to yourself and your organization to pursue the Certified Internal Auditor® (CIA®), the only globally recognized internal audit credential and standard for excellence within the profession. Earning the CIA demonstrates your commitment to the profes-sion and your career. Achieving it will increase your

confidence, serve as an example for current or future staff, and build credibility with internal audit clients.

Auditors specializing in financial services or govern-ment disciplines can further distinguish their exper-tise by earning the Certification in Control Self-As-sessment® (CCSA®), Certified Financial Services Auditor® (CFSA®), Certified Government Auditing Professional® (CGAP®), or Certification in Risk Management Assurance® (CRMA®) designations.

If you are aspiring to be a leader in your organization or looking to add credibility to your current leader-ship role with stakeholders and peers, the new Qual-ification in Internal Audit Leadership™ (QIAL™) will help you build and enhance skills to further establish your credibility as a leader of the future.

Visit www.theiia.org/certification to review the exam syllabi and eligibility requirements, explore prepara-tion resources, and to start your application or regis-ter for the CIA, QIAL, or one of The IIA’s specialty designations.

BOOKS AND EDUCATIONAL PRODUCTS

The IIA’s CIA Learning SystemThis comprehensive and interactive CIA review program teaches and reinforces the entire global CIA exam syllabus in a flexible, on-demand format. It combines reading materials, in printed and e-reader formats, with online tests and study tools to ensure you’re prepared to pass the CIA exam and armed with critical tools and knowledge to excel in your internal audit career.

Item No.: 1150

Member Price: $795.00 / Nonmember Price: $895.00

INTERNAL AUDIT PRACTICE

28 | The Institute of Internal Auditors

Your Career

Page 29: October 2014 Your Career Compass

Become a Strategic Internal Auditor: Tying Risk to StrategyIn Become a Strategic Internal Auditor, you can learn how leading internal audit functions work with man-agement to play a role in strategic initiatives.

Item No.: 5033

Member Price: $40.00 / Nonmember Price: $50.00

Financial Planning and Budgets: Understanding the Auditing Process Financial Planning and Budgets is a comprehensive reference guide designed to help experienced audit managers and internal auditors to plan, organize, perform, and report on the financial planning and budgeting processes. A strong risk management capability is very important in today’s automated, fast-paced business world. This book discusses iden-tifying key risks in the external or internal business environment of an organization and how they should be mitigated, avoided, or controlled.

Item No.: 1158

Member Price: $55.00 / Nonmember Price: $65.00

GUIDANCE

The IIA’s International Professional Practices Framework® (IPPF®) is the authoritative guidance on the internal audit profession and consists of three mandatory elements: the Code of Ethics, the Definition of Internal Auditing, and the Internation-al Standards for the Professional Practice of Internal Auditing (Standards). The IPPF presents current, relevant, internationally consistent information that is required by internal audit professionals worldwide. Visit www.theiia.org/guidance.

THOUGHT LEADERSHIP AND RESEARCH

Internal Auditor Magazine: Mind the GapCurrent views of the profession suggest internal auditors must build on the trust they have with stakeholders and seek out better ways to add value. The IIA’s new global chairman of the board, Anton van Wyk, says it’s time for internal audit to address the chasm that has opened between its current role and stakeholder expectations. InternalAuditor.org

Internal Audit Around the WorldCBOK RESEARCH - Internal Audit Around the World taps into the power of The IIA’s Common Body of Knowledge (CBOK) database that was de-veloped in recent years to allow researchers to glean insights from a longitudinal study of the profession. The report reviews the data from both the 2006 and the 2010 CBOK surveys to provide in-depth analysis of the factors and rationale behind the development of the profession and its different facets.

IIA members can download research for free. Visit www.theiia.org/research.

AuditChannel.tvCatch the latest insight into internal audit best prac-tices on www.AuditChannel.tv.

• The Answer to “Auditors Don’t Know the Busi-ness”

• Internal Audit in 2020• COSO: Helpful Hints on Implementation• And more!

INTERNAL AUDIT PRACTICE

www.theiia.org | 29

Your Career

Page 30: October 2014 Your Career Compass

Technology continues to play an ever-increasing role in internal audit as both an audit tool and audit area. Whether

you’re looking for the latest guidance on the use of technology or need to sharpen your IT skills, we have a variety of

solutions to fit your ever-changing needs.

Keep Your Finger on the Pulse of Technology with The IIA and Deloitte – an IT audit curriculum created specifi-

cally for IT pros, IT novices, and everyone in between. These hands-on courses are taught by skilled instructors

with real world experience who make today’s technology issues clear. www.theiia.org/training.

Auditing Oracle ApplicationsAcquire a solid understanding of how the implemen-tation and use of Oracle applications will impact your organization. This course includes facilitated discussions, and computer-simulated class exercises. It provides a thorough overview of Oracle security basics, network and operating system security, data conversion and interfaces, and much more.

Upcoming Offering: Oct. 21–24, Costa Mesa, CA

Course Duration: 3.5 days / CPE Hours Available: 32

Introduction to IT Auditing Gain an understanding of the ins and outs of infor-mation technology as well as baseline knowledge of general computer control concepts. Knowing how information systems impact the audit environment is the key to doing your job well today and achieving greater success tomorrow.

Upcoming Offering: TBD

Course Duration: 3.5 days / CPE Hours Available: 32

SAP GRC Access Control and Process Control This course provides an essential knowledge base, as well as hands-on learning for internal audit profes-sionals, including information technology auditors, working in a SAP GRC environment, as well as those involved in SAP GRC implementation and configuration. Hands-on learning will be conducted with Access Control and Process Control 10.0.

The curriculum includes lectures, group discussions, case studies, and practical exercises, allowing partici-pants to explore the many ways that a SAP GRC implementation impacts internal auditing.

Upcoming Offering: Oct. 6–9, Chicago, IL

Course Duration: 3.5 days / CPE Hours Available: 32

SAP Implementation and Process Auditing Covers the structural elements and technical fea-tures of SAP ERP, SAP ERP security, the internal control features and functions of the various SAP ERP business processes, and the SAP GRC suite of tools formerly known as Virsa.

Upcoming Offering: Nov. 4–7, Costa Mesa, CA

Course Duration: 3.5 days / CPE Hours Available: 32

INFORMATION TECHNOLOGY

SEMINARS ON-SITE TRAINING CONFERENCESeLEARNING30 | The Institute of Internal Auditors

Your Career

Page 31: October 2014 Your Career Compass

Purchasing Fraud: Auditing and Detection TechniquesThis course helps you assess an organization’s risks relating to purchasing fraud, identify controls that can mitigate those risks, design audit tests to detect purchasing fraud, and investigate evidence of fraud occurring.

Upcoming Offering: Nov. 18–19, Costa Mesa, CA

Course Duration: 2 days / CPE Hours Available: 16

Internal Auditing for FCPA & Anti-CorruptionThis course provides an overview of the FCPA and UK Bribery Act and will discuss the various roles internal auditors can play in auditing for corruption.

Upcoming Offering: Nov. 20, Costa Mesa, CA

Course Duration: 1 day / CPE Hours Available: 8

Visit www.theiia.org/training for more information on these courses and to register.

On-site TrainingGet your entire team up to speed on techniques to tackle technology issues. Have our On-site Training team schedule any of the courses on the previous pages or from the 100 plus course inventory for your team of five or more at your location.

eLEARNING

The IIA’s wide variety of webinars, eSeminars, on-de-mand self-study courses, and eWorkshops mean you can spend less time traveling to training and more time learning. www.theiia.org/elearning.

eSeminarsNov. 4–7: Statistical Sampling for Internal Auditors

Members-only WebinarsNov. 18: Master Data: Best Practices and New Challenges

Dec. 16: Creativity and Innovation in Internal Audit

Learn more about these free CPE opportunities at www.theiia.org/goto/MOW

CONFERENCES

Conferences offer a great way to delve into informa-tion technology and network with your peers who are facing the same tough challenges:

All Star ConferenceOct. 28–30, 2014 / Las Vegas, NV

• Auditing IT Governance: A Case Study

• Social Networking and Social Engineering: Emerging Threats

Every Auditor Needs to Know About

• Risk and Opportunity: What Chief Audit Executives Should

Know About Cybersecurity

General Audit Management ConferenceMarch 9–11, 2015 / Aria/Las Vegas, NV

• Offers a full educational track featuring seven sessions

focused on Technology Insights.

INFORMATION TECHNOLOGY

SEMINARS ON-SITE TRAINING CONFERENCESeLEARNING

Consult the course matrix on pages 4-5 for offering dates and locations.

Learn more about any of the above courses and register today at www.theiia.org/training.

www.theiia.org | 31

Your Career

Page 32: October 2014 Your Career Compass

International ConferenceJuly 5-8, 2015 / Vancouver Convention Center / Vancouver, BC, Canada

• Offers a full educational track featuring seven sessions

focused on IT audit and information security.

Visit www.theiia.org/conferences for more information.

GUIDANCE

GTAG 4: Management of IT Auditing, 2nd EditionThis guide takes into account the latest developments in the IT landscape and empowers CAEs to more efficiently and effectively manage their IT au-

dit work by focusing on three core areas: determin-ing where IT audit resources are needed; accurately evaluating IT-related risks; and executing IT audit work.

GTAG 7: Information Technology Outsourcing, 2nd EditionThis guide is to help CAEs and their audit teams deter-mine the extent of internal au-ditor involvement when IT is partially or fully outsourced in

their entities by providing information on the types of IT outsourcing (ITO), the life cycle of ITO, and how internal auditors can approach risk in connec-tion with ITO delivery.

GTAG: 17: Auditing IT GovernanceProvides public and private sector internal auditors with the knowledge necessary to fulfill their responsibilities in providing assurance and con-sulting services for IT gover-

nance. It covers the different aspects of governance that should be in place to ensure IT supports the organization’s strategies and objectives, and discuss-es red flags to look for that might signal otherwise.

Consult these guidance resources, including GTAGs that address IT, part of International Professional Practices Framework® (IPPF®), by visiting www.theiia.org/guidance.

INFORMATION TECHNOLOGY

32 | The Institute of Internal Auditors

Your Career

Page 33: October 2014 Your Career Compass

BOOKS AND EDUCATIONAL PRODUCTS

A New Auditor’s Guide to Planning, Performing, and Presenting IT AuditsInformation technology is a highly dynamic, rapidly chang-ing environment. IT auditors are expected to stay current with the latest tools, technologies,

and trends. This book is designed to help internal auditors take a step back and understand the general process and activities involved in conducting an audit around technology.

Item No.: 1070

Member Price: $60.00 / Nonmember Price: $70.00

Auditing Social Media: A Governance and Risk GuideIf you want your business to stay ahead in the game, then this one-stop guide will help you navigate through the maze of risks and governances surrounding social

media. Auditing Social Media explains how your or-ganization can thoroughly ensure it has the adequate measures in place to capitalize on social media while protecting itself from excessive risk.

Item No.: 1081

Member Price: $39.95 / Nonmember Price: $49.95

Access hundreds of other practitioner-reviewed educational products at www.theiia.org/bookstore.

THOUGHT LEADERSHIP AND RESEARCH

Internal Auditor Magazine: Plugging Digital LeaksData leak/loss prevention (DLP) is a system-based response to data loss risk that is deployed to prevent sensi-tive or proprietary information from leaving an organization’s

control. By drawing the right correlations to iden-tify data loss as a relevant risk and then associating DLP as the appropriate solution, internal audit can help drive meaningful protective measures into their organizations’ IT infrastructures. InternalAuditor.org

Tone at the Top: Big Data: Collect It, Respect ItExplores the increasingly popular — and risky — prac-tice of collecting, storing, and using large amounts of data. Access now at www.globaliia.org/Tone-at-the-Top.

AuditChannel.tvCatch the latest insight into IT audit best practices on www. AuditChannel.tv.

• Internal Audit’s Role in Large IT Implementation Projects

• Updates to FTC Disclosure Guidelines• Privacy Risks and Internal Audit’s Role• And more!

INFORMATION TECHNOLOGY

Te

ch

no

lo

gy

Ju

ne

20

14In

Te

rn

al

au

dIT

or

June 2014

a world of technology

Meet John Wszelaki, The IIA’s new n.A. Board Chairman

COSO 2013: A Public Sector Case Study

Strengthening the Response to Business Disruption

eye on Business: Cyberattacks

InTeRnAlAuDITOROnlIne.ORg

DATA AnAlySIS

CyBeRSeCuRITy

RISk + SPeeD

www.theiia.org | 33

Your Career

Page 34: October 2014 Your Career Compass

FUTURE

YOUR

MAPPING

34 | The Institute of Internal Auditors

Your Career

Page 35: October 2014 Your Career Compass

Mapping Your FUTUREWouldn’t it be nice if GPS existed for professional development? What if there was a tool that could tell you where

you are and provide you with step-by-step directions on how to get where you want to go? The IIA’s new Career Map,

which will debut at this year’s All Star Conference in October, aims to do just that. Designed specifically for internal

auditors, this online tool puts practitioners in the driver’s seat when it comes to understanding their current

strengths, identifying existing development needs in their skill sets, and

outlining the skills necessary to advance to the next level.

“It’s a powerful tool that helps practitioners view their skill sets objectively and helps The IIA more effectively meet and respond to their professional development needs,” says Bonnie Ulmer, The IIA’s vice president of Learning Solutions. Ulmer has worked to bring the tool to life alongside Harold Silverman, CIA, vice president of internal audit at The Wendy’s Company and the initiative’s cham-pion from The IIA’s Global Board of Directors, and Deborah Kretchmar, CIA, vice president of internal audit at CUNA Mutual Group and a member of The IIA’s Learning Solutions Committee.

The tool is not simply a laundry list of competencies. It reflects what leading practitioners and academics from around the world have identified as the core competencies for the profession. “The tool utilizes The IIA’s Global Internal Audit Competency Framework and directly links users to the development resources available from the profession’s global voice, recognized authority, acknowledged leader, chief advocate, and principal educator,” says Silverman.

“Throughout my career, I have encountered internal audit departments that want to be best-in-class, but struggle to clearly define what that means when it’s broken down by individual roles,” says Kretchmar. “That’s exactly what the career mapping tool does. It evaluates a practitioner’s skill sets against the Competency Framework according to role, providing an invaluable snapshot of where you are and what you need to do to close the gaps and take your career to the next level. Historically, there has never been anything like this specifically for internal auditors.”

So how does it work? The Internal Audit Career Map has several layers, which when combined create an arsenal of information that provides today’s practitioners with an invaluable competitive advantage based on their individual needs.

P R O F E S S I O N A L D E V E L O P M E N T G P S

“An invaluable snapshot of where you are

and what you need to do to close the gaps

and take your career to the next level.”

www.theiia.org | 35

Your Career

Page 36: October 2014 Your Career Compass

STEP 1: Conduct Your Self-assessmentThe assessment is organized by internal audit role, not title. You select your role and rate yourself for each of the 10 core competencies of the Competency Model. Each core competency is supported by a list of more detailed competencies further defining each component. To begin your career map, apply the self-assessment to your current role. Five proficiency ratings — Limited Awareness, General Awareness, Applied Knowledge, Skilled, and Expert — are used for each com-petency. A key advantage of the assessment is that you don’t have to guess which proficiency rating you fall into for each competency; there are suggested behaviors to go along with each element. This provides clarity and accuracy during the as-sessment and builds objectivity into the process.

STEP 2: Review Your ResultsAfter completing the self-assess-ment, the tool generates a custom-ized report that shows you how you rate against the target proficiencies

necessary for your current role. It will show you whether you scored at, above, or below the minimum requirement for each competency.

STEP 3: Explore Your OptionsUsing your self-assessment results, the tool then creates a Personalized Learning Plan that recommends training opportunities, publications, and other professional resources to close proficiency gaps identified during the assessment.

STEP 4: Take ActionAfter exploring all your options, you can use the recommendations to map a Development Plan to help prioritize development goals, create action items, and activate work flow reminders that keep you on track.

After completing the initial process on your current professional role, you may want to perform anoth-er self-assessment on a job role to which you aspire. The process comes full circle to act as a true career planning tool.

“The objectivity within the self-rat-ing lent a lot of credibility to the gap analysis provided by the assessment results where one can see how well they match up, by competency, against a ‘minimum rating’ for a chosen audit role,” says Chris Gleich, a supervising senior supply chain auditor at Safeway,

Inc. Gleich, who had the opportu-nity to beta test the tool before its release, found the benefits extend-ed beyond self-awareness and plan-ning. “The automatic accountability provided by the tool is one of the best aspects, because I know from personal experience one’s (Person-alized Learning) Plan can get lost in a folder on your C: drive and might not get the attention it needs on a continual basis through-out the year.”

Other practitioners who participated in the beta test were pleased with its straightforward approach. “The information provided in the roles I reviewed was clear and helped me evaluate where I was or how I should fit in,” says Brandon Tanous, senior auditor, Audit Services at Texas Children’s Hospital.

“The way I have presented it to my team is simple. You own your career and this tool can help you to be suc-cessful in both your internal audit career and your career at this orga-nization,” says Kretchmar. Another advantage of using the tool that she says cannot be understated is that it provides practitioners with the perfect launching pad for an ongoing dialogue with their manager about how they can fill any proficiency gaps indentified in their self-assess-ment and advance their career. “It’s not always training. Sometimes it’s mentoring,” says Kretchmar. “But to make sure you’ve covered all the bases, you have to have the conver-sations, and this tool can provide structure and direction around those interactions.”

“You own your career and this tool can help you to be successful.”

36 | The Institute of Internal Auditors

Your Career

Page 37: October 2014 Your Career Compass

The Big Picture The IIA believes that making chief audit executives (CAEs) part of the process can further strengthen the tool. To that end, work is underway to allow CAEs who would like to engage the power of the Internal Audit Career Map across their en-tire department to do just that. Gina Eubanks, The IIA’s vice president of Professional Services, is spearhead-ing the development of the Team Builder component of the Internal Audit Career Map, expected to be released in January 2015.

A CAE who uses Team Builder to support management of their team’s professional development will receive a status report on team members who have completed their self-assessments, those who are in process, and those who have not yet begun the process. The tool then compiles a dynamic snapshot of the completed self-assessments and allows the CAE to view the results from various perspectives. It provides a summary by competency showing both areas of strength and development need. They can then drill down within the competencies to the individual tasks to review the detail. Summaries by role of where their team falls in relation to expec-tations for both competencies and tasks are also provided on the initial screen of the dashboard.

“This tells the CAE whether a competency or task that falls below expectation is a pervasive team challenge or something that needs to be addressed on an individual basis,” says Eubanks. “This can help CAEs make more strategic decisions around training. For instance if there is a competency or skill that could be improved upon across the entire team, it might make more sense from a budget and logistics perspec-tive to bring that training onsite, rather than sending multiple team members in different directions.”

“In addition, the team’s learning plans provide a platform for CAEs to develop an annual learning budget for their department,” adds Eubanks.

The Team Builder also supports informed and strategic professional development decisions by summariz-ing how the team chooses to address their skill needs. The top five recom-mended products and services are listed, as well as the top five elected products and services. “If the recom-mended courses or resources aren’t the ones accessed by the team, there might be an expectation gap,” says Eubanks. “This also shows the CAE that multiple options were presented to each team member to be mindful of factors such as budget restraints. For instance, selecting a book versus attending seminar.”

As a separate component of The Internal Audit Career Map, the Team Builder is a fee-based feature that will be available to all IIA audit groups. Those who are not currently taking advantage of

the significant savings audit group memberships offer may find that the ability to access the tool warrants another look at a group membership. Access to Team Builder will be in-cluded in the membership package for select categories of the Audit Executive Center (AEC).

With the launch of the Internal Au-dit Career Map quickly approaching and the Team Builder soon to follow, those responsible for their develop-ment are eagerly anticipating the feedback and in turn, IIA members are looking forward to seeing all it has to offer.

Carolyn Saint, CIA, CRMA, vice president of internal audit and 7-Eleven Inc., who has used a career mapping tool to support her team, is one of them. “The most important thing we do as leaders is to develop our people. Using a tool like this allows people to build out their individual development plans, gives them measurable objectives, helps team members understand what your expectations are, and provides consistency across your process,” says Saint. “I can’t think of any team member who wouldn’t appreciate having that level of knowledge and self-awareness.”

“This can help CAEs make more strategic decisions around training.”

www.theiia.org | 37

Your Career

Page 38: October 2014 Your Career Compass

2015 IIA CONFERENCES & EVENTSGENERAL AUDIT MANAGEMENT CONFERENCEMarch 9–11, 2015 / Aria / Las Vegas, NV

GAMING CONFERENCEApril 8–10, 2015 / The Mirage / Las Vegas, NV

VISION UNIVERSITYMay 11–14, 2015 / W Lakeshore / Chicago, IL

September 14–17, 2015 / Renaissance Baltimore Harbor Place Baltimore, MD

November 2–5, 2015 / Hyatt Fisherman’s Wharf / San Francisco, CA

INTERNATIONAL CONFERENCEJuly 5–8, 2015 / Vancouver Convention Center Vancouver, BC, Canada

GOVERNANCE, RISK, AND CONTROL CONFERENCE (IIA/ISACA)Aug. 17–19, 2015Biltmore / Phoenix, AZ

IT AUDIT & CONTROLS CONFERENCE (IIA/MIS)September 2015More information to come

FINANCIAL SERVICES EXCHANGE September 2015More information to come

ALL STAR CONFERENCEOct. 19–21, 2015Westin Diplomat / Hollywood, FL

SOUTHERN REGIONAL CONFERENCESept. 7–10, 2015Sheraton New Orleans Hotel / New Orleans, LA

The essential experience for CAEs and The IIA’s flagship event: GAM brings together CAEs, audit committee and board members, and financial and executive management from around the world.

The theme for 2015 will be “Improvement, Innovation, and Insight,” and will guide insights in the general sessions as well as the concurrent sessions within educational tracks:

• Talent & Resource Strategies• Regulatory & Compliance• Risk Management• Innovation & Technology• Stakeholder Relationships & Expectations

Visit www.GAM2015.org to register today.

The Essential Experience for CAEs2015 General AuditManagement Conference

March 9–11, 2015 / ARIA / Las Vegas, NV

38 | The Institute of Internal Auditors

Your Career

Page 39: October 2014 Your Career Compass

BESTl0SELLERS

2014

The Balanced Scorecard: Applications in Internal Auditing and Risk Management Item No. 1153Member Price: $40 Nonmember Price: $50

The Internal Au-ditor’s Guide to Risk Assessment – eBook Item No. 1134.ep Member Price: $105 Nonmember Price: $125

COSO - Internal Control – Integrated Framework: 2013 eBookItem No. 6278.epMember Price: $126 Nonmember Price: $157.50

International Professional Practices Framework (IPPF), 2013 Edition Item No. 1127 Member Price: $55 Nonmember Price: $75

COSO Internal Control – Integrated Framework: Turning Principles Into Positive ActionItem No. 1135Member Price: $60 Nonmember Price: $75

Lessons Learned on the Audit Trail Item No. 1152Member Price: $24.50 Nonmember Price: $34.50

CRMA® Exam Study Guide, 1st EditionItem No. 1130Member Price: $75 Nonmember Price: $85

Management’s Guide to Sarbanes-Oxley Section 404: Maximize Value Within Your Organization Item No. 1151.epMember Price: $30 Nonmember Price: $40

Internal Auditing: Assurance & Ad-visory Services, 3rd EditionItem No. 1133Member Price: $140 Nonmember Price: $170

Quality Assessment Manual for the Internal Audit ActivityItem No. 1131Member Price: $215 Nonmember Price: $260

www.theiia.org/bookstore

www.theiia.org | 39

Your CareerYour CareerYour Career

Page 40: October 2014 Your Career Compass

Local HighlightsIIA–Bahamas Takes Director Training to the Next Level In an effort to equip and develop directors for today’s environment, the IIA–Bahamas Chapter launched the first ever roll-out of the Global Corporate Governance Forum highly acclaimed curriculum for directors in The Bahamas in September 2013.

IIA–Bahamas has continued its initiative and partner with The Bahamas Institute of Financial Services (BIFS) to offer the complete 16-module Board Leadership pro-gram on Sept. 2, 2014 via an eight-week evening course.

The initial launch of the Board Leadership Training program included a train-the-trainer event to build the capacity of director trainers in region. The Board Leader-ship program received rave reviews at the IIA–Bahamas’ first workshop, “Good Governance Beyond Compliance” on Oct. 2, 2013, with 50+ directors and company execu-tives in The Bahamas actively participating.

Governance: It’s About Understanding Principles (IIA–South Africa)In this local media interview, Claudelle von Eck, CEO of IIA–South Africa, discusses the definition of internal auditing and the second edition of the 2014 corporate governance and risk management index recently released by the institute. It presents management, boards, and audit committees with a perspective on the state of governance and developing governance trends within the country. Access this video on YouTube.com.

IIA–Guyana Chapter Hosts Successful Two-Day WorkshopThe Guyana Chapter of The IIA wrapped up a successful seminar and workshop that took place July 24–25, 2014. The two-day event focused on the chapter’s 2014 education program and included presentations on value-added services as well as preventing inventory fraud.

Jaigopaul Ram, president of IIA–Guyana Chapter, spoke at the event about the importance of organizations allowing internal auditors to be involved in the entire process of implementing and managing inventory systems. Ram also discussed how certain companies have formed inclusive quality assurance teams that allow participants to be involved from the inception of the process and question the effectiveness of adopted systems.

Additionally, Larry Kowlessar, certified international facilitator at The IIA, presented attendees with compelling insights on how internal auditors are the key agents in detecting fraud.

From left, are Chairperson Ms. Mindie Mickle; President of the Guyana Chapter of IIA,

Mr. Jaigopaul Ram; Certified International Facilitator of The IIA and Manager of Audit Assurance at the Agricultural Development Bank of the West Indies,

Mr. Larry Kowlessar; and IIA Board Member, Mr. John Seeram, at far right.

A section of the gathering at the first day of the

Internal Auditors Workshop

Audit Career CenterIf you are looking to launch your internal audit career or are seeking qualified employees, The IIA’s Audit Career Center is a proven source for resume posting and focused candidate searches. www.theiia.org/goto/careercenter.

40 | The Institute of Internal Auditors

Your Career

Page 41: October 2014 Your Career Compass

Building Awareness Champion Winners AnnouncedThis year, The IIA added a Build-ing Awareness Champion program to recognize those institutes and chapters that exhibit outstanding commitment to advancing the profession by accomplishing a set of established initiatives.

Congratulations to all the 2014 Building Awareness Champion chapter winners and everyone who made efforts to bring more aware-ness to the value of internal audit:

• IIA–Bahamas Chapter• IIA–Beach Cities (CA) Chapter• IIA–Colorado Springs Chapter• IIA–Dallas Chapter• IIA–Inland Empire (CA) Chapter• IIA–Jamaica Chapter• IIA–New Orleans Chapter• IIA–Northern California East

Bay Chapter• IIA–Oklahoma City Chapter• IIA–Ottawa Chapter• IIA–Palm Beach County (FL)

Chapter• IIA–Topeka (KS) Chapter• IIA–Tulsa (OK) Chapter• IIA–Vancouver Chapter• IIA–Winnipeg Chapter

Advocacy is truly a year-round effort. Let’s keep the momentum going. Find out how at www.theiia.org/advocacy.

141537

More than 700 chief audit executives worldwide benefit from the Audit Executive Center’s thought leadership, benchmarking studies, tools, networking opportunities, and more.

• A robust members-only website, featuring a growing Knowledge Center of nearly 950 pieces of thought leadership and more than 1,200 tools, templates, and planning resources.

• Exclusive peer-to-peer knowledge sharing opportunities, including roundtables, networking events, and exclusive webinars with CPE eligibility.

• E-bulletins, news publications, and weekly alerts geared specifically for CAEs.

• Coming Soon! The IIA Career Map: Team Builder evaluates the proficiency of the CAE’s team in core skills, applies The IIA’s Competency Framework and benchmarks, identifies opportunities, and develops an action plan.

The Center keeps CAEs empowered, connected, and relevant — and better equipped to handle today’s challenges.

Learn more about how the Center can support your needs. Please visit www.theiia.org/cae or contact us directly at [email protected] / +1-407-937-1111.

Supporting the Changing Demands of Today’s CAE.

www.theiia.org | 41

Your Career

Page 42: October 2014 Your Career Compass

What makes a great audit leader? And how do you define one? We could probably debate the finer points — or at

least the top five attributes — for quite some time. And yes, there are about as many correct responses as there are

executives that get asked this frequent question.

“I think a great leader is one who really challenges you to go beyond your comfort zone and stretch your goals. A great leader is effective in both challenging times and when everything is going smoothly,” said Gregory Kalin, director of internal audit at Morningstar. “I have had a number of good leaders over my career. I have tried to gain insight on leadership from both the outstand-ing and not-so-good managers.”

Good points. But maybe we should be asking how do you become a

successful audit leader? The answer is relatively simple — training and development. Fortunately, with The IIA’s wide array of leadership tools and services, it’s obtainable and accessible, too.

Developing an Executive VisionIf you are a new chief audit executive (CAE) seeking advanced knowledge, you will certainly want to attend The IIA’s Vision University. The four-day development program features an in-novative curriculum taught by expert

facilitators with in-class instruction and interactive work sessions. Addi-tionally, attendees have the oppor-tunity to discuss best practices and issues facing their CAE peers.

“Vision University gave me the tools, techniques, and strategies I needed to get to the next level as an audit executive. It provided assurances of an effective organization’s risk man-agement and government process, which often gets overlooked,” said Ingram Quick, chief audit executive at Louisville Metro Government in

Leading byExampleHow to Become a Successful Audit Leader

42 | The Institute of Internal Auditors

Your CareerYour Career

Page 43: October 2014 Your Career Compass

Kentucky. “I enjoyed networking with senior management and audit leaders from different organizations and functional areas.”

Not to be outshone, The IIA’s Audit Executive Center offers another leadership development resource for CAEs. This membership-based service features an exclusive website with tools, templates, and deep thought-leadership content. And the Center includes additional network-ing forums, round tables, and events for more knowledge-sharing options.

“The networking opportunity pro-vided by Audit Executive Center is fantastic, and the complimentary annual registration to the General Audit Management conference is a great perk*. Also, the ability to query other chief auditors on a particular topic is very helpful,” noted Kalin.

Creating Future LeadersOf course, a successful audit leader must have a solid understanding of the challenges and issues they will face in that role. That is why The IIA recently created a designation that allows candidates to demon-strate these competencies while sharpening your leadership skills to achieve your full potential as an internal audit leader. The Qualifica-tion in Internal Audit Leadership™ (QIAL™) is a customized program that can position participants as future leaders or add credibility to those currently in a leadership role with stakeholders and peers. Whether you are a mid-level audit-ing professional or an experienced

internal audit leader, earning the QIAL is equally valuable.

One of the program’s inaugural recipients, Seth Peterson, an auditor with The First National Bank in Sioux Falls, S.D., believes the QIAL is essential for aspiring leaders. “While by no means a replacement for other auditing certifications, the QIAL is an elite designation that can help you differentiate yourself from the pack. If you’re already striving to embody successful leadership on a daily basis, this is the perfect way to enhance these skills by obtaining it,” said Peterson.

Training Audit LeadersThe IIA holds numerous seminars and conferences that provide lead-ership training. The events — such as the Leadership Skills for Auditors seminar course — allow attendees to fine-tune these abilities along with their peers. “The skills I learned at LSA have empowered me to step into new leadership situations with confidence. And the shared knowl-edge provided invaluable insight into real-life situations that are applica-ble to any audit environment,” said Michelle Schwark, a senior inter-nal audit analyst at UnitedHealth Group. “Basically, I gained a tool box of ideas on how to be a successful audit leader on a daily basis as well as in the long run.”

Additionally, The IIA’s annual General Audit Management (GAM) Conference brings together internal audit

leaders and executive management to gather insights, discuss challeng-es, and network. The conference is yet another forum to meet and learn from other audit leaders. “GAM is absolutely the best. That’s because it’s targeted toward the CAE along with senior-level executives and those responsible for monitoring,” explained Warren Stippich, partner at Grant Thornton.

Moving On UpThe IIA provides continuous learn-ing and leadership training through thought leadership, webinars, guidance, books, and research. In addition, leadership opportunities are boundless by participating and contributing at local, regional, or national levels through IIA boards and committees where you can lead, coach, and mentor.

Success ultimately rests on the individual and how they apply what they’ve learned. “From my personal experience, earning the trust of my superiors and building credibility within my organization was vital to creating the leadership opportuni-ties that I have been privileged to receive. This willingness to take on challenges has also helped me to move up as a leader in my orga-nization,” said Schwark. Indeed, credibility and trust are essential for auditors. And successful leaders.

* Complimentary registration to GAM is available to members of the Audit Executive Center at the Ambassador level.

www.theiia.org | 43

Your CareerYour Career

Page 44: October 2014 Your Career Compass

Join The IIA today at TheIIA.org.

“My IIA membership has put me in touch with peers, education, research, and the Standards that I can’t get anywhere else. Being an active member has helped elevate my professional presence and expanded my network, and in our fi eld, this is critical to success. The value my IIA membership brings is extraordinary in terms of leadership opportunities and networking benefi ts, and I don’t think you can buy professional development like that.”

Membership in The IIA means stronger connections, greater infl uence, and more opportunities for career development.

I Am More with The IIA.

I Am Connected, Knowledgeable, Confi dent…

I Am More.

1405

06

Carmen Abela, CIA, CCSAMember Since 1998

140506 MEM-Membership April IA Ad.indd 1 2/21/14 11:56 AM