KPMG Corner
 
  Risk Advisory

 

   

Linking corporate governance and enterprise risk management, 9/30/2008

How can board of directors and senior executives help to define corporate governance within the context of enterprise risk management (ERM) programs? With the growing acceptance of ERM, the links between good governance and effective risk management are increasingly important.

Read more...

   

Chossing an IT Solution, 7/1/2008

“Choosing an IT solution” is a management decision that has never been easy because it presents many challenges and issues.

Read more...

 

   

Penetration testing - the basics, 5/20/2008

Penetration testing as defined is the process of exploiting weaknesses in a computer or the network infrastructure
Read more...

   

Who audits the auditor?, 1/29/2008

When I started my internal auditing career in the early 1990s, I saw the auditors then as little gods and goddesses.

Read more...

 

   

Is information security vital to your business?, 1/1/2008

It was a weekend, trying to make up for the busy nights of the past weeks. Suddenly, an alarm sounded and discovered that it was the phone ringing. Slowly reached for the phone, only to find out that some marketing agent is offering a certain product!
Read more...


   

Preparing for the Implementation of an Information Security Management System (ISMS), 12/4/2007

Some organizations maintain a traditional approach to their IT security. But, given the numerous threats and risks in today’s security environment, this is no longer enough. Whenever there are manifestations of employee ignorance, user errors and fraud, these have to be immediately addressed.
Read more...

   

Do your own periodic IT backups, 9/25/2007

As we become more and more dependent on digital information in our daily lives, our world seems to crumble when these digital information are corrupted or are lost.

Read more...

 

   

Moving towards information technology governance, 8/21/2007

Is your organization dependent on information technology (IT)?

Read more...

 

   

Business continuity management - It's not always about buying a second car, 7/31/2007

Business continuity management (BCM) is often perceived as having a backup IT system or a secondary office in a different location so that if a disaster does occur, the IT people will just turn on a switch that will make the backup IT system available or business operations can just move to that secondary office and the company can go about its usual business.

Read more...

 

   

Moving towards enterpirse risk management, 7/24/2007

What keeps you up at night? How well are you in managing your risks? Are you achieving an acceptable return on the risks you take? Have you identified and assessed all your risks? What are your top 10 or 20 risks? Are you still into the traditional or “silo” risk management? Or, have you adopted the new, better and integrated approach to risk management? Do you have a fully integrated risk management program to assess and manage risks on a more integrated basis, across all lines of business and activities of the company?

Read more...

   

The Value of IT Risk Advisors, 5/15/2007
How well do you sleep at night thinking that your Information Technology (IT) systems are safe from untoward incidents? How confident are you that any IT failure will not lead to the debut of your pink slip? How satisfied are you that the IT risk advisor/consultant you hired provided you the value you truly need?
Read more...