How do you apply design factors to IT Audits. Just overheard someone explain 'level of aggregation' for IT Security policies by describing how many people have access to it. Why is this a thing???

like
Posting as :
works at
You are currently posting as works at

I agree. For the most part it doesn’t really make sense for IT controls. One example for a user review control.... if you have an ERP system with hundreds of users and only one person is performing the review.. I would say the level of aggregation is high as the review is not partitioned out and therefore predictability would be low.

like

Related Posts

Does anyone have experience working for Connections Academy or another virtual academy? I am very interested in teaching from home, but most virtual jobs I have reviewed still require you to come to an office/ school building. I want to know what it is like, specifically the work load. Would you say more or less than public? How does classroom management, amount of grading, and freedom of curriculum differ?

like

What is the maximum salary cap for C2 Level in Mindtree?

We are about a year into having a kid and my wife is on the verge of a nervous breakdown 24/7. We’ve been together ten years and I’ve never seen her like this. I don’t know what to do...

like

Have an acquaintance who is a single mom; she purchased a used car 3 mos ago. Six wks later her 17yo wrecked it, air bags deployed, and estimates have ranged between $10-$18k in needed repairs while $21k is still owed. Acquaintance was switching insurance policies and flubbed the coverage dates and there were a few days where the vehicle was uninsured. No GAP insurance. I'm not seeing many options for her besides to continue pmts, fixing just enough to drive or voluntary repo. Thoughts?

like

I feel like I’m being set up for failure at my current position. Communication is non existent, I’m never given clear direction on anything, and process is so backwards (any attempts to fix it...(1/2)

like

Any freelance creative teams in the Tampa area?

like

I was offered an operations role in Midtown NYC. Is $105k a good salary for someone with 2.5 years of experience in the industry? Bonuses pay out typically in the spring and I would start in late August.

like

How’s Decoded as a place to work?

like

I know not directly related to Biglaw. Could someone help me get a gauge on AML/Compliance salaries in NYC? Could you please provide “City, Firm or Bank, Title, Salary” and any helpful tips? Currently in the interview process for a Manager position at an AML consulting firm. I’m trying to figure out where the market stands for Manager / Director all in comp for AML?

like

What’s your take on Lydecker? What is the culture? Market salary? Expectation on billable hours? Mentorship? Etc.?

like

Hey guys, my visa was recently denied an extension so I will have to leave my job in 2 weeks. I’m moving back to Canada. Does anyone have any opportunities in Canada? Toronto to be exact. I’m a data analytics professional with 3 years of experience in that field and 2 years of prior experience in financial analysis.

likehelpful

I really want to quit teaching. But the thing is I don't know if the problem is just at my campus or with the profession in general.

like

How much salary hike will TCS give to 6 yrs experienced candidate

like

Does the stub bonus after A2A promote have any variability? I know BAML hasn’t announced yet so looking at past examples

like

Which is most important to you: Interesting content, great location, or fun team?

like

Anyone working in capgemini engineering(altran) in mumbai?

like

Nagarro
Ericsson r&d
Optum

Which should i choose having almost same ctc for all

like

Question for folks in here who work at a company with unlimited PTO/vacation - how do you manage this from being abused by employees?

like

Will be in NYC with my BF next Sunday. Happy Hour recs with a view near-ish to penn station?🥃 Upbeat vibe with great views preferred. TIA 🙏🙏

like

Hey Everyone!
I’m coming up on one year of working in consulting post under grad in a financial services vertical. I know I want to transition to corporate strategy down the road, but don’t have much interest in financial service strategy. Should I try and switch into a more applicable practice such as M&A or operations? Will I be able to break into corporate strategy without any past experience in that industry? I want to avoid getting pigeonholed into FS, but with COVID, don’t want to leave.

like

Additional Posts in Risk Assurance

I joined EY for their Risk Consulting practice because I wanted to break into consulting. I hope to get a top MBA sponsored as well. I hear from my colleagues that Risk isn’t considered the same as consulting and it’s not as valued for a top MBA...is this true?

likefunny

Just transferred from IT Audit to Strategy and Transactions. Been a goal of mine for a while so I’m happy to see it play out. Not posting just to say I did it, but because I’ve been following this bowl for a while and see people get negative about being pigeon holed. There were tons of transferable skills that I was able to highlight that got a role that’s completely different, so I just don’t want anyone feeling discouraged if they’re hitting walls.

like

I have about 8 years of accounting experience and have been at Morgan Stanley for the past 5 years. I currently do AML Enhanced Due Diligence work on their GFC Advisory team. I love the what I do, I just want to get some experience at another company.
I also care deeply about D&I and am leader on the Black Employee Network Steering Committee at Morgan. Is anybody hiring either AML or Internal Audit Profesionals?

like

How does everyone think of EY Tech Risk in terms of work and leadership? What vibe is it like working there?

like

What are the possible future opportunities if I want to make a career jump from risk assurance?

like

Are there any jobs that are fully remote/allow for ease of living anywhere?

like

I am a second year associate and has been involved in IT audit, having done some technical review for unix and windows servers, I’m gaining interest in cyber security, any advice how to manoeuvre?

like

If I had a dollar for every time the core team referred to an automated control as “Inherent Functionality”

likefunny

What is a good pay range for a senior IT auditor in a T2 city, 2 yoe.

like

Are there any onsite or even online trainings that are relevant for Risk Assurance, Data analytics more towards Operational audits, Continuous Control Monitoring etc?

like

Has anyone made the switch from Risk Assurance to Financial Planner or knows anyone who has? Is this possible without going back to school?

like

From industry to big 4?
Would you take a pay cut and go to pwc as a 1st year senior in risk assurance?
I make 95-98K and work great hours at a great company. Would be getting a pay cut if I join pwc

Getting out of tech risk for a 70% increase in TC. For all the college hires that got mislead by how risk consulting was sold to them there’s hope out there. Keep pushing 🥺

likeupliftingfunny

Is it possible to do RA in the tech space? I know someone mentioned working at FAANG. How hard is it to make this move?

like

What’s the difference between Risk Transformation and Performance Improvement - IT advisory?

like

For a GRC position, can someone explain what comprises of a written exercise? Would appreciate any feedback.

like

DM me if you are interested in advisory roles at Grant Thornton. I am happy to refer and we need the help!

likefunny

Thoughts on EY risk advisory?

like

@EY 🐠 In GPS IT AUDIT, how is the culture / working hours / work environment like?? How often /long did you have to travel??

like

Anyone here made the move from technology risk (it audit) to technology in m&a in the big 4?

likefunny

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Send download link to your phone

OR

Scan your QR code to download
Fishbowl app on your mobile

By continuing you agree to Terms of Use and Privacy Policy.

Messaging rates may apply

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal