How do you apply design factors to IT Audits. Just overheard someone explain 'level of aggregation' for IT Security policies by describing how many people have access to it. Why is this a thing???

like
Posting as :
works at
You are currently posting as works at

I agree. For the most part it doesn’t really make sense for IT controls. One example for a user review control.... if you have an ERP system with hundreds of users and only one person is performing the review.. I would say the level of aggregation is high as the review is not partitioned out and therefore predictability would be low.

like

Related Posts

Hi Fishes please help

HR has provided 2 options -

13.5 fixed + 2 jb (1 in the first month & 1 after 1 year)

14 fixed + 1 jb

what is the catch here? What do u guys suggest?

Is there any catch, what should I prefer?

Does anybody have insight into SAP’s Academy for Customer Success?

Recommendations for tailors on the west side? Considering using nordstrom if all else fails… can anyone vouch for nordstrom?

like

I am looking for a referral in HCL for Selenium Automation tester role.

like

I was released without cause today but my boss mentioned my battle with mental health and that I’m looking for other jobs before canning me. Should I address this with the board or leave it alone?

like

Folks, AC Kolkata employee here.
Will management approve my request to buyout half my notice period if i promise to serve the other half? Also, any idea how it will get calculated?

Need ur urgent help and advice on this.

like

Looking to make friends near Lincoln Square! 30M. Into chill things to light activity, e.g., going to the movies, archery, escape rooms, etc.

like

Anyone here working in the construction industry, general contractor? I’m looking to relocate here and Would love to connect for some guidance on job search.

Best tacos in SD? I'm all ears

like

If LinkedIn and Reddit had a child, Fishbowl would be it. Or at least that’s my first impression…Hello All!

like

Any advice for navigating my first busy season in a relationship? I’m a staff 2 but I was single last year.

like

Looking to transition from healthcare audit to healthcare consulting. I have both business and biology degrees. Looking for roles with travel and remote work opportunities.

like

Hi , is there anyone who received the offer letter of TCS and accepted it. But didn't join ?

like
like

Are ppl worried about being on the bench esp when there aren’t a lot of projects in the pipeline? New hire here about to be up for staffing for the first time and sentiment at my firm seems to be worried/fearful about being unstaffed. Is it actually worrisome to be on the bench in this environment or is this just a product of highly ambitious over achievers worrying about not being constantly utilized?

like

Job opportunity (mgr title, 4-6 yr exp needed) in Internal Audit (w/ data analytics exposure) at one of the largest private companies in Chicago. I interviewed with them (director and vp) till last round and decided to pursue a different opportunity. Great and caring people who seems to support what you wanna do at this position. Since it’s private there is a lot of room to create and build from the best practice. lmk if you are interested or know someone needs help. Thanks!

like

Is anyone recruiting for a sales development manager/ SDR manager at their company right now. Im based on the UK and would love a recommendation or referral. I have 8 years of sales experience with 4 in tech sales (mainly new business and hunting). Thank you in advance.

Are FPX projects considered under utilization? I heard something about adjusted utilization... does that still exist?

like

Will I make it in the corporate / consulting world without an MBA or other grad degrees?

likehelpful

Was approached about a consulting role at a private equity firm. What’s the comp like compared to the finance side of the house?

likefunny

Additional Posts in Risk Assurance

like

If anyone is looking for Senior Associate or Manager roles in Risk Assurance, PwC’s Digital Assurance and Transprency practice (legacy Risk Assurance) is hiring and I would love to connect and refer you. DMs are open!

like

For anyone who took the CISA exam (I passed lol), how many days did it take to get your “official score”? I know it says 10 days but wanted to ask if anyone got it sooner

like

I’m getting put up for manager a year early. I have PPMD ,SM, and M support. Pretty much support from all the key individuals on my team and in my service line. Since it is a year early if i don’t get promoted this round I know it’ll come mid year but I do expect a good salary increase still without the promo. If I don’t get the promo nor a salary increase that I’m okay with, how do I let my partner know that I will begin to entertain outside offers? some of which have offered the manager role.

like

How do you all keep up with trends in risk and internal audit?

like

Has anyone had any good exit opportunities from risk assurance that does not include risk assurance in industry ?

likefunny

How does IT SOX audit in industry usually do during recessions?

likehelpful

I'm a Tech Risk SC, but have an accounting/finance background. I'm doing the FRM now for broader cert experience, is it worth doing CA long term in my area?

What exit ops are there outside of testing controls all day? Getting tired of this. Resume is ready

likefunny

Im looking at new job opportunities out side of PA but struggle to confidently answer how much I’m looking to be paid. I’m so worried of over asking or leaving money in the table.
I’m in a SoCal HCOL and have been asking for 100k for Senior Internal Audit Roles (2 years) and working on my CiSa.
Is that too optimistic?

like

What makes more money IT Audit or IT GRC?

like
like

Do you audit users with Sudo access and a log of sudo activity or just users with access to sudo?

like

People that have been at the same firm since college for over 10 years, what keeps you there?

like

Do you get bonuses in industry?

like

Which position will be more interesting? Cybersecurity Sr. Associate - Regulatory or Cyber Defense -Senior Associate Network Security? Currently have CISA and CISSP.

like

Is KPMG, EY and PWC considerate about one not wanting to travel and chosing local projects in the IT Assurance practice? Please share your experiences. Thanks!

Currently a first year staff in Risk Advisory in a Mid-Tier Firm hoping to move to Big 4 for either Risk or Cyber. When would be the most appropriate time to make the change? I heard that Senior Staff in mid-tier would most likely be hired as an “Experienced Hire” in Big 4. So would it be smarter to make the move now as a first year staff since I’ll be considered Experienced Hire anyway?

like

I lead our SOC practice for a US mid tier cpa/consulting firm. I've been losing a lot of deals due to lower cost / boutique vendors who are partnered with these SOC automation platforms (Vanta, Laika, etc.). Have any of you used these tools for the audit and what has your experience been like? Thanks

like

What is the income ceiling realistically, for being in RA? What are top reasonable salaries?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal