Auditing at the speed of risk requires internal auditors to rethink the way we work. Agile auditing provides a path forward that blends the best elements from agile project management and internal audit best practices.
Leaders in internal audit are ready to incorporate an agile audit mindset in their departments, but most of the available resources provide theoretical ideas. Even when outside consultants lead an agile transition, the consultants primarily focus on adding agile ceremonies without addressing the fundamental mindset change required for an agile audit transformation. This book provides a practical guide for audit leaders to follow as a playbook for implementing agile across their department, impacting every facet of the audit lifecycle, and addressing the mental shift required for making a lasting change. Every chapter includes discussion questions to facilitate discourse or just to help you analyze your own department. Next, we look at a typical internal audit department as they attempt the transition from a traditional audit methodology to agile auditing so we can learn from their missteps and successes.
The guidance in Agile Audit Transformation and Beyond includes the basics of agile auditing, practical directions for shifting each phase of the audit life cycle, common hurdles faced during the transition, and forward-looking thought leadership on expanding beyond internal audit into agile assurance.
Author(s): Toby DeRoche
Series: Security, Audit and Leadership Series
Publisher: CRC Press
Year: 2022
Language: English
Pages: 140
City: Boca Raton
Cover
Half Title
Series Page
Title Page
Copyright Page
Dedication
Contents
CHAPTER 1: DEFINING AGILE AUDIT
What Is Agile Auditing?
Agile Audit Transition
Agile Audit Benefits
Agile Roles and Audit Equivalents
Agile Terms and Audit Equivalents
Discussion Questions
Case Study
CHAPTER 2: ASSESSING READINESS
Assessing Your Department
Understanding Your Culture
Avoiding Common Transition Pitfalls
Discussion Questions
Case Study
CHAPTER 3: AGILE AUDIT LIFECYCLE
Traditional vs. Agile Audit Lifecycle
Agile Audit Risk Assessment
Agile Audit Plan
Agile Audit Capacity Planning and Scheduling
Agile Audit Execution
Agile Audit Reporting
Discussion Questions
Case Study
CHAPTER 4: AGILE AUDIT RISK ASSESSMENT
Rethinking the Audit Universe
Starting with Strategic Risks
Incorporating Emerging Risks
Management Interviews
Risk Self-Assessments
Performing the Assessment
Discussion Questions
Case Study
CHAPTER 5: AGILE AUDIT PLANNING
Backlog Development
User Story Development
Audit Prioritization
Capacity Planning
Scheduling Timeboxing
Team Member Selection
Including SMEs
Discussion Questions
Case Study
CHAPTER 6: AGILE AUDIT EXECUTION
Organizing the Audit
Managing the Audit Engagement
Auditing in Sprints
Daily Standup Meetings
Managing the Audit Team
Sprint Reviews with Management
Discussion Questions
Case Study
CHAPTER 7: AGILE AUDIT REPORTING
Audit Engagement Reporting
Audit Committee Reporting
Audit Results Visualization
Reporting Within the Timebox
Agile Audit Committee Frequency
Agile Audit Committee Format
Presentation Development
Discussion Questions
Case Study
CHAPTER 8: TRANSITION TO AGILE AUDIT
Selling Agile Internally
Establishing Your Agile Transition Objective
Building a High Performing Team
Training the Audit Management Team
Training the Agile Audit Team
Piloting the Risk Assessment through Planning
Piloting Audit Execution
Piloting Reporting
Measuring Your Progress
Embedding the Mindset
The Role of Agile Certifications
Discussion Questions
Case Study
CHAPTER 9: PLANNING FOR AGILE ASSURANCE
An Agile Audit Maturity Model
Moving Up the Maturity Model
Planning for Future Growth
Expanding Through Agile Assurance
Embracing Technology Enablement
Anticipating Technology Advancement
Discussion Questions
Case Study
CHAPTER 10: THE WAY FORWARD
Taking the First Step
Planning for Mistakes
Assessing the Benefits
CHAPTER 11: MEETING THE IIA STANDARDS
The Standards
APPENDIX AND GLOSSARY
Audit Maturity Assessment
Articulating Your Agile Audit Maturity Plan
Agile Transformation Example Project Plan
Glossary
INDEX
