Organizations have to be proactive in not only implementing, but monitoring and improving fraud prevention/detection controls in order to stay ahead of perpetrators. Learn about common fraud schemes, ways to protect your organization, and emerging technologies from GRF’s fraud, internal audit and cybersecurity experts. Join our team as we discuss the key controls and processes…
Using emerging technologies for risk management and audit procedures can be done cost-effectively today using creative strategies, such as co-sourcing, outsourcing with subject-matter-experts, and/or bringing these technologies in-house.
Travel & Expense (T&E) reimbursement fraud can have a significant impact on your organization. The Association of Certified Fraud Examiners’ 2022 Report to the Nations found the average loss from an expense reimbursement scheme was $152,000. The report, which is based on a worldwide survey of Certified Fraud Examiners conducted between July and September 2021,…
By Darren Hulem, CISA, CEH, Security+, Supervisor, IT and Risk & Advisory Services As cyberattacks grow in frequency and complexity, organizations are asking, “Is Cyber Insurance worth it?” The short answer is “Absolutely!” Before contacting an insurance company, we recommend some research and due diligence to position your organization for reasonable rates. Coverages can vary…
Enterprise risk management is becoming more common in the not-for-profit sector, but recent research finds that risk management practices are not keeping pace with the increased complexity of risks for nonprofits. On July 12, 2022, the Enterprise Risk Management (ERM) Initiative at NC State University published the 13th edition of its annual State of Risk…
This eBook outlines 20 different cybersecurity risk categories that can impact your organization, detailing how to identify and address them.
If your organization follows Uniform Guidance requirements for procurement under 2CFR 200.320, you might be able to increase the threshold for making micro-purchases, or purchases that do not require stringent account processing for compliance.