Exams or Audits

In my opinion, no. The only caveat is a recommendation to audit the exit plan and documentary evidence that supports a safe and secure exit (data, continuity, etc). More

Relationships and governance of the third party relationships are audited for the existing and live contracts. Is there value in assessing the ongoing monitoring of relationships by a Relationship Manager for an expired contract (expired during the audit, ... More

What would be a reasonable regularity for auditing third party arrangements based on criticality or risk levels (High, Medium and low)? This is for internal auditors. How often should Internal Audit review/audit third party arrangements? More

Thank you for raising this question. While it may seem unconventional for organizations to provide training to vendors, it is actually a common practice, particularly for critical vendors handling sensitive data, regulated processes, or essential business ... More

Did Management accept that finding and recommendation? If the onboarding process, regular relationship management meetings and annual review process are operating as intended, additional training seems excessive More