Assessing soft controls can help internal auditors in undertaking root-cause analysis because soft controls, such as corporate culture and employee behavior, often provide insights into the underlying causes of observed deficiencies. By evaluating these soft controls, auditors can identify why certain hard controls may be failing and what might be influencing employee actions and attitudes, thus facilitating a more effective audit.
The Institute of Internal Auditors (IIA) guidance on behavioral and cultural audits and risk management practices.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit