Continuing great job on the discussions. \u00a0I appreciate your responses and I learn from you. \u00a0You raised most of\u00a0the important\u00a0points but let me summarize my view.<\/p>\n
Q1<\/strong>: How much automation of controls is best? \u00a0When should they be introduced? \u00a0Automated controls are ideal but not always possible or cost effective (e.g. complex scenarios or decision making). \u00a0My experience is leverage automation where possible and easily implemented.<\/p>\n As many of you pointed out ‘baking in’ the controls from the start is the easiest and most cost effective. \u00a0However they will added to as an organization grows, changes, etc. \u00a0Also, as the process matures and the external world changes you need to respond.<\/p>\n Q2<\/strong>: Describe the character of the leaders involved in the Real World control failures we reviewed. \u00a0 The words you used I agree with: Arrogant, greedy, above control (‘absolute power corrupts absolutely’), self-interested, self-preservation response to pressures, etc.<\/p>\n These leaders were not necessary\u00a0‘bad’ leaders – many were very effective in accomplishing the goals of their organization. \u00a0However, \u00a0good leaders can have ‘bad’ character. \u00a0Creating a climate of controls need to\u00a0balance (e.g. Sox type regulations) when this character drives illegal, immoral, or unethical behaviors.<\/p>\n Q3<\/strong>: A\u00a0person\u2019s character is very crucial in the audit industry.\u00a0 How would you build your reputation and maintain a good ethical character in this industry? \u00a0This is something you have to do yourself.<\/p>\n I appreciate how Paul phrased it:\u00a0Paul: ‘IT Governance: which is to \u201cdo the right thing, the right way\u201d. Character is doing the right thing because it is the right thing to do.’ \u00a0Integrity goes beyond the skills you have or knowledge of right things, but always doing<\/strong> the right things.<\/p>\n This integrity requires personal courage to stand up and be independent in our\u00a0‘end justifies the means’ world.<\/p>\n Q4<\/strong>: SAP’s GRC module may be important and effective, but can the cost of GRC be justified?<\/p>\n You all outlined in some detail what’s in this functional tool. \u00a0However in making the decision where to use you must weigh GRC’s costs vs.\u00a0the\u00a0cost of implementing controls other ways (often higher) plus the\u00a0cost of not having needed controls or strength of controls in place.<\/p>\n <\/p>\n Thanks for all your work in the participation blog this semester. \u00a0 I trust it helped your learning. \u00a0Also remember to:\u00a0do the right thing because it is the right thing to do.<\/p>\n","protected":false},"excerpt":{"rendered":" Continuing great job on the discussions. \u00a0I appreciate your responses and I learn from you. \u00a0You raised most of\u00a0the important\u00a0points but let me summarize my view. Q1: How much automation of controls is best? \u00a0When should they be introduced? \u00a0Automated controls are ideal but not always possible or cost effective (e.g. complex scenarios or decision […]<\/p>\n","protected":false},"author":22812,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[684819],"tags":[],"class_list":{"0":"post-3257","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-week-14-maturity-models","7":"entry"},"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/posts\/3257","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/users\/22812"}],"replies":[{"embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/comments?post=3257"}],"version-history":[{"count":1,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/posts\/3257\/revisions"}],"predecessor-version":[{"id":4884,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/posts\/3257\/revisions\/4884"}],"wp:attachment":[{"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/media?parent=3257"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/categories?post=3257"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/community.mis.temple.edu\/mis5121sec701fall2019\/wp-json\/wp\/v2\/tags?post=3257"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}