Many internal audit plans look the same every year: the same processes, audited in the same order, with the same number of days each. Boards receive long reports on petty cash and travel claims while the risks that actually keep directors awake, such as a new market, a major IT migration, a key supplier’s […]