3 answers
3 answers
Updated
Neil I’s Answer
People not doing what they are supposed to do the way they are supposed to do it. Best way to resolve is to discuss the outcome of the task and decide whether their path to solution was viable.
Updated
Simeon’s Answer
I check to make sure that a company's activities preventing risk occur appropriately. For instance, a user access review is when system admins look at a list of users to ensure they are all appropriate. If something goes wrong in that process, I follow up with control owners and investigate to see what happened, if the mistake was actually a mistake, and how to prevent actual mistakes from occurring again in the future.