When Assurance Becomes a Board Accountability, Not a Control Exercise

For years, assurance lived quietly in the second and third lines of defence. Controls were designed. Tests were scheduled. Reports were written. Boxes were ticked. And as long as the audit opinion was clean, everyone slept reasonably well. That model worked very well, when risk moved slowly. But today, assurance is no longer an internal…