Has there always been an issue of some control/governance group saying you must do x,y,z but not having the people to do it?
I hear so much of how it was like with Gen Robles.
Was it always like this?
Has there always been an issue of some control/governance group saying you must do x,y,z but not having the people to do it?
I hear so much of how it was like with Gen Robles.
Was it always like this?
Audit is absolutely out of control at USAA. Heaven help you if in a design document you happen to mention some ideas for future improvements. Then the next year audit comes demanding you document progress on those goals. They were never goals. But audit doesn't care. They just make up requirements and nobody can say no.
Or when audit demands peer reviewed support for subjective or hypothetical statements that have nothing to do with anybrisk controls. Like, dude, that was an opinion. It's not in scope for audit. But nobody likes to say no to audit so the crazy train hurtles along.
In an age of layoffs it's neat to see audit making themselves into such an obvious make-work project. It is a great way to avoid cuts and build a little feifdom of pinheads but it only works until the wrong (right!) VP figures out what's going on and cleans house.
It used to have reprocussions. But now, today, what’s the consequences? What is the OCC or CFPB with a zero budget and zero backing and zero mandate going to come in and force audit? Strip the board or CEO or president of their seat? Or fine us? Nope. That’s all gone. So why would the board / ceo make it a priority to their presidents? Why would they in turn force it to their AVP-> directors->managers?
We’re in Wild West days of banking. Buckle up. Don’t break the law in a system of record or on a recording. These days will come back to sm--k us eventually.