Blockchain meets internal audit: less hype, better questions
We returned to blockchain risk in Kraków, this time with internal auditors and controllers. The room quickly brought the technology down to evidence, audit plans and reporting to the board.
Blockchain returned to the stage, this time at the 24th International Congress of Internal Control and Internal Audit in Kraków. Małgorzata Michniewicz spoke about the technology’s risks from an auditor’s perspective.
The subject was similar to her March talk at SEMAFOR, but the room asked very different questions. That was the most interesting part.
Technology meets methodology
At an IT security conference, the conversation quickly turns to keys, integrations and code. Internal auditors and controllers wanted to know how to include blockchain in an audit plan, what evidence to collect and how to report the outcome so that the board understands why it matters.
That is a good test for any expert material. If the conclusions only work for people who know the technology inside out, they are hard to turn into organisational decisions. In Kraków, blockchain lost its glossy wrapper and came down to the questions auditors ask of any solution: what can go wrong, how can we check, and who is responsible for the response?
Małgorzata spoke at the congress as a representative of ISACA Warsaw Chapter, and the experience gained at the event enriches AIBC’s day-to-day work.
If similar questions are coming up in your organisation, let’s talk.