Earlier this month

majidmumtaz.substack.com · Mar 25, 2026 · Curated 2 weeks ago

Beyond the Checklist: Do Controls Certify Outcomes or Just Procedures?

This article challenges the fundamental assumption in risk management that control procedure completion equates to effective risk mitigation. It argues that current frameworks often certify the execution of a procedure rather than the achievement of the desired outcome, leading to a disconnect between reported residual risk and actual organizational exposure. Internal auditors should critically evaluate whether controls are truly achieving their intended purpose, rather than merely confirming procedural adherence.

News & Blogs · Global Read more

majidmumtaz.substack.com · Mar 20, 2026 · Curated 2 weeks ago

Rethinking Rationalization: Why the Fraud Triangle's Third Leg Needs a Cultural Shift

The traditional Fraud Triangle often misattributes rationalization solely to individual psychology, overlooking the profound influence of organizational culture. This article argues that rationalization is frequently an institutional construct, pre-existing and readily available for individuals to adopt, rather than something they invent under duress. For audit and assurance professionals, this distinction is critical as it necessitates a shift from individual-focused controls and ethics training to a deeper examination of leadership modeling, normalized exceptions, and the unwritten rules that shape an organization's ethical landscape.

News & Blogs · Global Read more

majidmumtaz.substack.com · Mar 19, 2026 · Curated 2 weeks ago

Beyond 'Never Outshine the Master': The Unseen Dynamics of Organizational Authority

This article delves into the subtle, often unacknowledged, dynamics of power within organizations, particularly how subordinates' deference actively constructs, rather than merely respects, a superior's authority. For internal audit and assurance professionals, understanding this 'shared fiction' is crucial for accurately assessing organizational culture, identifying potential risks stemming from suppressed dissent, and evaluating the true effectiveness of governance structures. Recognizing when authority is a coordination mechanism versus a barrier to honest communication can significantly impact audit scope and findings.

News & Blogs · Global Read more

majidmumtaz.substack.com · Mar 16, 2026 · Curated 2 weeks ago

The Illusion of Neutrality: How Pre-existing Assumptions Shape Audit Outcomes

This article challenges the conventional audit wisdom of approaching engagements with a 'neutral' or 'open mind.' It argues that auditors inherently carry 'priors'—pre-existing probability estimates about risks like fraud—which significantly influence how evidence is interpreted and findings are reached. For internal audit professionals, understanding this inherent subjectivity is crucial for enhancing the integrity and perceived objectivity of audit reports, and for engaging more effectively with governance bodies.

News & Blogs · Global Read more

majidmumtaz.substack.com · Mar 22, 2026 · Curated 2 weeks ago

Beyond the Checklist: Why Closed Audit Findings Often Resurface

This article challenges the conventional view of audit finding closures, arguing that while documentation systems effectively record resolutions, they often fail to capture the tacit knowledge and underlying conditions that lead to repeat issues. For audit and assurance professionals, this highlights a critical gap in institutional learning, suggesting that a focus solely on closing findings without retaining the deeper understanding of 'why' can lead to recurring problems, despite robust governance processes.

News & Blogs · Global Read more

majidmumtaz.substack.com · Apr 1, 2026 · Curated 2 weeks ago

The Two Systems: Bridging the Gap Between Documented Controls and Operational Reality

This article highlights a critical challenge for internal audit: the existence of two parallel control systems within organizations. While one is formally documented and auditable, the other is an informal, operational system that often dictates actual decision-making, especially under time pressure. Internal auditors must recognize this dichotomy and evolve their methodologies to assess the true effectiveness of controls, rather than solely relying on documented processes that may no longer reflect reality.

News & Blogs · Global Read more

majidmumtaz.substack.com · Mar 27, 2026 · Curated 2 weeks ago

The Unseen Denominator: Why Growth Frameworks Overlook Control Capacity and Risk

This article highlights a critical blind spot in business expansion frameworks: the failure to account for the 'control denominator' – the capacity of internal controls and compliance functions to scale with rapid growth. For internal audit and assurance professionals, this is a crucial insight, as it explains why control failures often emerge years after aggressive expansion, not due to negligence, but due to a structural flaw in how growth is evaluated and approved. Understanding this systemic oversight allows auditors to proactively identify and address the inherent risks in growth-driven strategies that prioritize revenue over robust governance.

News & Blogs · Global Read more

majidmumtaz.substack.com · Mar 28, 2026 · Curated 2 weeks ago

Beyond Awareness: Why Structural Changes, Not Just Training, Are Key to Overcoming Cognitive Biases in Governance

This article argues that common governance failures, such as anchoring bias in audit findings or attributing success to management skill, are not due to individual irrationality but rather to cognitive mechanisms operating in an unsuitable organizational environment. Drawing a parallel to optical illusions, the author posits that simply increasing awareness of biases (epistemic interventions) is insufficient because the distortions persist even when known. Instead, internal audit and assurance professionals should advocate for structural interventions that create parallel systems to counteract these inherent biases, ensuring more robust governance and decision-making.

News & Blogs · Global Read more

majidmumtaz.substack.com · Mar 28, 2026 · Curated 2 weeks ago

The Wrong Intelligence: Why Credentials Fall Short in Assessing True Governance Judgment

This article challenges the reliance on traditional credentials for assessing governance judgment, arguing that such certifications primarily test 'biologically secondary knowledge' (culturally transmitted, explicit instruction) rather than 'biologically primary knowledge' (naturally acquired, context-dependent social intelligence). For internal audit and assurance professionals, this highlights a critical gap: while credentials validate technical expertise, they often fail to measure the nuanced, intuitive abilities essential for effective oversight, such as detecting subtle deceptions or understanding underlying organizational dynamics. This perspective urges a re-evaluation of how we identify and cultivate the true competencies needed for robust governance.

News & Blogs · Global Read more

majidmumtaz.substack.com · Mar 30, 2026 · Curated 2 weeks ago

The Board Pack Paradox: Why 'Accurate' Information Can Obscure Operational Reality

This article delves into the inherent challenges of board reporting, highlighting how information, though accurate at each stage of compilation, can become systematically partial and detached from operational reality by the time it reaches the board. For internal audit and assurance professionals, this underscores the critical need to scrutinize the entire information supply chain to the board, ensuring that the 'translation' process doesn't inadvertently mask crucial operational insights or risks. Understanding this dynamic is key to providing truly independent and valuable assurance on the quality and completeness of information used for strategic decision-making.

News & Blogs · Global Read more