JULIAN TALBOT

I've done a lot of work in developing metrics for control self-assessment and designing benchmarking protocols so it's not unusual that I find myself in conversations about such things. Truly. I was talking recently with a friend about control effectiveness self-assessment in risk management. My view (and his) was that they are fine if you do them regularly (e.g.: monthly or quarterly) as part of your internal reporting. But they introduce their own level of risk if they go t