As auditors we audit the effectiveness of controls and make recommendations for improving controls. If we are not careful, what we may actually do is recommend ineffective controls or try to over control our organizations, effectively strangling the organization and making it more difficult to achieve objectives. Here’s a case study showing some ineffective and over control from one of the largest banks in the world that should know better. Makes me want to scream “give me a break.”
