Systematic and independent examination of books, accounts, documents and vouchers of an organization
POPULARITY
A growing concern among auditors, coders, and compliance professionals is the increasing reliance on template driven documentation. While electronic health records have improved efficiency, copied, carried-forward, and pre-populated information can create significant compliance risks when it does not accurately reflect the patient’s current encounter. Auditors frequently identify contradictory statements, outdated histories, normal findings that conflict with the assessment and plan, and documentation that appears disconnected from the services actually provided. Simply completing documentation fields does not create credible documentation. On this episode of the CodeCast Podcast, Terry discusses why E/M documentation is not a checklist, the compliance risks associated with template generated notes, and practical strategies to ensure your documentation accurately tells the patient’s story and supports the care delivered. Subscribe and Listen Find all of Terry’s official links in one place: https://www.terryfletcher.net/links The post E/M Documentation Is Not a Checklist: Tell the Patient’s Story appeared first on Terry Fletcher Consulting, Inc..
People have been so busy with AI data centers and surging memory prices that they forgot about the EU Chips Act. And to be honest, I did too until I traveled to Antwerp for ITF World 2026 and someone at the media session mentioned that a Chips Act 2 is coming. But second breakfast so soon? In December 2025, the EU Court of Auditors released its special report on the first Chips Act. A quick read of this and other recent events says that Europe's current chip policy must change. It is not working. In today's video, a brief check-in on the EU Chips Act.
People have been so busy with AI data centers and surging memory prices that they forgot about the EU Chips Act. And to be honest, I did too until I traveled to Antwerp for ITF World 2026 and someone at the media session mentioned that a Chips Act 2 is coming. But second breakfast so soon? In December 2025, the EU Court of Auditors released its special report on the first Chips Act. A quick read of this and other recent events says that Europe's current chip policy must change. It is not working. In today's video, a brief check-in on the EU Chips Act.
Hey! The Auditors are in the office and ready to talk comics and comic news! In addition to some new volumes of classics (as seen in the title), we have an original indie from Zack Kaplan on Dark Horse - Only the Savage Are Left!
Auditors, coders, billers, and even physicians often find themselves searching through pages of documentation trying to answer one basic question: what was actually evaluated, managed, and medically necessary during a single patient visit? With note bloat from copied and pasted EMR documentation and pulled-forward notes, it has become increasingly difficult to determine what actually happened “today.” In this episode of the CodeCast Podcast, Terry breaks down this compliance challenge and explains how providers can better manage documentation to ensure accuracy, clarity, and compliance. Subscribe and Listen Find all of Terry’s official links in one place: https://www.terryfletcher.net/links The post Note Bloat Is an Auditor's Nightmare appeared first on Terry Fletcher Consulting, Inc..
Date: May 10th of 2026 Speaker: Rev. Dr. Matthew Richard Text: James 1:22-27 Context: Sermon at St. Paul's Lutheran Church of Minot, ND Manuscript: CLICK HERE
Spurs stayed up so what does it actually mean for the money? Welcome to The Auditors, the new OSoS series on the financial side of Tottenham. In this first episode, Jim is joined by Nick (Corporate Finance) and Ben (Finance Professional) for a clear-eyed look at what survival actually buys us, financially. They walk through PSR and the new Squad Cost Ratio, where Spurs' headroom sits now (around 54% versus the relegation alternative of 93%), why the headline rise in costs was largely out of the club's control, and the gap between £100m–£230m of theoretical PSR room and the actual cash in the bank. Then the wider picture: how parachute payments would have softened but not solved a relegation, why West Ham are in genuine trouble, the truth about the Macquarie loan and ENIC's £100m capital injection, and the figurehead question hanging over Vinai, Charrington and the Lewis family's separate statements. Two more episodes of The Auditors follow: modelling the actual summer budget, and how to spend it within the constraint. Watch the video version on YouTube, and sign up for the free weekly email at ososspurs.com/listen. #KeepItLilyWhite #OhSo33 Learn more about your ad choices. Visit podcastchoices.com/adchoices
Here's a glimpse of what you'll learn: Auditors and use tax Commons use tax problems Contractor use tax issues
Marcus and Michael go through the scandalous revelations about 10 years of failed planning on extending the operational life of the only submarines Australia has - the 6 Collins class - while AUKUS subs slowly appear. Disturbingly, the most senior Defence leadership - including the Secretary and the Chief of Navy (just promoted to be the chief of the entire military) were advised numerous times of insurmountable technical and engineering issues with the planned life extension. The main motors and diesel generators took up more room and would require a major redesign of the entire submarine, and the result would be a sub that had to "snort" for longer and so be more vulnerable. The whole project collapsed under the weight of its flaws because an external Audit got the story out.But for years, the leadership failed to advise Government ministers. A report by a former US Defense official belled the cat in 2024 to ministers, but neither ministers nor the Defence senior leadership revealed the scandals to the public or the Parliament. Instead they kept spending $100s of millions on failure. The result is Australia's only submarines are now in aged care, limping along until the AUKUS cavalry turns up. Meanwhile, the leadership has had promotions all round.This is an insight into how AUKUS is being managed by our Defence leaders and ministers.The episode ends with a dose of truth from the UK's First Sea Lord that the Royal Navy's pursuit of ever bigger, ever more expensive platforms is a mistake - as the huge Dreadnought subs, the Type 26 and SSN-AUKUS projects sail on eating the UK military's future.
Change management in manufacturing breaks down at the people layer, not the technology layer. This episode explains how engineering leaders actually drive adoption.Ronald Sherrod is a Staff Automation Engineer at Regeneron deploying a global event based architecture and Unified Namespace rollout across pharmaceutical operations. Ron, Vlad Romanov, and Dave Griffith dig into the parts of change management that rarely make it onto vendor decks. Subscribe to Manufacturing Hub for weekly conversations with industrial automation practitioners.Want to go deeper? Vlad and the team at Joltek have covered related topics here:Digital Transformation in Manufacturing: https://www.joltek.com/blog/digital-transformation-in-manufacturingMastering the Unified Namespace for Manufacturing: https://www.joltek.com/blog/mastering-unified-namespace-uns-a-guide-to-data-driven-manufacturing-transformationRon makes a point that is rarely stated this directly. The organization implementing the change is the one responsible for it. OEMs and system integrators deliver the box. Consultants help interpret it. Auditors do not call the machine builder when something goes wrong on the floor of a regulated pharmaceutical plant. They walk into the manufacturer and ask whether the audit trails hold up, whether the predicate rule was met, and whether the product is safe for patients. That responsibility cannot be outsourced, even when the technical work is.That framing changes how engineering managers should think about RFP scope. If the scope is loose, the integrator absorbs the risk and prices accordingly. If the scope is rigorous, bids come back tight and comparable. Negotiating power changes with the size of the buyer. A large pharmaceutical company can dictate hypercare windows, on site commissioning support, and structured training. A small to mid sized manufacturer often cannot, and the result is the metaphorical Ferrari on the plant floor that only ever gets used for grocery runs. Capital was deployed. The technology works. The operation never adopted it.The episode also goes deep on tribal knowledge and the industrial elder, the technical anchor who carries the institutional history of a unit or process and is often more valuable than the Excel file on a network drive. Senior operators know why a pipe was rerouted fifteen years ago and why a procedure looks irrational on paper but works perfectly in practice. With 59 percent of frontline skilled workers over 55 planning to retire within five years per the Schneider Electric 2024 workforce survey, capturing that knowledge is now a leadership priority, not an engineering task.On planning, Ron walks through how he runs user story workshops with operators, manufacturing leaders, engineers, and developers in the same room, producing a shared data contract that defines what information moves where, who needs it, and why. He cites a successful SCADA deployment that worked because the organization had inertia, operators had asked for the problem to be solved, and the team was closing a real gap rather than chasing a trend.Ronald Sherrod is a Staff Automation Engineer at Regeneron, a chemical engineer by training who moved from oil and gas into pharma and now works on event driven architecture, UNS, and robotics initiatives. Ron: https://www.linkedin.com/in/rdsherrod/Timestamps0:00 Welcome and Episode Intro1:50 Ron's Career: Oil and Gas to Pharma at Regeneron4:30 Defining Change Management and Its KPIs8:30 Change Management vs Operational Excellence11:50 Who Owns Change Management on Industrial Projects17:00 Negotiating Power: Large vs Small Manufacturers20:30 Why Capital Projects End Up Mothballed22:10 Tribal Knowledge and Learning From Operators26:00 Why Industrial Projects Fail29:00 The Industrial Elder and Passing Knowledge Through People31:30 AI Generated Documentation in Manufacturing35:50 Project Planning and the RFP Process47:50 A Successful SCADA Deployment and User Story Workshops54:30 Predictions, Career Advice, and Smart GlassesAbout Your HostsVladimir Romanov is a cohost of The Manufacturing Hub Podcast and the founder of Joltek, an independent manufacturing and industrial automation consulting firm specializing in modernization strategy, digital transformation, and workforce development.Connect with Vlad: https://www.linkedin.com/in/vladromanov/Dave Griffith is a cohost of The Manufacturing Hub Podcast and founder of Capelin Solutions, an industrial automation firm helping manufacturers adopt smart manufacturing technology.Connect with Dave: https://www.linkedin.com/in/davegriffith23/Subscribe to Manufacturing Hub: https://www.manufacturinghub.liveLinkedIn: https://www.linkedin.com/company/manufacturing-hub-networkYouTube: https://www.youtube.com/@ManufacturingHub
Bongani Bingwa speaks to Kgabo Komape, Acting Head of Portfolio at Auditor-General South Africa, about alarming audit findings at the Compensation Fund, including fraud risks, weak financial controls, and governance failures. 702 Breakfast with Bongani Bingwa is broadcast on 702, a Johannesburg based talk radio station. Bongani makes sense of the news, interviews the key newsmakers of the day, and holds those in power to account on your behalf. The team bring you all you need to know to start your day Thank you for listening to a podcast from 702 Breakfast with Bongani Bingwa Listen live on Primedia+ weekdays from 06:00 and 09:00 (SA Time) to Breakfast with Bongani Bingwa broadcast on 702: https://buff.ly/gk3y0Kj For more from the show go to https://buff.ly/36edSLV or find all the catch-up podcasts here https://buff.ly/zEcM35T Subscribe to the 702 Daily and Weekly Newsletters https://buff.ly/v5mfetc Follow us on social media: 702 on Facebook: https://www.facebook.com/TalkRadio702 702 on TikTok: https://www.tiktok.com/@talkradio702 702 on Instagram: https://www.instagram.com/talkradio702/ 702 on X: https://x.com/Radio702 702 on YouTube: https://www.youtube.com/@radio7See omnystudio.com/listener for privacy information.
Support the Show: Patreon.com/freelanceduckhunting Contact Elliott: freelanceduckhunting@gmail.com On this episode of The North American Waterfowler Podcast, Elliott is joined once again by good friend and host of the Migration Waterfowl Podcast, Brian Halbleib. The two sit down for a wide ranging conversation covering everything from duck hunting adventures and prairie marshes to family life, nonresident hunting pressure, and even the world of First Amendment auditors. Brian talks about the emotional transition of becoming an empty nester as his daughters begin careers and move out of state. The conversation then shifts into law enforcement and public filming rights as Elliott asks Brian, a police sergeant, about the growing trend of First Amendment auditors filming inside public buildings. From there the guys dive deep into waterfowl hunting, including Saskatchewan mallard hunts, hidden marshes loaded with ducks, the Gear Roost storage system, travel hunting, Kansas nonresident regulations, scouting strategies, and how perspectives on waterfowl pressure evolve over time. This is one of those classic long form conversations that feels more like sitting around camp with friends than a formal interview. Partners:Flight Day Ammunitionhttp://www.flightdayammo.comCode: NAW10 Shotty Gearhttp://www.shottygear.comCode: FDH10 Weatherbyhttp://weatherby.com TideWehttps://www.tidewe.comCode: NAW18 Mammoth Guardian Dog Crateshttps://mammothpet.com Patreon:Patreon.com/FreelanceDuckHunting Learn more about your ad choices. Visit megaphone.fm/adchoices
Questions are being raised in Europe about where billions in Euros meant for COVID-19 actually went. AP's Lisa Dwyer reports.
Tim Coach, chief evangelist at Cynomi For most managed service providers, the security services story has followed a familiar arc: endpoint protection, email security, security awareness training. Each category added value, then became table stakes. Third-party risk management – TPRM – is what comes next, and according to Cynomi Chief Evangelist Tim Coach, it may be the stickiest revenue category yet. The case is straightforward. Every business relies on a web of vendors, software providers, and service partners. Each one is a potential vulnerability. And most SMBs have no formal process for knowing how well those third parties are managing their own security – or what happens to them downstream if one of those vendors gets breached. Research from Cynomi suggests 45 percent of organizations will face supply chain attacks, and 30 percent of data breaches already involve a third party. The attack surface has shifted to the things organizations trust most. For Canadian MSPs, the regulatory pressure is specific and near-term. OSFI’s Guideline E-21, with a September 2026 compliance deadline for federally regulated financial institutions, puts third-party oversight explicitly on the agenda. The cascade effect on their vendors – and the MSPs serving those vendors – is already in motion. Perhaps the sharpest signal in this conversation: cyber underwriters are now denying SMB coverage not because of anything the SMB did, but because they are connected to an MSP. The managed service provider, long positioned as the path to better insurance outcomes, has become a risk factor in its own right. Coach’s recommended first move for any MSP building into TPRM isn’t a vendor questionnaire – it’s a Business Impact Analysis. Understand how the client actually makes money, which vendors are critical to those revenue processes, and what an hour of downtime costs. That reframes the conversation from technical widgets to revenue, cost, and risk – the language every business owner speaks. – UPLOAD AUDIO Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca, your host for the show. My guest today is Tim Coach, Chief Evangelist at Cynomi, a vCISO platform purpose-built for MSPs and MSSPs. Tim brings an unusually grounded perspective to the space. He’s an engineer by training who spent nearly two decades building, running, and consulting on managed service practices before landing at Cynomi after seeing the platform first-hand and recognizing it could have solved one of his biggest operational headaches as an MSP owner – the CISO bottleneck, the point at which growth stalls because the security function can’t scale without adding expensive headcount. That personal history shapes everything he thinks about TPRM, third-party risk management, which is increasingly being talked about as the next major revenue category for MSPs after human cyber risk. Today we’re talking about what building a TPRM practice actually looks like, why cyber insurance has quietly flipped the MSP value equation, and why the right starting point isn’t a vendor questionnaire at all. Let’s get right into it, my chat with Tim Coach. Tim, thanks for taking the time. I appreciate it. Tim Coach: I absolutely love to be on. Thanks so much for having me, and for having Cynomi on your webinars. We’re always happy to do these things and educate the community. Robert Dutt: You’ve spent a long time in and around the MSP community. How did you end up at Cynomi specifically, and what was it about the opportunity around TPRM that pulled you in? Tim Coach: TPRM was eventually in the process – let me back up. What got me into the community was my engineering background. I went to college for what was called network communications back in those days. Basically I’m a network guy – I always point at the front-end programming guy and say, “It’s your fault,” and the programming guy says, “No, no, it’s the network’s fault.” So I did that for a large-scale nationwide company for many years, and then I fired my MSP. The owner was like, “Well, if you’re so good, why don’t you come over here and run this?” And I said okay. It took me about 24 hours to realize I didn’t have a clue what was going on – the place was chaos. But through process and procedure, and a military background, I knew I could get it under control. I ended up with a business partner from that experience, and we spent about 20 years rebuilding and consulting with MSPs. About five years ago, I just needed something different. The kids were a little older. I started looking at what else was out there, talked to a couple of mentors in the space – I’m sure if I mentioned their names everyone would know them – and they said, “You should come over and do this.” So I jumped. I went to work for a Canadian company, grew them quite a bit in the first year, then moved to an Australian company, grew them, and then went back to consulting for a short time. David from Cynomi was recommended to me as a consulting connection. We were going back and forth and he said, “Why don’t you come on board?” And I said, “I’m not really interested in selling a widget” – and it’s a security widget, right? There are so many great widgets and great personalities in the security space already. Probably not my jam. But he said, “No, no – let’s look at it.” And he showed me what Cynomi did, and I was blown away. The reason I was blown away is that at my most successful MSP, we hit a stopping point in our growth. The reason was our CISO – and this was before CISO was even a cool term. He was our bottleneck. Not because he was inefficient as a person, but because of the way he had to work: 80 pages of Excel spreadsheets and hours and hours of questionnaires. When I first saw Cynomi, I thought, “Here’s a way I could have doubled the size of my company with the same staff, the same CISO.” That’s what really inspired me to come on board – seeing that dashboard and connecting it to the personal pain I’d experienced around the security bottleneck. Now with the addition of TPRM, that excites me even more, because back in my MSP days I had a lot of bank clients, and banks are SOC 2 all over the place. Part of SOC 2 is that you have to have TPRM – you have to be responsible for everybody in the chain. So now we’ve built out a platform that lets the MSP, MSSP, ITSP, or whatever SP you want to put in front of those letters, easily manage vendor relationships and understand where clients are in their security posture. Robert Dutt: You may not feel it’s cool, but it’s certainly foundational security. Tim Coach: And that’s the problem, right? That’s why we’re still talking about security – because nobody knows how to talk business. They all talk widgets, bits and bobs: here’s this cool firewall, MDR, XDR. But you know what your clients don’t care about? The widgets. They care about being secure. Until we can bridge that gap – until Cynomi brings something that says, here’s an easy way to get to the data and details you need, here’s CISO-level intelligence so the MSP can translate it into business terms for the doctor’s office, the manufacturing company, whatever vertical you want – we’re going to keep having this same conversation. Robert Dutt: Let’s do a little bit of that with TPRM itself. Let’s take a step back and look at it from the viewpoint of an MSP who’s heard the acronym but hasn’t really dug in yet. Third-party risk management – what are we actually talking about, and what problem does it solve? Tim Coach: What a lot of people need to understand – and I try to say this in a way that’s easy to grasp – is: manage security first, and compliance becomes a default. What I mean is that you need a baseline, whether it’s CIS Controls, Cyber Essentials Plus, CMMC 2.0, one of the financial frameworks, HIPAA, whatever applies. You need a baseline you’re actively managing your security against. In the process of meeting that baseline, compliance follows. What we’re increasingly seeing is that certification bodies, auditors, and insurance underwriters all want to see that your solutions and partners are just as secure as you are. I was at Canalys Barcelona last year and someone made a statement that blew me away: for the first time ever, we’re seeing insurance underwriters deny coverage to an SMB because they’re connected to an MSP – and the MSP is what they consider the risk. We went from being the most important people in the room, essential workers, to being the risk factor. And on top of that, helping clients with their insurance has been one of our foot-in-the-door conversations for the last decade. That’s where TPRM comes in. The frameworks and insurance underwriters now want to see not just that you’re secure, but that everyone you’re working with is secure. The problem has always been how you manage that. Back in my day, you had to call the vendor, find the right person, ask for evidence of their SOC 2 compliance, get bounced around, end up with legal, sign an NDA, and eventually get the report. Now people share that information a bit more freely, but you still need a central place to manage it – so when an auditor or insurance broker asks, you can point to it and say, “Here it is.” We do a community call every Wednesday at noon Eastern, and we’ve had a gentleman on a couple of times who has written books specifically on TPRM. He’s sounding the alarms – not bad alarms, just “it’s coming.” But like a lot of SMBs, MSPs are having to drag their clients toward where they need to be. Once you make it easy for the MSP, you make it easy for the SMB, and you finally have a way to prove you’re taking those measures. Robert Dutt: Supply chain attacks have certainly been a theme in the channel for a while – Kaseya, SolarWinds, MOVEit. But TPRM as a formal managed service element feels newer. The insurance side sounds like a big driver. What else changed to make it go from a theoretical concern to something MSPs can actually build a practice around? Tim Coach: I firmly believe you cannot be a business partner without knowing how your partner makes money and how you need to protect them. I can’t protect them if I don’t know what they’re using. It’s the old adage: if two people are managing something, nobody’s managing it. TPRM is really the next step for the ITSP to move from a transactional relationship to a true business partnership – ensuring that everyone your clients are using is also protected. Because what happens is what always happens: it doesn’t matter what you have hard-coded in the contract about not being responsible for X. When something goes wrong, the SMB comes back and says, “But I thought you were managing this.” We go over it in the contract reviews, sure, but the conversation still happens. When you’re genuinely talking business – saying, “I’m going to protect how you operate quarter after quarter, year after year” – you’re protecting their entire environment, not just your piece of it. That’s when you move to a real business relationship instead of a sales relationship where every conversation is an upsell or a cross-sell. We’ve done it to ourselves a little bit, honestly. It’s like an insurance agent in Oklahoma trying to sell hurricane insurance. That’s not what we should be doing as business partners. TPRM allows us to have a full understanding of the client’s environment and make sure everything is protected – or at minimum, that the gaps are known by everyone. Robert Dutt: Cynomi has described TPRM as the next major revenue category after human cyber risk. Can you walk me through what the recurring revenue model actually looks like, and what makes it sticky? Tim Coach: Everything leads to MRR – that’s business. But you have to start with a project. You need to understand where the client is in their security journey before you can manage them ongoing. SMBs don’t do things for free, and neither do our partners. This is a revenue generator. But it’s a revenue generator because it actively has to be managed. I always say: I can’t throw a server at security. I can’t throw a firewall at it and declare myself secure. The best analogy I’ve heard for security is a block of Swiss cheese. There are holes, and you can stick a fork through those holes quite a way. But if you slice that block and turn every slice 90 degrees, the holes are still there – they’re just not as deep or vulnerable. That’s TPRM. There is no set-it-and-forget-it. It has to be actively managed, and that active management is where the recurring revenue lives. Robert Dutt: What does a typical engagement look like early on, for an MSP starting from zero with a client? Where does the work begin, and what surprises people about the scope as they go deeper? Tim Coach: Everything begins with an assessment. With Cynomi’s tools, we can use Cyber Essentials Plus or CIS Controls as a self-regulating baseline and add a couple of hours to the initial assessment to incorporate the security piece. We all do assessments upfront to understand what we’re getting into – or what needs to be fixed before we really dig in. Once you’re in the security layer, the next step is TPRM. And TPRM brings with it something I think is critically important: the Business Impact Analysis. It’s not enough to ask, “What does your client do?” They make dog food – do they? Or is that just the end product? When I was an MSP, I had a metal manufacturer that cut and stamped metal. But if you asked their CFO what the business was, he’d say, “Making pallets – I make more on pallets than on the stamping work.” I used this example in a presentation just yesterday. Years ago I was walking through a manufacturer’s facility and asked about a machine: “What does that one do?” “That runs the software that completes our product.” “Why isn’t it plugged into the network?” “It’s a Windows 98 machine.” “Why are you still running that?” “Because it runs decade-old German software that costs ten million dollars to replace. And we only have that one machine.” If you’re not walking through and genuinely understanding how they make money, you don’t know where the risks are. And that’s what TPRM forces you to do. Ideally, I’d love to sell a project that includes a full security assessment, a BIA, TPRM, BCP, IR planning, all of it from day one. But it doesn’t happen that way. You have to phase it. Once you understand the BIA and what they’re actually doing, you understand where the software and systems that carry real business risk are, and you can start building that into their security posture. It’s the same principle: why hack an individual when you can hack the software that manages all the individuals? Why try to crack one account when you can compromise an MSP’s RMM tool and get access to everybody? If you go into a business without understanding their software environment and vendor posture, you at minimum need to be able to tell them where the risks are. Because the language they speak is revenue, cost, and risk. TPRM is a risk if it’s not being managed – and that’s why we’re seeing so much attention on it lately, even though some of us have been doing this for decades. We just used to call it vendor management. Robert Dutt: We’ve talked a lot on the show about MSP tools as an attack surface – RMM agents, remote access tools, backup platforms. The MSP is supposed to be managing the client’s vendor risk, but the MSP’s own toolchain is also someone else’s third-party risk. How should MSPs be thinking about that? Tim Coach: It comes back to the BIA again. What are they using? What’s creating the security gaps, and how do you build better overall management around it? There’s a project in there, but every project should lead to MRR – period. It still has to be managed. Remember when Exchange servers went away and everyone panicked about where the revenue was going to go? There was still an entire environment to manage. We always made some revenue on hardware, though that’s gotten harder – the real money is in managing the ongoing environment. TPRM is the same thing: it’s a significant security gap in the overall posture of your clients, and that gap has to be actively managed. Robert Dutt: Pushing on that a little further – TPRM platforms are pulling in a pretty comprehensive map of an organization’s vendor ecosystem: the gaps, what’s been remediated, basically a full picture of the landscape. If one of those platforms gets compromised, that’s not just a breach – that’s a pretty rich target list for an attacker. How do you think about that? Tim Coach: Think about a CNC factory. Their job is building molds to produce a specific part, and the software on their server has all the schematics fully built out. What happens if that software gets hacked? You lose all the schematics for the CNC machine – so suddenly you can’t produce anything. And if the attacker gets in early enough in the process, the downstream supply chain impact goes way beyond that one facility. That’s the risk. If you’ve got $200,000 five-axis CNC machines – and I may have a little experience with this – and you’re not protecting the software running them, and you don’t understand from a TPRM perspective what the vulnerabilities look like, that’s an ongoing, persistent risk. You always have to be managing it. Robert Dutt: Sitting where Cynomi is, how do you think about the security side of running a TPRM solution, and what should MSPs be asking vendors in this space about that? Tim Coach: Efficiency. How efficient can you make it? I’ll probably get in trouble for saying this, but we’ve essentially stupid-proofed the first few levels. We’ve built it out for you. And look – I know AI is a word we’ve managed to avoid for about the last half hour, but AI is meant to enhance the human. It’s a tool. What we’ve done at Cynomi is build AI agents and intelligence into the platform to make this work manageable at a lower labor level. If I can take work that previously required a CISO – an expensive asset – and bring it down to a tier-two technician, my margins go up because my labor costs go down. That said, we’re not replacing the CISO. I used to work with a company that built a component for Apache helicopters – no public-facing anything. If a tier-two tech runs a report showing no web security for that client and flags it as a critical gap, the CISO might be the only person who knows that client has no public-facing presence by design. That context matters. The CISO still needs to be the final approval layer. What Cynomi has done is open up bandwidth for other people to do the groundwork, so you can grow your company without adding another six-figure salary. When your staff becomes more efficient, the CISO is less of a bottleneck – which was the original problem we started with. Robert Dutt: For the Canadians listening, there are some very specific regulatory drivers on the table right now. OSFI’s Guideline E-21 has a September 2026 compliance deadline for federally regulated financial institutions. Can you talk about the role you see TPRM playing in responding to that kind of regulation? Tim Coach: What we’re seeing is that the insurance underwriters, auditors, and regulators are the ones setting the standard, and the industry has to meet it – but the industry isn’t yet at a point where it can easily meet a TPRM standard. So what will probably happen, whether it’s Canada, the US, the UK, or EMEA, is a pattern we’ve seen before: they’ll release a guideline, there’ll be a period of voluntary adoption, and then they’ll give it teeth. Like HIPAA – they threw it out there, and eventually it got enforcement. The thing I’ve always loved is watching the auditors, because they’re typically running a couple of years ahead of the regulation. If you stop treating auditors like your mortal enemy – “they’re here to expose everything I’m doing wrong” – and start paying attention to what they’re flagging, you can get ahead of the game. Auditors are a leading indicator. It’ll always come down to government forcing the policy, and then insurance trying to find a way out of paying claims when it’s not followed. But if you’re watching the auditors and TPRM is showing up in their reviews, you already know what’s coming. Robert Dutt: For an MSP listening to this and thinking, “I should be doing this” – what’s the realistic first move? Not the ideal end state, but the practical starting point? Tim Coach: Start with the BIA – the Business Impact Analysis. Research suggests every SMB has three to five critical processes that drive about 80% of their revenue. Do they actually know what those are? Probably not. They make dog food. They take care of kids. Whatever it is – they don’t actually know how they make money. I have an old client who’s also a friend – he works in retirement planning. If you asked how he makes money, you’d assume it’s from managing portfolios. It’s not. He makes money by selling the policy, and the insurance company pays him a commission on that. If you don’t start by understanding the BIA, you don’t really know what solutions your clients are dependent on. Start with: who is your critical software outside of us? Who maintains it? Do we have a relationship with them? Does it connect directly to how you make money? And tie it to cost of downtime. If a doctor’s office goes down for four hours – and in a medical practice you call them providers, not doctors, right? Speaking their language, not ours – what does that cost? If the pallet machine on an assembly line goes down, and that pallet machine is the only thing holding product so the rest of the line can keep moving, what’s the cost per hour? If you don’t know that, you don’t actually understand how to service your client. You’re still talking bits and bobs instead of revenue, cost, and risk. Robert Dutt: Future-looking question to wrap up: where do you see this category going over the next couple of years? Is TPRM a standalone practice, or does it fold into a broader vCISO or governance offering? Tim Coach: I think it’s going to be both. For more mature MSPs, it’ll be baked right into their silver, gold, and platinum packages – TPRM is just part of what you get at a certain tier. For others, especially those that aren’t at a full vCISO-as-a-service level yet, it’ll be available as a standalone – a meaningful piece of the security posture they can deliver to clients without committing to the full stack. Growth and maturity, right? As people build their practices, the more advanced will have it embedded. But there’s also a real path for someone starting out to say, “I need to at least get this piece right, because it’s critical to the overall security posture of my clients.” Robert Dutt: Fascinating. It’s an interesting area of technology and – to your greater point – business. I appreciate you taking the time to share some thoughts on how service providers can get involved. Tim Coach: Thanks for having me on. I always appreciate it. Robert Dutt: There you have it – Tim Coach from Cynomi. I’d like to thank Tim for taking the time today. He’s been around the MSP space long enough that when he points at something and says it’s the next thing, it’s worth listening. A few things I want to make sure land from this conversation. The first is the Business Impact Analysis as the true starting point. Before you think about vendor questionnaires or risk scoring tools, you need to understand how your client actually generates revenue – which processes drive the majority of the business, and which vendors are load-bearing in that equation. That’s not a security conversation. That’s a business conversation. And that’s the shift that moves an MSP from tool vendor to genuine business partner. The second is the insurance signal. When underwriters start denying SMB coverage not because of something the SMB did, but because they’re connected to an MSP – that’s a warning and an opportunity in the same breath. MSPs who can demonstrate they’re actively managing their clients’ third-party risk have a new and better story to tell. And the frame to carry with you: security first, compliance becomes a default. Build the practice to the right security baseline and the compliance checkboxes largely take care of themselves. In The Channel is available on Apple Podcasts, Spotify, YouTube, and most major podcast directories. If you’re finding value here, ratings and reviews are always appreciated – they help other people in the Canadian IT channel find the show. Until next time, I’m Robert Dutt for ChannelBuzz.ca, and I’ll see you in the channel.
Why do audits still trigger panic even at companies with strong quality systems? Sneha Saggurthi — a quality compliance manager and lead auditor in cell therapy — breaks down the gap between being compliant and being audit ready, and shares the psychology, patterns, and logistics that actually determine inspection outcomes.Sneha discusses how auditors think and prioritize, why logistics matter more than most companies realize, and the specific psychological techniques auditors are trained to use — including how to handle them.A few of Sneha's key takeaways:Being compliant and being audit ready are not the same thing — compliance is your documentation; readiness is your logistics, your plan, and your ability to defend your approachAuditors think in terms of SISPQ (safety, identity, strength, purity, quality) — everything rolls up to whether the product has those attributesLogistics are the make or break — fast document retrieval, defined roles, and coordinated teams create more auditor confidence than perfect systems with slow accessBatch records are the most common rabbit hole — have a storyboard ready for anything you put in front of an auditorTrain your floor staff to be comfortable with auditors, not to hide from them — use internal audits as practiceAuditors use strategic silence, open-ended questions, and deliberate friendliness to get people talking — train your team to give concise answers and redirect to documentationThe daily question that changes everything: "If someone reads this two years from now, will they know what happened?"About Sneha SaggurthiSneha Saggurthi is Quality Compliance Manager at Cartesian Therapeutics, a cell therapy company, where she manages inspection readiness, supplier quality, and the audit program. She holds an ASQ Certified Quality Auditor (CQA) credential and a Lean Six Sigma Green Belt, with prior quality and training roles at Catalent, Precision For Medicine, and Charles River Laboratories. She is an adjunct instructor at Frederick Community College and serves as Vice Chair of Young Women In Bio.About The FDA GroupThe FDA Group helps life science organizations rapidly access the industry's best consultants, contractors, and candidates. Our resources assist in every stage of the product lifecycle — from clinical development to commercialization — with a focus on staff augmentation, auditing, remediation, QMS, and other specialized project work in Quality Assurance, Regulatory Affairs, and Clinical Operations. Learn more: https://www.thefdagroup.com/
Auditors are flagging major issues with the handling of tax dollars by the LA Homeless Services Authority. SoCal's top pizzerias are coming together for a festival this weekend. And the Queen Mary is celebrating a major milestone this year. Support The L.A. Report by donating at LAist.com/join and by visiting https://laist.comSupport the show: https://laist.com
Alan Rozenshtein, research director at Lawfare, spoke with Miles Brundage, founding executive director of the AI Verification and Evaluation Research Institute (AVERI) and former senior advisor for AGI readiness at OpenAI, about the state of AI safety and accountability and AVERI's vision for independent third-party auditing of frontier AI companies.The conversation covered the weaknesses of current AI regulations, including California's SB 53 and New York's RAISE Act; why Brundage left OpenAI to build an independent nonprofit; AVERI's case for shifting the unit of analysis from individual AI models to the organizations that build them; the "Volkswagen problem" of deception-proofing safety evaluations; a framework of AI Assurance Levels ranging from baseline transparency to treaty-grade verification; the limitations of safety benchmarks and the BenchRisk project's findings; market-based mechanisms for driving audit adoption, including insurance, procurement, and investor pressure; and how AVERI navigates the tension between proximity to industry and independence from it.Mentioned in this episode: Frontier AI Auditing: Toward Rigorous Third-Party Assessment of Safety and Security Practices at Leading AI Companies, Averi 2026Risk Management for Mitigating Benchmark Failure Modes: BenchRisk, NeurIPS 2025Why I'm Leaving OpenAI and What I'm Doing Next, Miles Brundage, Substack, October 2024 Hosted on Acast. See acast.com/privacy for more information.
If we can name every brand that gets accessibility wrong, why do so many disabled people still avoid working for disability organisations? That question drives our conversation with Deborah Ruh about Billion Strong's new Disability Power Index, a “mirror” built to measure how well disability organisations actually walk the talk on accessibility, inclusion, and representation.We unpack what makes this index different from the many corporate scorecards already out there. The focus stays on governance and leadership, employment, programs and advocacy, communications, and economic ecosystem inclusion. We talk candidly about why leadership without lived experience creates mistrust, how inaccessible internal processes shut people out, and why credibility collapses when organisations that claim to represent us cannot meet the standards they promote.We also zoom out to the bigger systems problem: technology and AI accessibility tools are advancing fast, yet real inclusion can stall or slide backwards when the community is fragmented and under-resourced. Deborah shares how Billion Strong plans to strengthen methodology with university partners, fund the work through a membership organisation model with scholarship options, and build practical resources so the index helps organisations improve rather than just get judged. We close with a hard truth and a hopeful path: when we coordinate and raise our own bar, we gain power to change everything else.Subscribe, share this with someone leading a disability organisation, and leave a review to help more listeners find Access Chat. What would you measure first to prove an organisation truly serves disabled people?Send us Fan MailSupport the showFollow axschat on social media.Bluesky:Antonio https://bsky.app/profile/akwyz.comDebra https://bsky.app/profile/debraruh.bsky.socialNeil https://bsky.app/profile/neilmilliken.bsky.socialaxschat https://bsky.app/profile/axschat.bsky.socialLinkedInhttps://www.linkedin.com/in/antoniovieirasantos/ https://www.linkedin.com/company/axschat/https://www.linkedin.com/in/neilmilliken/Vimeohttps://vimeo.com/akwyzhttps://twitter.com/axschathttps://twitter.com/AkwyZhttps://twitter.com/neilmillikenhttps://twitter.com/debraruh
A calm officer can end an auditor contact in seconds. A triggered officer can turn the same moment into a lawsuit, a viral clip, and a career problem. That tension drives today's conversation with Sgt Erik Lavigne, Banning Sweatland and Ryan Montero as we dig into First Amendment auditors, police accountability, and the real reason “name and badge number” sometimes flips a switch.We talk through why viewers can get more upset when cops and auditors both do things correctly than when one side is clearly wrong. From there we break down a body camera encounter step by step, including trespass warnings, what officers can demand during a stop, and why “failure to identify” is so often misunderstood. The bigger takeaway is about ego in policing: when you can disengage, you should, and when you cannot, you still have to stay professional and constitutional.We also pivot into quick-hit video reviews that show both ends of modern law enforcement: a strong example of teamwork and restraint after a taser deployment in the water, and multiple clips that highlight unnecessary force, poor communication, and fear-driven decision-making. Along the way we connect the dots to police training gaps, recruiting pressures, and why constitutional rights education and emotional intelligence are now critical officer safety tools.If you care about First Amendment audit videos, bodycam footage, de-escalation, use of force decision-making, and how policing can earn trust again, this one is for you. Subscribe, share this episode with someone who argues about auditors, and leave a review with your biggest takeaway.send us a message! twocopsonedonut@yahoo.comPeregrine.io: Turn your worst detectives into Sherlock Holmes, head to Peregrine.io tell them Two Cops One Donut sent you or direct message me and I'll get you directly connected and skip the salesmen.Support the showPlease see our Youtube channel https://www.youtube.com/c/TwoCopsOneDonut Join our Discord!! https://discord.gg/BdjeTEAc *Send us a message! twocopsonedonut@yahoo.com
Welcome to ArmaniTalks Show Episode 39. In this episode, I cover everything from James Harden vs. Dwyane Wade, emergencies vs. regular problems, and how to solve big issues, to first amendment auditors, guilt by association, loyalty, childhood memories, learning, production support, computer science vs. IT, MIS vs. MBA, and content creation. If you enjoy deep conversations about communication, mindset, career growth, and modern life, this episode is for you. Subscribe for more. 0:00 Intro 0:19 James Harden vs Dwyane Wade 4:22 Regular Problems vs Emergencies 7:30 How to Solve Big Problems 11:04 First Amendment Auditors 13:00 Guilt by Association 16:45 Loyal to a Fault 20:09 Learning from Childhood Memories 26:00 What vs Why Mentality 29:50 Marc Andreeson 33:00 Best way to Learn 37:50 The Rise of Quality Analyst 42:40 Production Support 46:50 Judge vs. IT Worker Video 48:33 Computer Science vs IT 53:40 MIS vs MBA 56:40 Content Creation & Tech Bridge 59:43 Outro CONQUER SHYNESS
Ep 268- Amendment Auditors This week Chuck goes on a wild rant Auditors, new pillows! microwaves, greedy peopleand much more, on this episode of, Casually UncomfortableAuditors, new pillows! microwaves, greedy peopleCall Show And Leave A Question, Comment, And Or A Concernshttps://www.speakpipe.com/CasuallyUncomfortable
What they do and how to become one
Will AI Replace Accountants, Auditors or Finance Business Partners? Owen from 'Owen Talks Finance' joins me on this podcast episode to discuss this very topical question.In this episode, we go through:How to use AI to enhance your jobWhat jobs are at risk due to AI The pros and cons of using AI in the workplaceHow AI can improve your personal lifeAnd moreListen to the episode for the full details!-----------------------------------------More investing:
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Jacka and Tshepo Mofokeng tackle one of the most common questions internal auditors face: Who audits the auditors? They break down how the quality assurance and improvement program (QAIP), professional standards, peer reviews, and self-regulation protect the integrity of the profession. They discuss how quality assurance strengthens credibility with boards, builds trust with stakeholders, and positions internal audit as a strategic advisor. HOST: Mike Jacka, CIA, CPA, CPCU, CLU Chief Creative Pilot at Flying Pig Audit, Consulting, and Training Solutions GUEST: Tshepo Mofokeng, CIA, CRMA CAE, Sefako Makgatho Health Sciences University Global Board of Directors, The IIA KEY POINTS: Introduction: Who Audits the Auditors? [00:00:06–00:01:23] What QAIP Really Means and Why It Matters [00:01:29–00:02:43] The Role of Standards in Professional Legitimacy [00:03:05–00:03:58] Explaining Self-Regulation to the Board vs. Management [00:04:02–00:06:06] Addressing Defensiveness and Educating Peers [00:06:52–00:08:10] Moving from Compliance to Credibility in Quality Reviews [00:08:43–00:11:28] Measuring Impact, Not Just Audit Volume [00:12:01–00:13:39] Marketing Internal Audit's Value Through Quality [00:14:02–00:14:30] Finding Time for Quality Assurance Work [00:14:40–00:15:22] Real-World Example: How Peer Review Strengthened Trust [00:15:24–00:17:48] When Weak Self-Regulation Damages Trust [00:17:52–00:20:48] The Future of QAIP and Vision 2035 [00:21:02–00:23:19] Internal Audit's "Superpower" with the Board [00:23:21–00:25:11] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Quality Assurance and Improvement Program Vison 2035 Become a Certified Internal Auditor (CIA) 2026 Analytics, Automation and AI Virtual Conference Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
Free Guides Mentioned in This Episode: Margin Protection Playbook: https://natrevmd.com/margin-playbook Eligibility & Billing Verification Guide: https://natrevmd.com/eligibility-billing-verification/ Right now, your practice's billing data is being run through an AI model and compared to every other practice in your state. That AI is looking for one thing: outliers. Are you one of them? And if you are, do you even know it? In this episode, we pull back the curtain on exactly what payers are scrutinizing most aggressively in 2026. This isn't guesswork. This is based on the latest CMS RAC audit targets, payment integrity trends, and real-world audit data. Listen now to find out where you're most exposed.
In episode 77 of Audit Bites, Robert dives deep into a critical yet often neglected audit risk—organizational culture. This compelling episode, inspired by a real-life scandal at Citigroup and insights from author Pete Havel's book The Arsonist in the Office, explores why auditors commonly ignore toxic culture, the devastating impact it has on productivity, reputation, and trust, and practical advice for making culture an auditable focus.Key topics include:Real-world stories of culture failures at major organizations like Citigroup, Wells Fargo, and Enron.Why audit teams often default to controls instead of tackling the “messy” aspects of culture.The Harvard research showing bad apples outweigh rock stars—how toxicity magnifies risk.Eight actionable culture components auditors should integrate into every audit, from goals and budget decisions to promotion patterns and whistleblower data.How leadership consistency, exit interviews, and local subcultures shape the organization's health.Special mention: Pete Havel, whose book The Arsonist in the Office inspired this episode. Learn how one toxic individual can burn down an entire workplace and what auditors should do to stop it.Want to level up your audit team? Visit thatauditguy.com for on-demand training, resources, and tools to help you audit culture before it wreaks havoc.If you found value in this episode, don't forget to leave us a five-star review and share with your network!Mentions & Resources:The Arsonist in the Office by Pete Havelthatauditguy.com – Podcast resources, courses, training, and contact infoHarvard Business Study on workplace culture impactsTune in to uncover why addressing culture is essential for auditors and how it can make the difference between organizational success and failure.
February 11th, 2026
Fresh out of the caucus week we heard Monday morning that Scott Jensen announced he is dropping out of the gubernatorial race and instead pursuing the Minnesota State Auditor position! He shares why make the move now, what signs he had that it was time for a switch, who he personally feels is the best fit for the governor and how he feels he would fare in the race to become a state auditor!
Join me, host Sgt Erik Lavigne, the return of the rookie Trey Mosley, and special guest Anthony Bandiero from Blue to Gold law enforcement training. We even have a special story time. A dad, two kids, a frozen lake—and four officers on the dock. That viral moment becomes our doorway into a bigger, sharper question: when does a safety worry justify a 911 call, and when does it become pressure disguised as policing? We bring the original poster onto the show to tell his side, and we work through the messy details together: a Virginia lake that rarely freezes, private HOA property, open water in the middle, and a community that sees thin ice as a hard no. He's candid about what he'd have done and why. We're candid about discretion, constitutional limits, and the real weight of simply showing up in uniform.From there, we shift into practical, street-level law. We test ID demands during stops, passengers who match wanted persons, and where community caretaking ends. We dig into cite-and-release drug cases and why exigency—not search incident to arrest—may be the cleanest path to recover evidence without hauling someone to jail. Then we break down Terry frisk failures: why “training and experience” isn't a magic phrase, how timing undermines credibility, and what articulation actually sticks in court. If you can't defend it from the report to the stand, don't do it.We also talk culture. Real-Time Crime Centers can make policing smarter and safer when policy discipline is tight. Auditors can be irritants or unexpected allies depending on your poise. And chasing SWAT is a test of character as much as fitness; a first “no” often measures how badly you want the “yes.” Threaded through it all is a simple principle: use the badge lightly and your voice well. Educate, de-escalate, and reserve force for the moments that truly demand it.If this kind of open, honest conversation hits home, follow the show, share it with a friend, and leave a quick review. Your feedback helps thoughtful policing—and thoughtful community action—risend us a message! twocopsonedonut@yahoo.comPeregrine.io: Turn your worst detectives into Sherlock Holmes, head to Peregrine.io tell them Two Cops One Donut sent you or direct message me and I'll get you directly connected and skip the salesmen.Support the showPlease see our Youtube channel https://www.youtube.com/c/TwoCopsOneDonut Join our Discord!! https://discord.gg/BdjeTEAc *Send us a message! twocopsonedonut@yahoo.com
When I talk about warehouse sanitation, I often say, “It's a great way to get your foot in the door.” And every now and then, someone pushes back and says, “I don't want to clean restrooms or take out trash.” I understand that reaction. On the surface, sanitation doesn't sound exciting. It doesn't come with a forklift, a title, or a clipboard. It came up again this week so I wanted to explain a little better what the warehouse sanitation role really is, what it teaches you, and why it has launched more warehouse careers than people realize. Because warehouse sanitation is not just cleaning. It's operations support. It's safety. It's compliance. And for the right person, it's a proving ground. Think of it like this. At its core, warehouse sanitation exists to protect people, product, and the process. A clean warehouse is a safer warehouse, a compliant warehouse, and ultimately a more productive warehouse. Yes, sanitation associates may clean restrooms and remove trash, although a lot of times that's more of a role for the janitorial folks and departments, anyway, that work matters more than people realize. But in a warehouse or production environment, sanitation includes maintaining dock areas, storage aisles, production zones, and shared spaces so that operations can run without interruption and bottlenecks. Sanitation associates are often the first ones to notice leaks, spills, or damaged flooring, broken pallets and debris buildup, blocked exits or fire equipment, and unsafe conditions developing in the aisles, cross aisles, and dock areas over time. In many operations, especially your larger distribution operations, sanitation is not a background function, it is a frontline safety and compliance role. Auditors, inspectors, and customers notice cleanliness immediately, and sanitation teams are often the unsung reason a facility passes inspections. One of the most valuable things a sanitation associate learns is Good Manufacturing Practices, or GMPs. GMPs teach the why behind the rules. Why food can't touch the floor. Why personal items are restricted in production areas. Why cleaning tools and equipment are color-coded and why documentation is so important and matters. Sanitation associates learn how contamination happens through people, equipment, and behavior. They learn how one mistake in one area can affect product quality downstream. Once someone understands GMPs, they become valuable across the entire warehouse. Receiving, picking, packing, shipping, and quality all rely on the same principles. GMP knowledge changes how people move, touch, store, and think about product. Sanitation associates don't just follow rules, they help enforce a culture of cleanliness and accountability. And sanitation work is structured. There are daily, weekly, monthly, and quarterly cleaning schedules that must be followed. Sometimes called the Master Sanitation List. This teaches sanitation associates how to manage time independently, how to prioritize critical areas, and how to complete work without constant supervision, and then most importantly, how to properly document completed tasks. Schedules don't care if someone is motivated or not, the work still has to be done. Associates who learn to stay on schedule develop discipline quickly. When managers look for leads or trainers, they often look for people who can manage their time without reminders. Sanitation associates who consistently complete schedules are already proving they can handle responsibility. We also may be given classes, training, and certifications on handling cleaning chemicals, another area where sanitation roles quietly build professional skills. Associates are trained on proper dilution ratios, PPE requirements, SDS sheets, and safe storage practices. They learn that stronger is not better, and that improper mixing can create hazards instead of preventing them. Chemical misuse can damage floors and equipment, create slip hazards, most importantly violating safety regulations. Learning to follow chemical procedures teaches precision, patience, and respect for process. Again, traits that are essential in equipment operation, quality roles, and leadership. Those next steps we're all after. Ok, what else did I make notes on. Alright, this is where the sanitation role starts to surprise people. Warehouse sanitation often involves powered and equipment and machines, and that equipment brings even more responsibility into play. Think of Industrial floor sweepers, walk-behind or ride-on, remove debris that creates safety hazards. Sanitation associates trained on sweepers learn to perform pre-use inspections, monitor battery levels, and operate safely around pedestrians and forklifts. They learn right-of-way rules, speed control, and awareness of blind spots. Now, we need to remember that sweepers operate in active aisles. That means sanitation associates must anticipate traffic patterns, understand dock activity, and adjust their cleaning routes based on production flow. This isn't random driving, it's operational awareness and has to be treated as such. And the floor scrubbers require even more thought. These machines deep clean concrete floors and are essential in GMP environments. Associates learn how water flow, detergent concentration, and recovery systems work together. They quickly learn that too much water or chemical creates slip hazards and damages floors. Scrubbers require planning, which areas are active? Which areas can be blocked for a while? How to communicate wet floors? That kind of forward thinking kind of mirrors the decision making required of supervisors and leads. Oh, and trash compactors. Trash compactors are powerful machines with strict safety rules. Sanitation associates learn load limits, prohibited materials, cycle timing, and lockout awareness. Compactors teach one key lesson, procedures exist for a reason. There are no shortcuts, no “just this once.” They can be dangerous. This mindset, follow the process every time, is exactly what safety managers look for when selecting people for advancement. And Balers. Many facilities recycle their cardboard, shrink wrap, and slip sheets. We'll learn how to sort materials properly, safely load the baler, tie off the bales, and document counts or weights. Many facilities track recycling metrics, which introduce sanitation associates to cost control and sustainability efforts. Balers build organization skills and attention to detail, two traits essential in inventory control and leadership roles. What else did I note here, Sanitation associates work everywhere. They see inbound, outbound, production, and all of the common areas. They notice how shifts hand off work, where bottlenecks form, and where safety issues seem to repeat themselves. That exposure creates, what I like to call, big-picture thinkers. People who understand how departments interact often become strong supervisors because they already understand the operation as a whole. Remember how I'm always mentioning to understand the task before and after ours? So where can all this take us? Sanitation experience often leads to general warehouse associate roles, Forklift and equipment operator positions, quality control or safety support roles, inventory control or clerical positions, facilities or building maintenance support, and yes, front line management. Some of the most effective leaders I deal with started in sanitation, and they respect every role and understand compliance better than most. So about that, I don't want to clean mindset. Here's the truth I share often, careers aren't built by avoiding necessary work. Sanitation teaches discipline, humility, consistency, and accountability. Remember, managers notice who shows up, with a positive attitude, follows procedures, and does the work, even work that others avoid. Sanitation isn't about trash. It's about trust. Warehouse sanitation doesn't have to be a forever job, but it can be a powerful starting point. And it can be a great career. It builds safety awareness, equipment experience, operational understanding, and work ethic. Sanitation isn't a dead end. It's a foundation. And as we've learned, strong foundations support long careers. Well, I have to get back to work now myself. I hope I shed some light on why I feel sanitation is one of the strong starting points in our industry. I'd appreciate it if you'd pass the episode along to a friend, ask them to subscribe on Apple Podcast, Spotify, or any of their favorite Podcatchers, we're even on YouTube! Let's all do our part to bring more of those entering the workforce into our Industry. Until next week, please give every action and movement the respect it deserves, our family and friends need us to be safe and come back home as well and in as good of health as we left!
Julie Watts from CBS News California Investigates tells John about how the legislature pays for audits, then ignores the findingsSee omnystudio.com/listener for privacy information.
Julie Watts from CBS News California Investigates tells John about how the legislature pays for audits, then ignores the findingsSee omnystudio.com/listener for privacy information.
Auditors don’t know if millions in grants given to King County Parks were used as they were intended. Jay Inslee inadvertently admitted that Democrats think illegal aliens are voting. Boeing posted strong numbers last quarter, but still has work to do. // 5:30 - LongForm: GUEST: Walla Walla County Sheriff is sounding the alarm about the dangers of doing away with elected sheriffs. // 5:45 - Quick Hit: Chuck Schumer says Democrats will not vote for the DHS funding bill until some significant changes are made to ICE.
Why are auditors often the last to embrace innovation? In Episode 74 of Audit Bites, host Rob Berry explores the psychological and organizational roadblocks that keep auditors stuck in old ways, from risk aversion and status quo bias, to fear of being wrong and a perfectionist culture.Drawing on real-world experiences and research like prospect theory, status quo bias, and more, this episode uncovers both the challenges and actionable solutions for audit professionals.Listeners will also get a sneak peek at Audit Leverage, the new AI platform built for auditors, and practical tips to move past these barriers, whether you're a staff auditor, audit director, or CAE.If you're ready to help your audit team innovate, this is a must-listen.Love Audit Bites? Share this episode with your network, subscribe on YouTube, and visit www.thatauditguy.com for more resources, training, and audit tools.Want a demo of Audit Leverage or to book Rob Berry for training?Connect via LinkedIn or www.thatauditguy.com and take your audit department to the next level.
SummaryIn this episode, Sean Weiss and Terry Fletcher discuss the critical importance of complete and accurate medical documentation in healthcare. They explore the consequences of incomplete records, the role of electronic medical records (EMRs), and the need for accountability among healthcare providers. The conversation emphasizes that clinicians must take responsibility for their documentation to ensure compliance and support medical necessity. The episode also touches on the complexities of medical coding and the importance of clear communication in clinical records.TakeawaysIncomplete documentation can lead to compliance issues.Providers must accept accountability for their documentation.EMRs should not be blamed for incomplete records.Documentation must support medical necessity and clinical judgment.Auditors need complete records to defend against claims.Assumptions in documentation can lead to errors.Clear definitions in coding are essential for accurate billing.Providers should not rely on templates to convey critical information.Documentation standards change regularly and must be adhered to.Healthcare professionals must work together to ensure complete records.
While street protests and violence dominate headlines, an even bigger story is being buried.
While riots, protests, and chaos dominate the headlines, an even bigger story is being deliberately buried.
MEDICARE ADVANTAGE MINUTE: GOVERNMENT PLANS AGGRESSIVE MEDICARE ADVANTAGE AUDITS! NYC employee health insurance fund is mysteriously insolvent! You don't think there has been any fraudulent activity there, do you? One of my favorite client/listeners shared a list of 15 health systems that are dropping some or all Medicare Advantage plans. Tax breaks coming to Medicare premiums? Rand Paul has proposed that the USA establish HSA for all! Finally, I located a cartoon nurse spewing a big fat lie. She spews: Until 1973, all health insurance companies were non-profit. Evil Republicans changed the law!* * The word "evil" is just my little joke. Whoever wrote that lying caption needs to take a chill-pill! Contact me at: DBJ@MLMMailbag.com (Most severe critic: A+) Visit us on: BabyBoomer.ORG Inspired by: "MEDICARE FOR THE LAZY MAN 2026; SIMPLEST & EASIEST GUIDE EVER!" "MEDICARE DRUG PLANS: A SIMPLE D-I-Y GUIDE" "MEDICARE FOR THE LAZY MAN: ENROLLMENT GUIDE!" (coming soon) For sale on Amazon.com. After enjoying the books, please consider returning to leave a short customer review to help future readers. Official website: https://www.MedicareForTheLazyMan.com.
What happens when investigating fraud becomes a crime — but committing it doesn't?
It wasn't a flashy headline — but it revealed everything. When a Democrat attorney general warned journalists and citizens not to investigate Somali fraud or face arrest for a “hate crime,” the mask slipped.
Are auditors truly good listeners, or do we just wait for our turn to talk? In Episode 70 of Audit Bites, host Rob Berry dives into a tough reality facing the audit profession: many auditors aren't as skilled at listening as they think.Key topics include:The difference between hearing and active listening in auditingSix major reasons auditors fail at listeningPractical strategies to overcome these listening barriersEngaging stories from Rob's own audit careerTips for asking better questions and building trust with clientsDon't miss actionable advice to level up your audit skills and tune into what's really being said. Rob also introduces his AI platform, Audit Leverage, and his bestselling book “Ask, Get, Perform” for auditors seeking to enhance their performance.If this episode hits home, share it with your audit team, subscribe on YouTube, and check out www.thatauditguy.com for courses and newsletter updates.Interested in AI for auditing? Explore Audit Leverage at auditleverage.net.
In the high-stakes world of M&A, Goodwill is arguably the most important yet invisible asset on a modern balance sheet. It represents the "engine of ambition," but as history shows, it is also a significant source of financial volatility.In this episode of Corporate Finance Explained on FinPod, we unpack why companies pay billions in premiums, how that value is tracked, and what happens when those strategic promises vanish overnight.What is Goodwill? The Anatomy of a PremiumGoodwill is an intangible asset that appears only when one company acquires another. It is the accounting placeholder for the premium paid over the fair market value of a company's identifiable net assets.When a buyer pays an extra $500 million for a $1 billion company, they are buying "strategic future value" that doesn't fit into a physical ledger. This premium typically covers:Brand Equity: The power of established names like Disney or Coca-Cola. Human Capital: Specialized workforce talent and "acqui-hires." Synergies: The quantified promise that the combined businesses will unlock efficiencies neither could achieve alone. Network Effects: Market dominance and ecosystem integration.The Accounting Shield: PPA and ImpairmentBecause Goodwill is intangible, regulators use a rigid process called Purchase Price Allocation (PPA). Auditors first identify and value every "identifiable" asset (patents, inventory, debt). Only the leftover remainder is recorded as Goodwill.Unlike a factory or a machine, Goodwill is not amortized. It stays on the balance sheet indefinitely until a "Triggering Event" occurs, requiring an Impairment Test.Strategic Red Flags (Triggering Events):Persistent declining revenue or shrinking margins. Major leadership changes or failed integration. Market downturns or the loss of a key customer.If the fair value of the business unit drops below its carrying value, an Impairment Charge is mandatory. While this is a non-cash charge, the stock market reaction is often violent because it destroys management credibility.Case Studies: Strategic Success vs. FailureFacebook & Instagram (Success): Meta paid $1 billion for an app with negligible assets. The Goodwill was a bet on network effects, which now generates tens of billions. Amazon & Whole Foods (Success): The premium bought time, instantly giving Amazon a physical retail and logistics footprint. Kraft Heinz (Failure): A $15.4 billion write-down occurred because aggressive cost-cutting cannibalized the very brand equity they paid for. GE & Alstom (Failure): A $22 billion write-down triggered by misjudging the gas turbine market.The Critical Ratio: Goodwill to EquitySmart investors look past the absolute dollar amount and focus on the Goodwill-to-Equity ratio. A high ratio is a strategic warning sign; it tells you the company is heavily reliant on future promises rather than proven stability.Key Takeaway: An impairment is a lagging indicator. By the time the write-down happens, the business has been suffering for a long time. The charge is simply the officially mandated confirmation of strategic failure.
The Defense Department failed to pass its annual audit once again. Auditors found 26 material weaknesses and “two significant deficiencies related to the DoD's internal controls over financial reporting.” The review covered the department's $4.7 trillion in assets and another $4.7 trillion in liabilities. The Pentagon has failed every audit since launching its first agency-wide review in 2018. Congress has set a goal for the DoD to achieve a clean audit by fiscal 2028. See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
The Pentagon inspector general found the Defense Health Agency failed to issue finalized guidance defining roles, responsibilities and access-to-care standards after reorganizing the military health system. The average wait for urgent medical appointments at military medical treatment facilities outside the United States stretched as long as 21 days in some locations, while routine appointments were delayed by as much as 37 days. Auditors also said many overseas facilities were understaffed, and personnel working in military clinics and hospitals experienced burnout and low morale. The inspector general recommended that the DHA director track data on why personnel are leaving military medical facilities.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
Join the conversation with C4 & Bryan Nehman. Bruce Elliott sat in for C4 on this morning. Bruce & Bryan started the show off by recapping the tough loss against then Bengals at the bank on Thanksgiving night. The latest National Guard shooting update, we have learned that Sarah Beckstrom has passed away. Should all migrations from 3rd world countries be banned. First Amendment auditors in Harford County. Trump talks land strikes on Venezuela. Vinny Schiraldi has been hired by Mamdani. Listen to C4 & Bryan Nehman live weekdays from 5:30 to 10am on WBAL News Radio 1090, FM 101.5 & the WBAL Radio App!
Shagen Ganason, author of The Storyteller's Ledger, is the Chief Audit Executive at Liva Group SAOG, and shares how to use storytelling to give memorable and enlightening context to your data and how you deliver it in your reports to create powerful meaning for your audiences that moves them to action, turning the typical adversarial role of an auditor into one of an advocate to help people excel and businesses grow. Craft your brilliant brand story strategy in minutes, not months, and instantly create compelling content that converts customers with the StoryCycle Genie™ #StoryOn! ≈Park
This week on The Audit Podcast, our guest is Jamie Meziere, Chief Audit Executive at FedEx. Jamie shares what FedEx's analytics and AI program looks like today and the one thing she wishes every auditor would start doing now. She also talks about the early career goal she set to become a CAE—and how she created a plan, executed on it, and ultimately stepped into the Chief Audit Executive role at one of the largest organizations in the world. We also get into what happens after you reach that milestone: what her first year as CAE has looked like, how she approached her first performance evaluation, and the criteria she believes matter most when evaluating CAEs. Be sure to connect with Jamie on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 3:15 - Jamie's LLM History 6:10 — Leveraging AI for Vision and Strategic Planning 8:54 — Jamie's Top Advice for Auditors 11:20 — Early Career Goals and Jamie's Path to Becoming a CAE 16:02 — Goal-Setting and the Importance of Mentorship 22:40 — Guidance for CAE Evaluations 24:30 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
This week on The Audit Podcast, our guest is Clarissa Lucas, author of Beyond Agile Auditing. Back by popular demand, Clarissa discusses whether auditing with agility is more of a mindset or a methodology—and why focusing on the why matters more than the how. She shares practical ways teams can move from a "practice-first" approach to an agile mindset and highlights key agile practices supported by recent research she's translated for the audit community. Be sure to connect with Clarissa on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 2:15 – Clarissa's Favorite AI Prompt 10:46 – Auditing With Agility 14:18 – Shifting the Mindset Around Agile Methodology 17:04 – Anchoring to the "Why" 19:02 – Why a "Practices-First" Approach Doesn't Work 21:50 – How to Effectively Measure the "Why" 27:43 – The Importance of Feedback Loops 31:17 – Breaking Work into Smaller, Manageable Batches 32:09 – Helpful Resources for Auditors 36:10 – Use Case Corner: Managing Too Many Stand-Ups 41:10 – Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
This week on The Audit Podcast, our guest is Ed Zimmer, Founder of ControlSense and Principal at Advanced Risk and Controls Analytics, LLC. In this episode, Ed shares what inspired him to launch ControlSense after decades of experience in audit innovation. He talks about the challenges he saw auditors facing, how ControlSense helps solve inconsistencies in the audit process, and why he believes privacy and security must stay at the center of any AI discussion. Ed also walks through a short demo of ControlSense, showing how the platform brings consistency and efficiency to internal audit workflows. For those listening on audio, the demo portion is available on YouTube here. Be sure to connect with Ed on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 1:57 - Ed's Go-To AI Prompts 5:16 - What lead Ed to lunch ControlSense 6:55 - Solving Audit Inconsistencies with ControlSense 8:51 – Aligning with Each Company's Audit Methodology 14:22 – What Sets ControlSense Apart from Other AI Tools 22:24 – ControlSense in Action: Demo 31:15 – Why Users Feel Safe Inputting Data into ControlSense 32:45 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.