LLMs and Generative AI in the enterprise.
Inspire, develop, and guide a winning organization.
Understand the unique values and behaviors of a successful organization.
Create visible workflows to achieve well-architected software.
Understand and use meaningful data to measure success.
Integrate and automate quality, security, and compliance into daily work.
An on-demand learning experience from the people who brought you The Phoenix Project, Team Topologies, Accelerate, and more.
Learn how to enhance collaboration and performance in large-scale organizations through Flow Engineering
Learn how making work visible, value stream management, and flow metrics can affect change in your organization.
Clarify team interactions for fast flow using simple sense-making approaches and tools.
Multiple award-winning CTO, researcher, and bestselling author Gene Kim hosts enterprise technology and business leaders.
In the first part of this two-part episode of The Idealcast, Gene Kim speaks with Dr. Ron Westrum, Emeritus Professor of Sociology at Eastern Michigan University.
In the first episode of Season 2 of The Idealcast, Gene Kim speaks with Admiral John Richardson, who served as Chief of Naval Operations for four years.
Exploring the impact of GenAI in our organizations & creating business impact through technology leadership.
DevOps best practices, case studies, organizational change, ways of working, and the latest thinking affecting business and technology leadership.
Just as physical jerk throws our bodies off balance, technological jerk throws our mental models and established workflows into disarray when software changes too abruptly or without proper preparation.
Sure, vibe coding makes you code faster—that’s the obvious selling point. But if you think speed is the whole story, you’re missing out on the juicy stuff.
The values and philosophies that frame the processes, procedures, and practices of DevOps.
This post presents the four key metrics to measure software delivery performance.
February 14, 2023
A book on internal auditing doesn’t sound like a typical title for a publisher known for books about DevOps, software development, and business leadership. But we’re pretty sure Beyond Agile Auditing by Clarissa Lucas is going to be a book you didn’t even know you needed.
See, it’s almost a universal fact that if you work in an enterprise, at some point your team will be the subject of an internal audit. The likelihood is even higher if you work with systems that deal with security, finance, personal data, etc. And it’s also a nearly universal fact that these audits are never what we’d call…uh…pleasant.
See if this scenario sounds familiar:
It’s a typical Monday, until your first afternoon meeting gets underway. In this meeting, you learn the internal auditors will be starting an audit of your process/product in the next few weeks. You immediately break out in a cold sweat, panic and anxiety washing over you as your mind races. You wonder what questions the auditors will ask, what evidence they’ll request, and what they’ll report to their leaders. You think, “The enforcers are here with their outdated checklists, looking for problems to shine a light on, wanting to make me look bad!” The problem is, auditors don’t understand your processes or what’s really important to you and your team. How are you supposed to get your actual work done when the auditors are setting up a million meetings, endlessly asking irrelevant questions, and requesting documentation that doesn’t even reflect the current process? An audit adds work to your plate without bringing much value. And then, at the end of it all, they’ll hand you a report that doesn’t help you or your team deliver value any faster or better. The auditors use the same approach they’ve been using to audit for years. Everyone else in the organization is changing to stay ahead of the change curve, but it seems like the auditors aren’t even trying to keep up.
It’s a typical Monday, until your first afternoon meeting gets underway. In this meeting, you learn the internal auditors will be starting an audit of your process/product in the next few weeks. You immediately break out in a cold sweat, panic and anxiety washing over you as your mind races. You wonder what questions the auditors will ask, what evidence they’ll request, and what they’ll report to their leaders.
You think, “The enforcers are here with their outdated checklists, looking for problems to shine a light on, wanting to make me look bad!”
The problem is, auditors don’t understand your processes or what’s really important to you and your team. How are you supposed to get your actual work done when the auditors are setting up a million meetings, endlessly asking irrelevant questions, and requesting documentation that doesn’t even reflect the current process?
An audit adds work to your plate without bringing much value. And then, at the end of it all, they’ll hand you a report that doesn’t help you or your team deliver value any faster or better.
The auditors use the same approach they’ve been using to audit for years. Everyone else in the organization is changing to stay ahead of the change curve, but it seems like the auditors aren’t even trying to keep up.
Yeah, we know you’ve been there. But the truth is, internal audit gets kind of a bad rap. You see, they’re actually on the same team as you. They’re looking to help deliver business value to their organization just like you. They want to help you lower risk. They want to be your partners in leading your company to success.
Clarissa Lucas, an experienced audit and risk management leader in the financial services industry, is here to help us bridge the divide between nonauditors and auditors. In Beyond Agile Auditing: Three Practices to Revolutionize Your Internal Auditing Practices, she lays out a new way for audit to work, one that is more aligned with the unique, agile, emerging nature of risks and the work of software development. She calls it Auditing with Agility and it lays out a path to a more value-driven, integrated, adaptable audit experience that just might make you love your next internal audit.
In software development, we’ve been here once before. As Clarissa illustrates, “For years, software developers and operations teams were at odds. They were not incentivized to work together. There was a proverbial wall built up between the two organizations, as has famously been illustrated.” But we broke that wall down. We forged a path to a happier future.
Now it’s time to do the same with audit. This book will help you and your internal audit counterparts go from adversaries to partners. Don’t believe us? Check out her 2022 DevOps Enterprise Summit presentation, where she and her business counterpart detail the success they had with Auditing with Agility. Or stay tuned as we post excerpts from the book over the next several weeks. By the time the book comes out on May 30th, we’re pretty sure you’ll be ready to revolutionize your audit experience.
Managing Editor at IT Revolution working on publishing books and guidance papers for the modern business leader. I also oversee the production of the IT Revolution blog, combining the best of responsible, human-centered content with the assistance of AI tools.
No comments found
Your email address will not be published.
First Name Last Name
Δ
Every organization fears becoming the next Blockbuster—a once-dominant company that failed to adapt to…
The following is an excerpt from the forthcoming book Vibe Coding: Building Production-Grade Software With…
Today marks a pivotal moment for IT professionals and Phoenix Project fans everywhere. The…
Your engineering team is crushing it. You're deploying code multiple times per day, your…