Cybersecurity and Technology Risk

Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution Internal audit Internal audit firm Internal Audit Services Internal Controls PCI DSS Penetration Testing

Why Scans Are Not Penetration Tests: Translating Cybersecurity Severity into Business Risk

July 23, 2026by Dr Dawkins Brown

Executive Summary Somewhere in the Caribbean this week, an executive will approve a payment for a “penetration test,” receive a hundred-page PDF full of colour-coded severity scores, file it with satisfaction — and remain exactly as exposed as before. What was purchased was almost certainly a vulnerability scan: a legitimate, useful, automated exercise that is...

Cyber Awareness & Training Cyber Risk Assurance Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services

The IIA Cybersecurity Topical Requirement: What Caribbean Internal Audit Functions Must Do Now

July 23, 2026by Dr Dawkins Brown

Executive Summary For the first time in the history of the profession, internal auditors worldwide are subject to a mandatory, subject-specific standard for how cybersecurity must be assessed. The Institute of Internal Auditors issued the Cybersecurity Topical Requirement in February 2025 as the first Topical Requirement under the Global Internal Audit Standards, and it...

Cyber Awareness & Training Cyber Risk Assurance Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution

Internal Audit Meets Cybersecurity: A New Assurance Model for Caribbean Organisations

July 22, 2026by Dr Dawkins Brown

Executive Summary The previous article in this series ended with a rule every well-governed board eventually adopts: for each material cyber assertion, the board must be able to answer “how do we know that is true?” Much of the answer flows through one function — internal audit. Yet in most Caribbean organisations, internal audit and...

Cyber Awareness & Training Cyber Risk Assurance Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution Dawgen Global audit methodology Dawgen Global boardroom readiness advisory

The Cyber-Accountable Board: What Directors Must Know, Ask and Verify

July 22, 2026by Dr Dawkins Brown

Executive Summary The first two articles in this series established two propositions: cyber risk is an enterprise risk that belongs on the board agenda, and boards can only govern it with independent evidence — cyber assurance — rather than management’s unverified word. This third article addresses the people on whom both propositions land: the directors...

Cyber Awareness & Training Cyber Risk Assurance Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution

From Cybersecurity to Cyber Assurance: The Missing Link in Caribbean Risk Management

July 21, 2026by Dr Dawkins Brown

Executive Summary Ask the leadership of almost any Caribbean organisation whether it takes cybersecurity seriously and the answer will be yes — supported by a list of investments: firewalls, endpoint protection, an IT provider, security policies, perhaps a certification. Then ask a different question: how do you know any of it works? The room usually...

Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution

Cybersecurity Is No Longer an IT Issue: Why Caribbean Boards Must Treat It as an Enterprise Risk

July 21, 2026by Dr Dawkins Brown

Executive Summary For most of the past two decades, cybersecurity in the Caribbean has lived in the IT department: a budget line for firewalls and antivirus software, a technical specialist’s responsibility, a subject the board touched once a year, if at all. That arrangement no longer matches reality. Cyber risk has become one of the...

Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution Internal audit Internal audit firm Internal Audit Services Internal Controls

Does Your SME Need an Internal Audit Function? The Case for Co-Sourcing in the Caribbean

July 20, 2026by Dr Dawkins Brown

Every week, somewhere in the region, a version of the same conversation happens. A business has grown — from a founder and a bookkeeper to a hundred staff, three locations, a bank facility, and perhaps a minority investor — and someone, often the banker or the external auditor, mentions internal audit. The owner’s response is...

Audit and Assurance audit and assurance firm in jamaica Audit and Assurance Services Audit Committee Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Integrated Assurance Internal audit Internal audit firm Internal Audit Services Internal Controls

Continuous Auditing and Data Analytics: Moving Beyond the Annual Audit Plan

July 20, 2026by Dr Dawkins Brown

The annual audit plan rests on a quiet assumption that no one states aloud: that risk moves at the speed of a planning cycle. Book the inventory audit for March, the payroll review for August, the revenue work for November — and trust that the risks will be waiting patiently when the team arrives....

Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution Internal audit Internal audit firm Internal Audit Services Internal Controls

Auditing the Algorithms: GenAI Governance, ISO/IEC 42001, and the New Audit Universe

July 19, 2026by Dr Dawkins Brown

Somewhere in your organization, an algorithm is making a decision that used to belong to a person. It may be scoring a loan application, flagging a transaction, screening a job candidate, drafting a customer response, or summarizing a contract for an executive who will act on the summary. Caribbean organizations crossed a threshold over the...

Audit Readiness Audit Technology Audit Transformation auditing firm Cyber Awareness & Training Cyber Risk Assurance Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity and Technology Risk Cybersecurity Assurance Internal audit Internal audit firm Internal Audit Services Internal Controls

Cybersecurity as an Audit Mandate: The Topical Requirement Caribbean Firms Can’t Ignore

July 19, 2026by Dr Dawkins Brown

For years, cybersecurity occupied a strange place on Caribbean audit plans: acknowledged as important, deferred as specialist, and scoped down to whatever the function felt qualified to look at — usually access forms and password policies. The Global Internal Audit Standards have ended that accommodation. Cybersecurity is the subject of the first Topical Requirement —...

The IIA Cybersecurity Topical Requirement: What Caribbean Internal Audit Functions Must Do Now

Internal Audit Meets Cybersecurity: A New Assurance Model for Caribbean Organisations

The Cyber-Accountable Board: What Directors Must Know, Ask and Verify

From Cybersecurity to Cyber Assurance: The Missing Link in Caribbean Risk Management

Cybersecurity Is No Longer an IT Issue: Why Caribbean Boards Must Treat It as an Enterprise Risk

Does Your SME Need an Internal Audit Function? The Case for Co-Sourcing in the Caribbean

Continuous Auditing and Data Analytics: Moving Beyond the Annual Audit Plan

Auditing the Algorithms: GenAI Governance, ISO/IEC 42001, and the New Audit Universe

Cybersecurity as an Audit Mandate: The Topical Requirement Caribbean Firms Can’t Ignore

August 26, 2026Your books are ready in March. Your decisions were needed in January

August 26, 2026The Borderless Finance Function™: Digital Accounting for Caribbean Businesses

August 26, 2026What It Would Take

August 26, 2026The Apex: What the Top Career Post Pays, and Why It Is the Hardest Figure to Compare

August 26, 2026Who the Public Service Employs: What an Establishment Schedule Reveals About How a State Is Staffed

Where to find us?

Dawgen Social links

Where to find us?

Dawgen Social links