Internal Audit Services

Cyber Awareness & Training Cyber Risk Assurance Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution Internal audit Internal audit firm Internal Audit Services Internal Controls

The Report Is Not the Finish Line: Turning Cyber Findings into Verified Closure

July 27, 2026by Dr Dawkins Brown

Executive Summary Across nine articles, this series has argued for independent evidence: assessments that examine, tests that prove, boards that verify. This tenth article confronts the uncomfortable place where most of that good work goes to die — the findings tracker. Every organisation that has ever commissioned an assessment owns one: a spreadsheet or register...

The Sector Where Trust Is the Product: Cyber Assurance for Caribbean Financial Institutions

July 27, 2026by Dr Dawkins Brown

Executive Summary Every industry has cyber risk. Financial services has something more: an industry whose entire product is trust. A distributor that loses a week of operations loses a week of revenue; a bank, credit union or insurer that loses its members’ confidence can lose the institution — because in finance, the crisis of systems...

Cyber Awareness & Training Cyber Risk Assurance Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Information Technology firm Information Technology Services Infrastructure & Development Integrated Assurance Internal audit Internal audit firm Internal Audit Services PCI DSS Penetration Testing Technical Security Testing

Could Your Organisation Survive a Ransomware Attack? The Caribbean Resilience Reality Check

July 23, 2026by Dr Dawkins Brown

Executive Summary Ask any Caribbean board what cyber scenario it fears most and the answer arrives without hesitation: ransomware. The fear is rational. A successful ransomware event is not an IT incident; it is a full business interruption with a criminal counterparty attached — systems encrypted, operations halted, data stolen for a second round...

Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution Internal audit Internal audit firm Internal Audit Services Internal Controls PCI DSS Penetration Testing

Why Scans Are Not Penetration Tests: Translating Cybersecurity Severity into Business Risk

July 23, 2026by Dr Dawkins Brown

Executive Summary Somewhere in the Caribbean this week, an executive will approve a payment for a “penetration test,” receive a hundred-page PDF full of colour-coded severity scores, file it with satisfaction — and remain exactly as exposed as before. What was purchased was almost certainly a vulnerability scan: a legitimate, useful, automated exercise that is...

Audit and Assurance audit and assurance firm in jamaica Audit and Assurance Services Audit Committee Audit Committee & Board Oversight Audit Committee & Board Reporting Internal audit Internal audit firm Internal Audit Services Internal Controls Risk Advisory firm in Jamaica Risk Advisory firm in the caribbean Risk Advisory Services Risk and Compliance Risk Assurance & Advisory

Internal Audit in Public Bodies: Accountability, Compliance, and the Public Purse

July 20, 2026by Dr Dawkins Brown

There is a paradox at the centre of Caribbean public-sector governance. No class of organization carries more explicit, legislated internal audit obligations than the region’s public bodies — the statutory agencies, government companies, and authorities through which a substantial share of national economic life flows. Accountability frameworks across the region presuppose audit committees, functioning internal...

Does Your SME Need an Internal Audit Function? The Case for Co-Sourcing in the Caribbean

July 20, 2026by Dr Dawkins Brown

Every week, somewhere in the region, a version of the same conversation happens. A business has grown — from a founder and a bookkeeper to a hundred staff, three locations, a bank facility, and perhaps a minority investor — and someone, often the banker or the external auditor, mentions internal audit. The owner’s response is...

Audit and Assurance audit and assurance firm in jamaica Audit and Assurance Services Audit Committee Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Integrated Assurance Internal audit Internal audit firm Internal Audit Services Internal Controls

Continuous Auditing and Data Analytics: Moving Beyond the Annual Audit Plan

July 20, 2026by Dr Dawkins Brown

The annual audit plan rests on a quiet assumption that no one states aloud: that risk moves at the speed of a planning cycle. Book the inventory audit for March, the payroll review for August, the revenue work for November — and trust that the risks will be waiting patiently when the team arrives....

Cybersecurity & Privacy Cybersecurity & Technology Cybersecurity and Technology Risk Cybersecurity Assurance Cybersecurity for SMEs Cybersecurity Insights Cybersecurity Services Cybersecurity Solution Internal audit Internal audit firm Internal Audit Services Internal Controls

Auditing the Algorithms: GenAI Governance, ISO/IEC 42001, and the New Audit Universe

July 19, 2026by Dr Dawkins Brown

Somewhere in your organization, an algorithm is making a decision that used to belong to a person. It may be scoring a loan application, flagging a transaction, screening a job candidate, drafting a customer response, or summarizing a contract for an executive who will act on the summary. Caribbean organizations crossed a threshold over the...

Audit Readiness Audit Technology Audit Transformation auditing firm Cyber Awareness & Training Cyber Risk Assurance Cybersecurity & Data Risk Cybersecurity & Privacy Cybersecurity and Technology Risk Cybersecurity Assurance Internal audit Internal audit firm Internal Audit Services Internal Controls

Cybersecurity as an Audit Mandate: The Topical Requirement Caribbean Firms Can’t Ignore

July 19, 2026by Dr Dawkins Brown

For years, cybersecurity occupied a strange place on Caribbean audit plans: acknowledged as important, deferred as specialist, and scoped down to whatever the function felt qualified to look at — usually access forms and password policies. The Global Internal Audit Standards have ended that accommodation. Cybersecurity is the subject of the first Topical Requirement —...

DAGAF™DASSURE Engagement Quality DASSURE Framework Data Analytics Data Analytics & Audit Technology Integrated Assurance Internal audit Internal audit firm Internal Audit Services Internal Controls Risk Assurance & Advisory Risk Management Risk Management & Governance Risk Management & Resilience risk management in Caribbean restructuring

The Three Lines in Practice: Making Risk, Compliance, and Internal Audit Work Together

July 19, 2026by Dr Dawkins Brown

Article 6 closed with a one-page exercise: the assurance map, showing which of an organization’s principal risks carry continuous assurance, periodic assurance, or none at all. Boards that complete it honestly usually discover the same two things. First, some risks are assured twice — tested by internal audit, reviewed by compliance, monitored by risk...

Older Posts

The Report Is Not the Finish Line: Turning Cyber Findings into Verified Closure

The Sector Where Trust Is the Product: Cyber Assurance for Caribbean Financial Institutions

Internal Audit in Public Bodies: Accountability, Compliance, and the Public Purse

Does Your SME Need an Internal Audit Function? The Case for Co-Sourcing in the Caribbean

Continuous Auditing and Data Analytics: Moving Beyond the Annual Audit Plan

Auditing the Algorithms: GenAI Governance, ISO/IEC 42001, and the New Audit Universe

Cybersecurity as an Audit Mandate: The Topical Requirement Caribbean Firms Can’t Ignore

The Three Lines in Practice: Making Risk, Compliance, and Internal Audit Work Together

August 16, 2026From AI Experimentation to Enterprise Governance

August 14, 2026REALISATION : A Business You Cannot Explain in Five Days Is a Business Somebody Else Will Price

August 13, 2026RESILIENCE : A Backup You Have Never Restored Is Not a Backup

August 10, 2026CAPITAL: Asset Rich and Cash Poor Is a Choice, Not a Condition

August 10, 2026GOVERNANCE :The Board That Meets Once a Year Is Not a Board

Where to find us?

Dawgen Social links

Where to find us?

Dawgen Social links