Most of the advice and knowledge people present about #internalaudit is very theoretical. If you are like most auditors you are still asking “But how do I implement at my organization.”
In this #jammingwithjason #internalaudit podcast I talk with Toby DeRoch of InsightCPE on how we can become much more practical and just do things instead of talking about it. Two areas we dig into deeper are how to practically apply an Agile Auditing approach, and how to deal with a virtual audit environment, including how to develop relationships remotely.
Join Toby and Jason for the next cRisk Academy webinar “Why Do Auditors Ignore Fraud?” on Tuesday, October 20, 2020 ยท 9:00 AM PDT. Register at: https://www.bigmarker.com/crisk-academy/Why-Do-Auditors-Ignore-Fraud
Check out Toby’s list of upcoming webinars at: https://www.insightcpe.com/webinars
and his full list of courses available through the cRisk Academy on-demand learning platform at: https://www.insightcpe.com/on-demand
Transcript
1
00:00:01.860 –> 00:00:08.340
Jason Mefford: Hey everybody, I have a special, special, special, special treat today and I had to throw in for
2
00:00:09.809 –> 00:00:21.330
Jason Mefford: But I have my friend Toby de Roche with me and Toby heads up inside CP. And we’re just going to get in and start talking about some stuff that I know a lot of you.
3
00:00:22.110 –> 00:00:30.630
Jason Mefford: As we were talking beforehand, Toby and I get asked a lot of the same questions. So we’re going to try to answer some of those so Toby. Welcome, welcome aboard.
4
00:00:31.740 –> 00:00:37.080
Jason Mefford: You know, maybe, maybe spend just a minute or so and give a little background on yourself so people get to know you a little bit better, too.
5
00:00:37.650 –> 00:00:43.560
Toby DeRoche: Sure, yeah. So my background is all internal audit. I was an internal audit with Macy’s, that the corporate headquarters
6
00:00:43.800 –> 00:00:51.780
Toby DeRoche: As an audit manager for about four or five years before I went into consulting and I went into consulting with teammate through Wolters Kluwer
7
00:00:52.410 –> 00:01:02.760
Toby DeRoche: And was there for just over 10 years and recently went off on my own, so that way I can do things that are more applicable just to the industry in general, really wanted to focus on education.
8
00:01:03.300 –> 00:01:08.640
Toby DeRoche: And, you know, working with the entire audit profession, not just with people who are looking at software.
9
00:01:09.210 –> 00:01:15.750
Toby DeRoche: Because that’s kind of a nice piece of it, the whole thing, but I really wanted to be able to influence where all of my peers are going
10
00:01:16.290 –> 00:01:24.240
Toby DeRoche: Mostly because I keep hearing a lot of this, like you said, the same questions over and over again. And really just want to help them address all those same questions.
11
00:01:24.630 –> 00:01:33.570
Jason Mefford: Yeah, well. And so again, you know, what are some of the questions you’re hearing and then let’s just kind of dive in and actually give people some practical things that they can take away
12
00:01:33.960 –> 00:01:39.930
Toby DeRoche: Yeah, that’s really it. The questions that I’m hearing, no matter what the topic is is that’s great, but how do I do it.
13
00:01:40.980 –> 00:01:42.090
Toby DeRoche: You know, we talked about
14
00:01:42.390 –> 00:01:49.770
Toby DeRoche: How we need to make a transition to being an agile, a lot of department, how we need to start working with other lines of defense how we’re going to
15
00:01:50.550 –> 00:02:03.450
Toby DeRoche: You know, work within this new reality of. Not everybody can go in the office. I can’t travel. What am I going to do, how am I going to account inventory. If I can’t travel. We keep hearing the same questions over and over again and
16
00:02:03.510 –> 00:02:06.270
Toby DeRoche: When you look for guidance you usually get something very theoretical
17
00:02:07.410 –> 00:02:14.250
Toby DeRoche: If you pick up a book on agile auditing, it’s going to give you the history of agile processes.
18
00:02:14.550 –> 00:02:15.720
Toby DeRoche: Taking the software.
19
00:02:16.680 –> 00:02:23.850
Toby DeRoche: And it just shows a bunch of stuff on you that you’re not going to use and we need to be a lot more practical about the
20
00:02:24.360 –> 00:02:34.860
Toby DeRoche: Way that we’re going to use these things, you know, like for something like agile, we can follow a great method that’s going to get you there without having to take all these crazy paths down reporting, you’re probably not going to use
21
00:02:35.820 –> 00:02:40.680
Jason Mefford: Well, and I think that’s, that’s an important thing. I mean, I’ve talked a lot about kind of the whole learning process.
22
00:02:41.280 –> 00:02:47.130
Jason Mefford: And I think this is where because you and I are on the same page exactly on this of trying to help people.
23
00:02:47.730 –> 00:02:58.860
Jason Mefford: Get something that’s much more practical. Right. But we’ve been trained in training that we we acquire knowledge and skills. Yep, we do and we get that through training.
24
00:02:59.280 –> 00:03:10.290
Jason Mefford: But that’s just the first two of the four steps in the learning process. You have to figure out how to apply those knowledge and skills and then actually experience it for you to really learn it.
25
00:03:10.680 –> 00:03:20.340
Jason Mefford: And like you said, I think that’s where you know most people help provide knowledge, like you said, they’ll give you the theoretical knowledge, they’ll explain the history of agile.
26
00:03:20.760 –> 00:03:28.110
Jason Mefford: Big Whoop dee doo shit. Right. I mean, at the end of the day, you’re like, but how do I apply it to me. And there’s not really very many people
27
00:03:28.590 –> 00:03:35.460
Jason Mefford: That are actually helping people learn how to apply it right into what they’re doing.
28
00:03:35.940 –> 00:03:48.840
Jason Mefford: Right, because again it’s like you learn about agile. Okay, great. Well, what does that mean, well, I’m probably going to do things a little bit faster, right, always. I always hear people say that, well, I gotta do things faster, right. No, that’s not what I
29
00:03:50.130 –> 00:03:50.370
Jason Mefford: Mean
30
00:03:51.390 –> 00:03:51.900
Jason Mefford: No.
31
00:03:51.990 –> 00:03:53.160
Jason Mefford: No, that’s not what it is.
32
00:03:54.420 –> 00:04:00.630
Jason Mefford: So, so how do we how do we, I mean I you know I know you kind of left and started on your own to try to help people with that, how
33
00:04:01.500 –> 00:04:12.930
Jason Mefford: You know, maybe let’s let’s let’s talk about a couple of these things that people are are struggling with and come up with some practical solutions that people can walk away with
34
00:04:13.200 –> 00:04:13.500
Yeah.
35
00:04:14.760 –> 00:04:19.020
Toby DeRoche: The agile conversation is probably one of the ones that’s top of mind for most people.
36
00:04:19.260 –> 00:04:19.950
Toby DeRoche: You know, because
37
00:04:21.390 –> 00:04:24.870
Toby DeRoche: For every single person out there when we got to January through the audit plan away.
38
00:04:25.170 –> 00:04:27.030
Jason Mefford: And tried to figure out where to go. Yeah.
39
00:04:27.240 –> 00:04:31.620
Jason Mefford: So if it wasn’t January, at least by March you three was partially you did. Right.
40
00:04:31.620 –> 00:04:33.990
Toby DeRoche: Yeah, it was. And if you haven’t, please do it now.
41
00:04:34.080 –> 00:04:34.410
Jason Mefford: You know,
42
00:04:35.910 –> 00:04:41.040
Toby DeRoche: So it’s, um, it’s something that a lot of people were thinking about if I have to figure out how I can
43
00:04:41.850 –> 00:04:51.000
Toby DeRoche: Adjust my audit plan really quickly and focus on something that I had no idea what’s coming. Suddenly, I have to shift around and start thinking about logistics.
44
00:04:51.600 –> 00:05:00.600
Toby DeRoche: And I have to start thinking about just my business continuity plan include work from home. And then how do I come back. How do I get people back into the office. Do I get people back into the office.
45
00:05:01.230 –> 00:05:12.420
Toby DeRoche: Do we scrap everything and just go completely remote all the time and and audit has a conversation here like we’re part of this. We’re not just one of the, you know, corporate victims of whatever’s going to happen.
46
00:05:13.290 –> 00:05:18.300
Toby DeRoche: So we have to have a say in everything. And that’s going to get reflected in our audit plan.
47
00:05:18.750 –> 00:05:28.830
Toby DeRoche: So if we’re doing something like an agile plan. The whole idea would be, I’m only looking at the risks that are relevant. Right now, the ones that are the biggest, most important to leadership in the organization.
48
00:05:29.310 –> 00:05:34.740
Toby DeRoche: And all the stakeholders and so if I’m taking an actual strategic risk based approach.
49
00:05:35.970 –> 00:05:39.690
Toby DeRoche: I’m not looking at every single process in the entire organization.
50
00:05:40.890 –> 00:05:47.850
Toby DeRoche: I’m looking at the strategic risks and working my way down and then I’m going to carve out. Here’s what I actually can get done in the next three months.
51
00:05:49.080 –> 00:05:56.160
Toby DeRoche: And if I’m looking past three or six months. I’m looking too far because we just proved that within two or three months, the world can change.
52
00:05:57.330 –> 00:05:59.370
Toby DeRoche: So there’s really no point in going any further than that.
53
00:06:00.510 –> 00:06:03.990
Toby DeRoche: And then one of the things that I think is a really practical.
54
00:06:03.990 –> 00:06:05.340
Toby DeRoche: Approach to all of this is
55
00:06:06.090 –> 00:06:11.880
Toby DeRoche: You don’t start thinking about just, okay, how do I get stuff done faster. It’s how do I break it down into its component pieces.
56
00:06:12.900 –> 00:06:22.380
Toby DeRoche: And then make sure that each of those pieces are happening in a very timely fashion like within whatever parameters, I have to work with. Right. So if I’ve got six weeks to get an audit done
57
00:06:23.220 –> 00:06:35.190
Toby DeRoche: I can’t afford scope creep anymore. I can’t afford to these things to drag on forever. And I can’t wait until the very end to start reviewing and then take it right back to the beginning to deal with the issue. I found at the beginning of the audit, so we’re
58
00:06:35.310 –> 00:06:36.900
Toby DeRoche: Breaking the audit down to pieces.
59
00:06:37.320 –> 00:06:39.390
Toby DeRoche: And then getting through each of those pieces as a team.
60
00:06:40.410 –> 00:06:44.700
Toby DeRoche: And it’s a shift in the way that we typically think about how we would assign workout, right, because
61
00:06:45.300 –> 00:06:47.010
Toby DeRoche: Now it’s, I’m going to go look at
62
00:06:47.250 –> 00:06:49.860
Toby DeRoche: Xyz process break that down into a couple of sub
63
00:06:49.860 –> 00:06:51.420
Toby DeRoche: Processes and, you know,
64
00:06:51.870 –> 00:06:54.900
Toby DeRoche: You go take one I’m going to send somebody else on the next and then
65
00:06:56.040 –> 00:06:58.320
Toby DeRoche: I talked to you in two months, you know,
66
00:06:58.830 –> 00:07:00.630
Jason Mefford: That that’s not an agile approach.
67
00:07:00.690 –> 00:07:01.200
Toby DeRoche: Know,
68
00:07:01.260 –> 00:07:08.220
Toby DeRoche: And so now what we do is we say, so I’m breaking it down by risks. Now there’s three of us on this team, we’re all going to jump on risk number one.
69
00:07:08.880 –> 00:07:12.600
Toby DeRoche: And we’re gonna knock it out when that one’s done, remove the risk to we knock it out.
70
00:07:13.290 –> 00:07:24.450
Toby DeRoche: And we keep ourselves accountable that way because you might be doing the work. I might be helping you with some of the different procedures and testing things and then someone else is coming behind and doing the review right right on our heels.
71
00:07:24.630 –> 00:07:25.980
Toby DeRoche: To make sure everything is good.
72
00:07:25.980 –> 00:07:28.170
Toby DeRoche: Because let’s say I’ve got six
73
00:07:28.170 –> 00:07:31.320
Toby DeRoche: Weeks. By the end of week one or two I need to report out the door.
74
00:07:32.910 –> 00:07:37.290
Toby DeRoche: And the point of agile was supposed to be, you know, we go back to the history of agile.
75
00:07:38.730 –> 00:07:41.550
Toby DeRoche: It was supposed to be that you had to deliverable software at the end of a cycle.
76
00:07:42.990 –> 00:07:43.950
Toby DeRoche: And so now we’re
77
00:07:43.980 –> 00:07:46.380
Toby DeRoche: Basically saying my deliverable product is report.
78
00:07:48.030 –> 00:07:54.330
Toby DeRoche: And that report is done at the end of each cycle. So at the end of each week, I need to have a report out the door when I get done with that audit.
79
00:07:54.450 –> 00:07:54.960
Toby DeRoche: I’m done.
80
00:07:56.130 –> 00:07:58.170
Toby DeRoche: Because management seen the report since day one.
81
00:07:59.280 –> 00:08:00.090
Toby DeRoche: You know, I have nothing.
82
00:08:00.120 –> 00:08:03.210
Toby DeRoche: There’s nothing left for people to review. There’s nothing left for us to deal with.
83
00:08:03.930 –> 00:08:09.450
Toby DeRoche: And then that rolls up because that was the audit and then that rolls up to the quarter which rolls up to the plan.
84
00:08:10.140 –> 00:08:23.520
Toby DeRoche: And it’s keeping everything moving in this way where I’m looking at things on a three month horizon and I’m turning out work in a way that I know it staying on track and I’ve got my deliverable of the report coming out at the end of every week.
85
00:08:25.980 –> 00:08:27.420
Jason Mefford: Excuse me. Well, and I think that’s
86
00:08:28.530 –> 00:08:34.050
Jason Mefford: To me that’s what he here’s a, here’s a practical thing for you folks right is that
87
00:08:35.100 –> 00:08:50.130
Jason Mefford: But, but it’s seismic in in shift in our thinking because historically, you know, we go out, we work 2346 weeks on an audit we spend two weeks, preparing an audit report, boom, at the end of that time we issue our final report.
88
00:08:51.030 –> 00:08:58.020
Jason Mefford: And instead, you know, using an agile approach. You’re effectively writing your report or mini reports all along the way.
89
00:08:58.620 –> 00:09:11.190
Jason Mefford: Right now, that’s a big difference for a lot of people. Right. Which means, again, that goes back to how we’re scheduling people, it’s, it’s, it’s, you know, the, the whole other idea of
90
00:09:12.210 –> 00:09:14.100
Jason Mefford: Focusing on the biggest thing first.
91
00:09:15.120 –> 00:09:21.450
Jason Mefford: We don’t get distracted. We are. We’re focused on one key objective in each one of these Sprint’s
92
00:09:21.840 –> 00:09:24.570
Jason Mefford: And when we get that done, we move on to the next thing.
93
00:09:25.140 –> 00:09:42.690
Jason Mefford: And that actually because it you know reminds me of some different stories and other stuff around project management that you know really one of the reasons why we’re so inefficient is we usually have too many things on our list to do. Yeah.
94
00:09:43.020 –> 00:09:50.310
Jason Mefford: And we get scattered, we end up working a little bit on this thing. Then we switch gears, we move over to something else.
95
00:09:50.760 –> 00:10:00.660
Jason Mefford: And you’re much more effective and efficient when you just knock out that one thing right you knock it out. Then you move on to the next thing.
96
00:10:01.110 –> 00:10:08.310
Jason Mefford: And and at the, at the end of the day, that’s more like the true risk based approach. I’ve started trying to use that term.
97
00:10:08.610 –> 00:10:16.350
Jason Mefford: I don’t know if it’s going to catch on or not. But there’s a lot of people that are like oh yeah I’m doing risk based auditing until you ask them a couple of questions and then it’s like, oh, maybe I’m not
98
00:10:16.530 –> 00:10:17.850
Toby DeRoche: Right, you’re doing enemy base audit.
99
00:10:17.880 –> 00:10:22.830
Jason Mefford: You’re doing entity or process based out of the you’re not doing risk based on the right.
100
00:10:23.910 –> 00:10:25.200
Toby DeRoche: And so one of the things that
101
00:10:25.650 –> 00:10:30.930
Toby DeRoche: I think is another big shift in this whole thinking process, especially around Agile is
102
00:10:32.460 –> 00:10:34.500
Toby DeRoche: Standard never actually said you had to write a report.
103
00:10:35.790 –> 00:10:36.990
Jason Mefford: This is you have to communicate.
104
00:10:37.050 –> 00:10:38.670
Toby DeRoche: Is we have to communicate results. That’s it.
105
00:10:38.940 –> 00:10:40.110
Toby DeRoche: And so whenever you started
106
00:10:40.110 –> 00:10:43.260
Toby DeRoche: Looking at it as Leslie, let’s use the standards for what they say.
107
00:10:43.440 –> 00:10:46.830
Toby DeRoche: Let’s not add anything to it because we’re adding work to ourselves that was never there.
108
00:10:50.370 –> 00:10:51.690
Jason Mefford: We have a couple of examples.
109
00:10:53.610 –> 00:10:53.910
Jason Mefford: Yeah.
110
00:10:54.930 –> 00:10:56.100
Toby DeRoche: What we can actually take from an
111
00:10:56.100 –> 00:10:57.810
Toby DeRoche: agile process is this concept of a
112
00:10:57.810 –> 00:10:58.410
Retrospective
113
00:10:59.520 –> 00:10:59.790
Toby DeRoche: So,
114
00:10:59.820 –> 00:11:03.390
Toby DeRoche: The retrospective is what you’re doing. It’s supposed to be like an internal thing.
115
00:11:04.020 –> 00:11:09.210
Toby DeRoche: At the end of every one of these sprints where you basically say what worked and what didn’t.
116
00:11:10.680 –> 00:11:17.340
Toby DeRoche: What I’m really suggesting with this whole agile thing is we take that retrospective and we flip it and use it in place of a report.
117
00:11:18.480 –> 00:11:26.760
Toby DeRoche: And so what we can do is, you’re they’re very, very standardized processes where you’ve got four steps and you’re laying out here’s what we did.
118
00:11:27.000 –> 00:11:27.630
Toby DeRoche: Last week,
119
00:11:28.920 –> 00:11:34.680
Toby DeRoche: Here’s what we did this week. Here’s what went well. Here’s what didn’t you here’s what didn’t go well that’s the issue about
120
00:11:37.080 –> 00:11:48.900
Toby DeRoche: The point of the retrospective as you’re doing this with management. So you’ve got them in the room with you. This is you presenting to them at the end of the week. Forget the idea of having a written report, you don’t need it. You just communicated your results.
121
00:11:48.960 –> 00:11:55.020
Toby DeRoche: Of the audit right there in person and I want to get a response on the issues in this meeting.
122
00:11:56.400 –> 00:11:58.080
Toby DeRoche: And you put a time limit on it. We’ve got
123
00:11:58.110 –> 00:11:58.800
Toby DeRoche: 30 minutes
124
00:12:00.060 –> 00:12:07.290
Toby DeRoche: So here’s what we did. Here’s what well here’s where we you know we had problems that we found. What are you going to do about it. Let’s document it right now.
125
00:12:07.440 –> 00:12:08.550
Toby DeRoche: That’s documented on the board.
126
00:12:09.390 –> 00:12:10.290
Toby DeRoche: Let’s do this together.
127
00:12:11.880 –> 00:12:13.200
Toby DeRoche: I don’t know if you’ve ever used to hello
128
00:12:13.860 –> 00:12:14.610
Jason Mefford: I have. Yeah.
129
00:12:14.640 –> 00:12:17.940
Toby DeRoche: I love it. It keeps my entire life on track right now.
130
00:12:19.680 –> 00:12:21.810
Toby DeRoche: It’s like it was built for this, though, and
131
00:12:21.870 –> 00:12:24.300
Jason Mefford: You can actually it is prize for project management.
132
00:12:24.300 –> 00:12:26.280
Toby DeRoche: Project Management. A lot of people use it.
133
00:12:27.330 –> 00:12:34.290
Toby DeRoche: It’s free, which is wonderful. Like, you can go spend more money, you get something like JIRA and you might have that in your organization already but
134
00:12:34.830 –> 00:12:44.670
Toby DeRoche: Trellis free. Anybody can have an account you go sign up and you can show how you can actually take that little four step process projected on the wall in a meeting.
135
00:12:45.030 –> 00:12:47.130
Toby DeRoche: type out the answers with everybody watching and you’re done.
136
00:12:47.610 –> 00:12:48.870
Toby DeRoche: You didn’t need to have a report.
137
00:12:49.320 –> 00:12:52.290
Toby DeRoche: You didn’t have to wait to the end of the audit to start tracking things you’ve got
138
00:12:52.710 –> 00:12:59.520
Toby DeRoche: What they’re going to fix. You’ve got dates we all committed to things in that quick meeting release those things out for people started dealing with them.
139
00:12:59.730 –> 00:13:00.270
Be done with it.
140
00:13:01.320 –> 00:13:13.890
Toby DeRoche: And you basically then when you’re done with your audit, you know, at the end of that six weeks. Not only were we done with the work we’re done with talking about it because that last day we had the last meeting with management and we walked off, we were done.
141
00:13:14.970 –> 00:13:17.040
Toby DeRoche: And now they’re dealing with whatever follow up, they have to do
142
00:13:18.390 –> 00:13:24.630
Jason Mefford: Well, that’s why I think it’s great. You know, one of the webinars that you did a little while ago I think was titled no more audit reports.
143
00:13:24.630 –> 00:13:31.980
Jason Mefford: Yep. Right. And we have that course now and see risk Academy, you know, for people to go back and listen to, but I’m sure you know when a lot of people see
144
00:13:32.910 –> 00:13:46.230
Jason Mefford: Saw that saw that title, they’re like, what are you kidding. We have to write a report, because that’s what the standards, tell us we have to do. Right. And again, it’s like, All right, folks, you know, if you’re saying that to yourself, just do a timeout here.
145
00:13:46.560 –> 00:14:04.080
Jason Mefford: Because just like Toby said, Does the standards say nothing about having to write a report, it says that we have to communicate our findings are the results of our audit well community writing a report is only one way to communicate it, and so again you can
146
00:14:04.080 –> 00:14:05.100
Jason Mefford: Still be
147
00:14:05.730 –> 00:14:25.950
Jason Mefford: Don’t, don’t make the word communication mean audit report you can communicate and add value to your organization without even writing a report. In fact, I think, you know, most of the stats. I’ve seen 30 to 40% of audit time is wasted writing reports.
148
00:14:26.400 –> 00:14:31.530
Jason Mefford: Which is just stupid. You can get 30 to 40% more work done. If you just quit writing the damn report.
149
00:14:32.430 –> 00:14:43.500
Toby DeRoche: Like I was I was talking with a group down in Texas. A couple months back, and they were looking for a way to speed up some of their processes and their biggest problem. Their biggest time train was the report.
150
00:14:43.710 –> 00:14:47.190
Toby DeRoche: Because everyone in the entire organization gets hung up on the words.
151
00:14:48.300 –> 00:14:59.220
Toby DeRoche: You know, you have to in their case give this entire backstory of, well, here’s where the process started in 1930 all the way up until now. And, you know, everybody in their brother, and who touched it.
152
00:14:59.640 –> 00:15:01.890
Toby DeRoche: And why it looks like the way it does basically like
153
00:15:03.060 –> 00:15:08.910
Toby DeRoche: I don’t care, you know, nobody cares. And if we weren’t spending so much time trying to
154
00:15:09.780 –> 00:15:16.200
Toby DeRoche: You know tone down these things to the point that they’re meaningless and take all of this stuff out of it, just stick to the facts. Here’s what happened.
155
00:15:16.560 –> 00:15:27.990
Toby DeRoche: Follow the standards for this one, you know, it’s criteria condition cause effect write it out, be done with it. And then it’s very hard to argue with just normal facts spike, you know, current political
156
00:15:28.230 –> 00:15:30.660
Jason Mefford: Stuff. It’s fake news fake news.
157
00:15:30.870 –> 00:15:32.730
Toby DeRoche: Fake you pick out a report.
158
00:15:34.680 –> 00:15:35.610
Jason Mefford: That should be a title.
159
00:15:40.320 –> 00:15:42.600
Jason Mefford: We’ll see if you come up with it. First, or if I do, but yeah.
160
00:15:45.810 –> 00:15:51.630
Toby DeRoche: But yeah, it’s, it doesn’t need to be this long drawn out thing just here’s what we found. Now if we don’t put it in print.
161
00:15:52.260 –> 00:15:58.020
Toby DeRoche: If it’s not going into it into an otter report and which is actually dealing with what was bound. Does that actually make things better.
162
00:15:58.560 –> 00:16:07.200
Toby DeRoche: You know, because now, people aren’t getting hung up on but we can’t use that word because that’s going to bend, Betsy. Sue and we can’t use this word because legal is going to have a problem with it.
163
00:16:07.560 –> 00:16:12.990
Toby DeRoche: And you know we we can just get down to the point of here’s what we found, here’s what you’re going to do. Let’s go. Yeah.
164
00:16:13.920 –> 00:16:22.260
Jason Mefford: Well, and I think it’s that that’s the point to where we need to get to is you. You just have to start doing it right. You know a lot of people get hung up on the thinking
165
00:16:22.620 –> 00:16:25.410
Jason Mefford: They’ll read books and books and books and books and
166
00:16:26.070 –> 00:16:34.470
Jason Mefford: You know, go to different trainings, or whatever and agile, but you know as an example is just look here’s kind of the basics. Just try it.
167
00:16:34.890 –> 00:16:42.690
Jason Mefford: Right, just start implementing it. You probably going to make some mistakes. The first couple times you do it, but that’s part of the normal learning process but
168
00:16:43.140 –> 00:16:57.420
Jason Mefford: The quicker you can start implementing it. The quicker you can start doing it, then you can modify but yeah everybody that I’ve talked to, that’s actually gone through and and really taken true agile approach has loved it.
169
00:16:57.750 –> 00:17:13.950
Jason Mefford: And the people. The people in their organizations have loved it as well. And it takes way less time, you know, to do it, but you have to, you have to let go of some of those limiting beliefs and and things that you believe are true, that are
170
00:17:13.950 –> 00:17:18.630
Jason Mefford: Not about the standards or about what internal audit has to do. Yeah.
171
00:17:18.660 –> 00:17:20.580
Jason Mefford: Cuz honestly internal auditing, it’s
172
00:17:20.850 –> 00:17:25.650
Jason Mefford: 150 or 200 and we were joking before it might even be 6000 years old.
173
00:17:26.160 –> 00:17:32.220
Jason Mefford: Yeah, in, in the same same old, same old of what we’ve been doing it, it doesn’t work for most people anymore.
174
00:17:32.250 –> 00:17:36.150
Toby DeRoche: Yeah, and that’s the thing, like, as a group, we haven’t made a lot of changes.
175
00:17:37.920 –> 00:17:41.520
Toby DeRoche: We’ve were 30 years into trying to adopt data analytics.
176
00:17:43.530 –> 00:17:51.840
Toby DeRoche: And so if we don’t move fast. But this is something that we can take on, you know, it’s right now is the right time. And so what I’m doing, you know, I
177
00:17:52.680 –> 00:18:00.240
Toby DeRoche: I’ve written up a bunch of advice with examples and screenshots. A lot of things like trail low and put it into a book and put that on Amazon.
178
00:18:01.170 –> 00:18:13.590
Toby DeRoche: I’ve carved out some of it. I’m going to be putting it into some of the webinars that I have coming up. I’m actually doing one it’s going to be a full two hours on just how to transition from a tree in the traditional audit process into agile.
179
00:18:15.060 –> 00:18:26.310
Toby DeRoche: And the whole the whole goal with this one isn’t to say, well, you know, here’s what Agile is and really for my spend five minutes on that. But the point is, how do we transition
180
00:18:27.420 –> 00:18:29.850
Toby DeRoche: Because I guarantee you. No one cares about the history of agile.
181
00:18:31.290 –> 00:18:38.820
Toby DeRoche: And yet every single conversation. We start with Agile auditing started with the manifesto from MIT guys who did some stuff. And no one cares.
182
00:18:39.840 –> 00:18:40.020
Toby DeRoche: Yeah.
183
00:18:41.730 –> 00:18:47.520
Jason Mefford: Yeah. Quit wasting your breath on some of the stuff that doesn’t really matter. Just figure out well. And I think that’s why
184
00:18:48.840 –> 00:18:56.190
Jason Mefford: You know, people are asking these questions, but how do I do it right because the problem is when you only have something theoretical
185
00:18:56.880 –> 00:19:10.470
Jason Mefford: You can maybe kind of understand it theoretically or academically but unless you know how to actually implement or start actually doing some steps.
186
00:19:11.130 –> 00:19:20.910
Jason Mefford: Then you end up in this kind of mental loop, where we start asking questions. Why Why Why Why Why right and asking yourself.
187
00:19:21.870 –> 00:19:31.020
Jason Mefford: Why questions just makes you go crazy because for every answer you get to a why question, it comes up with another why question.
188
00:19:31.770 –> 00:19:42.330
Jason Mefford: So, you know, one of the practical things that I do when I’m coaching people is quit asking why questions start asking what and how right so what can I do
189
00:19:42.840 –> 00:19:52.860
Jason Mefford: To make my traditional approach more agile based. Okay, you’re going to get an answer, then go and try it. How can I improve this, how can I do this better.
190
00:19:54.150 –> 00:19:57.810
Jason Mefford: You’ll end up with some idea go implement it.
191
00:19:58.380 –> 00:20:03.150
Jason Mefford: Right and don’t overthink it. Because when you overthink it. Then you won’t take action.
192
00:20:03.720 –> 00:20:13.320
Toby DeRoche: And, you know, for the people that have seen who have tried this and it doesn’t work. It’s because they took that approach they they overthought the whole thing. They wouldn’t got a book on Project Management using Scrum.
193
00:20:15.300 –> 00:20:20.970
Toby DeRoche: And they started trying to apply every single thing that you would do in this it environment.
194
00:20:21.450 –> 00:20:22.800
Toby DeRoche: That includes things like
195
00:20:23.010 –> 00:20:29.640
Toby DeRoche: Well, I have to have burned down and I have to have all of these other things. And I have to show. And the moment you look at this, you should say, do I need this.
196
00:20:30.900 –> 00:20:39.090
Toby DeRoche: Like, that’s, that’s great for somebody, but as auditors. We don’t need this. And the beauty of this is we’re adopting this process we pick and choose whatever we want.
197
00:20:40.290 –> 00:20:44.910
Toby DeRoche: You know, it’s not like we’re going to get a loser audit certification if we
198
00:20:45.480 –> 00:20:54.210
Toby DeRoche: suddenly go off and do something slightly different from some other methodology that we’ve learned about us whatever of it works and just adopt it to yourselves, make it, make it
199
00:20:55.380 –> 00:20:56.910
Toby DeRoche: Make it something that helps us work better.
200
00:20:58.080 –> 00:21:13.290
Jason Mefford: Yeah, because if we get into that overthinking and believing that it’s going to be perfect the first time we do it right, we’re setting ourselves up for failure. Right. So realize that, you know, nothing’s going to be perfect the first time. So just start just try, like you said, just
201
00:21:13.680 –> 00:21:15.510
Jason Mefford: Just take a piece or two of it.
202
00:21:15.930 –> 00:21:21.480
Jason Mefford: Try it. Start incorporating it when you get that working well. Then you go and you grab the other thing, right.
203
00:21:21.870 –> 00:21:33.000
Jason Mefford: Yeah, like you said, so much of the time we end up thinking oh my gosh there’s 100 things I have to do. And then we feel like, well, I can’t accomplish all hundred things. So then we just don’t do anything.
204
00:21:33.180 –> 00:21:33.480
Toby DeRoche: Right.
205
00:21:33.780 –> 00:21:47.790
Jason Mefford: And instead, picking one or two. Okay, let’s let’s work on those until we get them. Good. Now let’s go get a couple more. And over time, you end up getting through all 100 of them right but you’ve got to actually take action with it.
206
00:21:49.800 –> 00:21:50.040
Jason Mefford: Yeah.
207
00:21:51.630 –> 00:21:57.960
Jason Mefford: Yeah, so there’s there’s some practical stuff around, you know, agile, which a lot of people are talking about now.
208
00:21:58.740 –> 00:22:07.380
Jason Mefford: I know to one of the questions that I keep getting a lot is, is around the whole virtual or remote working and some of the stuff like that right and
209
00:22:08.130 –> 00:22:14.850
Jason Mefford: You know, you mentioned before about well, how, how can we do this if we’re, you know, how can we physically count inventory. If we can’t be there and it’s like
210
00:22:15.750 –> 00:22:28.890
Jason Mefford: Well, first off, folks, if you’re still physically counting inventory. That’s probably not one of the things you should be doing. In fact, that’s a carry over from an archaic audit standard for external auditors.
211
00:22:29.490 –> 00:22:43.110
Jason Mefford: That they must physically observed inventories a year in for financial statement audits. There’s no requirement for that for internal auditors and in fact most of your inventory processes are probably working well enough.
212
00:22:43.200 –> 00:22:45.120
Jason Mefford: With enough mitigating controls.
213
00:22:45.420 –> 00:22:49.530
Jason Mefford: That we shouldn’t be, you know, messing around with inventory anyway.
214
00:22:50.460 –> 00:22:58.200
Toby DeRoche: I can tell you after spending four years in retail on it. And every year you kind of go through, you know, a week long of
215
00:22:59.280 –> 00:22:59.940
Toby DeRoche: all nighters
216
00:23:00.480 –> 00:23:01.650
Jason Mefford: Oh yeah, I’ve been there.
217
00:23:01.920 –> 00:23:05.550
Toby DeRoche: Watching people count and even before that I spent eight years in retail
218
00:23:08.010 –> 00:23:09.600
Jason Mefford: Was actually doing the inventories yourself.
219
00:23:09.660 –> 00:23:13.680
Toby DeRoche: I was a store manager at a smaller retailer that’s now gone.
220
00:23:15.180 –> 00:23:21.480
Toby DeRoche: But yeah, it’s, you know, all night long. You spend counting all this stuff, piece by individual piece.
221
00:23:22.140 –> 00:23:33.330
Toby DeRoche: But in reality, people were doing things like psycho counts and spot checks and everything was would have been fine. Anyway, you know, check the things that are strange and outstanding look for exception reports, but outside of that it was a waste of time.
222
00:23:34.860 –> 00:23:36.450
Toby DeRoche: For, you know, thinking about like remote work.
223
00:23:38.190 –> 00:23:48.330
Toby DeRoche: One of the things that as a practical approach. I’ve been suggesting is that people make a decision tree. So let’s, let’s assume that at some point we’re going to be able to go back and have some travel
224
00:23:49.680 –> 00:23:54.930
Toby DeRoche: But first, you’re if you’re working for a company, they’re probably not going to be real big on the travel budgets that we used to have.
225
00:23:56.190 –> 00:23:58.350
Toby DeRoche: Because we just made it six months without it.
226
00:23:59.730 –> 00:24:03.150
Toby DeRoche: And so they’re not going to just suddenly open up their wallets and say, okay, goes back
227
00:24:05.460 –> 00:24:10.830
Toby DeRoche: And we don’t know what travel is going to look like, you know, if we start having airlines collapse price tickets might go up.
228
00:24:11.340 –> 00:24:25.020
Toby DeRoche: Alone. So we’re going to have to see how much we can even feasibly travel start making a decision tree of well, how, how big of a risk is this thing I’m looking at if it’s a high risk, let’s assume that it would be better if I were on site.
229
00:24:26.490 –> 00:24:32.730
Toby DeRoche: But maybe I don’t need to be on site for the whole thing before we would do is from day one. Today, you know, finished we were on site.
230
00:24:33.450 –> 00:24:43.650
Toby DeRoche: And we would spend every waking moment, you know, travel out on a Monday morning, come back on a Friday night and you spent every minute on site, you didn’t need to spend your planning time there.
231
00:24:44.670 –> 00:24:50.010
Toby DeRoche: You probably didn’t need to spend much time that first week or two, because people were still gathering evidence for you.
232
00:24:51.090 –> 00:24:56.460
Toby DeRoche: And they could drop that off somewhere in a shared drive and be done with it. You didn’t have to go and sit and wait
233
00:24:57.810 –> 00:25:00.270
Toby DeRoche: You can probably had a bunch of zoom conversations with people.
234
00:25:01.290 –> 00:25:07.020
Toby DeRoche: And done a lot of the due diligence before you ever ever set foot on site. And then if you had to go out there.
235
00:25:07.650 –> 00:25:19.620
Toby DeRoche: Then you go for what matters and you get that up. You get that part knocked out and go back home. You don’t need to be on site because it’s not just the travel is the flight but hotels, the disruption. They may not want you there.
236
00:25:19.980 –> 00:25:24.990
Toby DeRoche: Because now we’re introducing a new risk element to them by having outsiders walking around the building.
237
00:25:26.400 –> 00:25:28.020
Toby DeRoche: Your people may not want to go.
238
00:25:28.530 –> 00:25:31.200
Toby DeRoche: Now, you know, I personally would not want to go anywhere right now.
239
00:25:31.980 –> 00:25:35.820
Toby DeRoche: So it’s, it’s too much to ask people to start traveling
240
00:25:37.080 –> 00:25:49.470
Toby DeRoche: And we have to find a way to get around it. And so one of the things that we can start to look for as well. Do I have any local resources that I could adopt, you know, it’s not a new thing for us. We’ve been using internal subject matter experts forever.
241
00:25:50.730 –> 00:25:56.250
Toby DeRoche: And so if I’ve got somebody there that can do the work for me create they just got deputized now they’re in on it.
242
00:25:57.360 –> 00:26:04.980
Toby DeRoche: And using the go do some of the legwork for you. You know, you gotta go and do it and inventory observation. Yeah. Everybody’s got FaceTime on their phone.
243
00:26:07.020 –> 00:26:07.530
Toby DeRoche: Turn it on.
244
00:26:08.010 –> 00:26:09.060
Toby DeRoche: To put a walk around the building.
245
00:26:10.800 –> 00:26:12.870
Toby DeRoche: You know, if it’s something that’s not a high risk God
246
00:26:14.190 –> 00:26:15.780
Toby DeRoche: We probably never needed to go to begin with.
247
00:26:16.320 –> 00:26:16.530
Jason Mefford: Yeah.
248
00:26:17.010 –> 00:26:24.600
Toby DeRoche: In those high risk times though it might be an onsite. It might be adopted local resource or that’s where we start looking at things like can I outsource
249
00:26:25.980 –> 00:26:32.790
Toby DeRoche: And it doesn’t need to be a big contractual outsourcing engagement. We’re talking is can I freelance this thing out.
250
00:26:33.810 –> 00:26:41.790
Toby DeRoche: Can I grab some local resource who’s willing to go out and spend a couple days and do some legwork for me and you can grab these guys off the things like freelancer fiber.
251
00:26:44.160 –> 00:26:44.760
Jason Mefford: Yeah.
252
00:26:45.090 –> 00:26:45.630
Toby DeRoche: We’re thinking
253
00:26:45.960 –> 00:26:51.630
Jason Mefford: We have to change your way of thinking and even to kind of go back to the retail example that we were talking about before. Right.
254
00:26:52.050 –> 00:26:56.940
Jason Mefford: I mean when usually most large retailers. They don’t do their own inventory count.
255
00:26:57.660 –> 00:27:03.420
Jason Mefford: Right, that’s, that’s why I can’t remember the name, there’s like two big companies that do most of the stuff for the people in the US. Right.
256
00:27:03.870 –> 00:27:09.210
Jason Mefford: And and so you show up and you observe or watch these people doing it. Well, you know, again, if it’s
257
00:27:10.140 –> 00:27:24.390
Jason Mefford: One of the biggest companies in the in the world that are doing this, the processes are probably pretty good right so that it can be an example of where you could probably outsource it. Yeah, you might have to do a little bit of work to verify that they actually know what they’re doing.
258
00:27:25.440 –> 00:27:35.100
Jason Mefford: But not not physically be there right and I love your idea about the decision tree, you know, trying to come up with something and really starting to ask yourself the questions.
259
00:27:35.550 –> 00:27:49.020
Jason Mefford: Do I have to physically be on site for this because that’s what I’ve been talking about with a lot of people. There’s probably creative ways, like you said, FaceTime, I was joking with somebody that day about using drones.
260
00:27:49.260 –> 00:27:58.200
Jason Mefford: Uh huh. But heck we could use drones. Right. You know, FedEx FedEx a drone to somebody at the facility and say go set it out on the floor and
261
00:27:58.650 –> 00:28:12.300
Jason Mefford: Turn it on. And then we’re going to remote do it from whatever. Right. I mean, if the military can can fly drones all the way around the world from wherever they happen to be, then we could do things like that as well. Right.
262
00:28:12.600 –> 00:28:20.910
Jason Mefford: Yeah. Or, you know, get get back to the point to where. Hey, instead of being on site for two weeks, maybe we’re only there for one or two days.
263
00:28:20.940 –> 00:28:21.960
Jason Mefford: Maybe that’s really
264
00:28:21.990 –> 00:28:30.480
Jason Mefford: All we have to be on site because honestly, a lot of times on site work, you’re usually there’s a lot of downtime.
265
00:28:30.810 –> 00:28:31.950
Toby DeRoche: To sitting in an office.
266
00:28:32.070 –> 00:28:39.540
Jason Mefford: Sitting in your office, you’re waiting for somebody three people on the team are trying to talk to the same person at the same time. And so
267
00:28:39.990 –> 00:28:40.530
Jason Mefford: There’s a lot of
268
00:28:40.860 –> 00:28:42.030
Toby DeRoche: time figuring out watching dinner.
269
00:28:44.640 –> 00:28:45.630
Jason Mefford: Where we’re going to go to dinner.
270
00:28:45.870 –> 00:28:49.980
Jason Mefford: Exactly. No, I don’t want Mexican tonight we had that two nights ago, whatever.
271
00:28:51.090 –> 00:28:51.390
Jason Mefford: But
272
00:28:52.500 –> 00:29:02.340
Jason Mefford: You know, another one that kind of goes along with this, though, that I, I know I’ve had a lot of people asking questions about, well, but, but how do we how do we develop relationships.
273
00:29:02.700 –> 00:29:05.610
Jason Mefford: You know, we have that old term auditing by walking about
274
00:29:05.880 –> 00:29:20.340
Jason Mefford: You know, where you just kind of walking around, and yet you notice certain things or, you know, maybe you’re new to an organization, you don’t know somebody, how, how can we develop relationships with people remotely.
275
00:29:21.840 –> 00:29:35.190
Jason Mefford: You know, where before, maybe we bumped into him at the coffee station or, you know, it’s easier to maybe go have lunch with them or do something like that, you know, how do we transition. A lot of that stuff now to virtually
276
00:29:35.670 –> 00:29:43.020
Jason Mefford: And I know a lot of people are kind of scared about that and thinking, it can’t be done. So I’m kind of interested to see here, hear your take on that.
277
00:29:44.040 –> 00:29:44.460
Jason Mefford: As well.
278
00:29:44.880 –> 00:29:58.950
Toby DeRoche: It’s interesting. So I’ve actually worked from home for 10 years. So this last few months has been everybody I was doing the party because I’ve been doing this for a long time and it’s so funny to watch people struggle with these ideas.
279
00:30:00.390 –> 00:30:04.620
Toby DeRoche: Reality is, you just have to be more intentional about it, you know. So I have
280
00:30:06.420 –> 00:30:09.900
Toby DeRoche: A series of people that I’m working with, and I might have
281
00:30:10.920 –> 00:30:23.340
Toby DeRoche: In the course of a week two or three conversations with each one, but it’s cameras on face to face. It’s not like you lose all human contact when you go to work from home. You just have to change the way you think about it.
282
00:30:25.170 –> 00:30:32.730
Toby DeRoche: I have a friend who he and I get together at least every other day and it is literally just get on zoom. We have a cup of coffee together and Jeff.
283
00:30:34.080 –> 00:30:41.010
Toby DeRoche: And it’s just so that we can catch up and it’s usually half work half, you know, home life whatever’s going on, but it’s not
284
00:30:41.970 –> 00:30:49.470
Toby DeRoche: It’s not that hard to keep those relationships going and it would be the same thing. It may be a little awkward at first, especially these aren’t people you know that well.
285
00:30:49.920 –> 00:30:57.420
Toby DeRoche: But get, you know, you’re going to go out and we would have been doing an inventory. So we would have had lunch with the director of some facility in Jersey.
286
00:30:58.860 –> 00:31:09.210
Toby DeRoche: You don’t want to have a Skype, get him on a zoom have a conversation with them the block out 20 minutes. Don’t make it a big thing and just have the conversation just chat be human.
287
00:31:10.800 –> 00:31:22.200
Jason Mefford: Well i think it’s it’s funny, you know, because like I said, a lot of people are kind of freaking out about this, but at the end of the day, the medium has changed, but the principles of not right.
288
00:31:22.740 –> 00:31:26.130
Jason Mefford: Right, so like when you’re talking with your friend. You know there’s there’s some rapport.
289
00:31:26.550 –> 00:31:41.970
Jason Mefford: That you’re building you’re talking about work stuff, but you’re also talking about personal stuff. Why, because that’s part of developing a human relationship with people. Right. You can do that remotely, just like you can in person. I mean, right now we’re not together.
290
00:31:42.090 –> 00:31:45.840
Jason Mefford: You know, you’re, you’re halfway, or you’re pretty much the whole way across the country from
291
00:31:45.840 –> 00:31:55.770
Jason Mefford: Me, right. So we’re probably 2500 miles apart but camera on, we can still have a real human connection and I think
292
00:31:57.600 –> 00:31:58.920
Jason Mefford: Like you said, that actually
293
00:31:59.940 –> 00:32:02.850
Jason Mefford: The video options, you know, whether it’s
294
00:32:02.910 –> 00:32:07.200
Jason Mefford: Skype or zoom or team or whatever you’re using
295
00:32:07.950 –> 00:32:10.680
Jason Mefford: Is much better than just a phone call.
296
00:32:11.010 –> 00:32:19.020
Jason Mefford: Oh yeah, right. But in the past, folks. Right. You know, you think about. It’s like we wouldn’t have thought it weird to pick up the phone.
297
00:32:19.470 –> 00:32:33.480
Jason Mefford: And call somebody and talk to them over the phone, but actually video is a better medium anyway. So again, you’re doing the same things building rapport with them, you know, developing those relationships.
298
00:32:34.260 –> 00:32:43.170
Jason Mefford: You know, discussing what you need to getting this stuff done. I think I think more than anything actually virtual, like you said, You’ve got to be more intentional about doing it.
299
00:32:43.410 –> 00:32:43.680
Toby DeRoche: Mm hmm.
300
00:32:43.860 –> 00:32:49.380
Jason Mefford: But I think we can be much more efficient when it’s virtual as well. Yeah.
301
00:32:49.830 –> 00:33:03.120
Jason Mefford: Right, because now it’s, you know, you’ve scheduled a time with somebody, you’re not interrupting him in the middle of something else. People know they show up. You can be quick on and off, you know, kind of thing as well.
302
00:33:03.630 –> 00:33:11.280
Toby DeRoche: Yeah, a lot of the suggestions that I’ve been giving to people on this is think about the other person and yourself and think about the schedule. Right.
303
00:33:11.340 –> 00:33:14.100
Toby DeRoche: You don’t want to block out an hour for every single meeting, you’re ever going to do
304
00:33:15.270 –> 00:33:16.620
Toby DeRoche: You probably don’t even half an hour, either.
305
00:33:16.980 –> 00:33:23.790
Toby DeRoche: Because before it would have been, you might have schedule something you sat across from them at a desk took you notes and then what when you were done.
306
00:33:24.180 –> 00:33:33.060
Toby DeRoche: It’s not like you stayed the half hour just because you had a half hour block. And for some reason, we put things on the calendar and we do virtual. A lot of people get into this idea that I have to fill up the time
307
00:33:34.080 –> 00:33:38.340
Toby DeRoche: And it’s okay because you’ve got these phrases that well I’m going to give you five minutes. Back in your day.
308
00:33:39.840 –> 00:33:42.720
Toby DeRoche: And it’s when you’re done, you’re done. Just be done.
309
00:33:43.800 –> 00:33:52.350
Toby DeRoche: And when we’re being more intentional about it. You don’t schedule things for half an hour you schedule it for 20 minutes because they’ve got another meeting to get to, they might have back to back calls
310
00:33:53.850 –> 00:34:02.730
Toby DeRoche: You know, whatever it is that’s going on. And you might have the same thing. You don’t want these things running up against each other because now you didn’t have any time to actually think process go get that cup of coffee that you really needed
311
00:34:03.090 –> 00:34:08.430
Toby DeRoche: Whatever it might have been. So do you think that shorter blocks. If it was going to be an hour call 45 minutes and be done.
312
00:34:09.060 –> 00:34:09.270
Yeah.
313
00:34:10.290 –> 00:34:15.390
Toby DeRoche: And when you put things on someone’s counter like that, you know, the piece of it is setting expectations.
314
00:34:16.530 –> 00:34:22.410
Toby DeRoche: And tell them up front, even put it in the invitation. It’s 20 minutes to talk about this.
315
00:34:23.490 –> 00:34:24.360
Toby DeRoche: With cameras on
316
00:34:25.350 –> 00:34:27.810
Toby DeRoche: And let them know the cameras need to be on because
317
00:34:27.990 –> 00:34:36.120
Toby DeRoche: Part of this is still part of your audit right i mean it’s it’s the, the more informal part that we would have had from walking around.
318
00:34:36.870 –> 00:34:45.360
Toby DeRoche: But you need to see them, you need the body language, you need the eye contact. You need need to be able to see if they’re getting really square new you can start talking about something, because maybe they get something to hide.
319
00:34:46.350 –> 00:34:50.280
Jason Mefford: This are touching their forehead and run Windows or anything like 12
320
00:34:51.030 –> 00:34:51.600
Slides.
321
00:34:52.830 –> 00:34:57.420
Jason Mefford: Well, and I think that’s, you know, I’ve been, you know, similar to you. I’ve been working from home for a years
322
00:34:57.450 –> 00:34:59.400
Jason Mefford: Myself and it’s
323
00:35:00.570 –> 00:35:02.370
Jason Mefford: You know, the camera on is a big deal.
324
00:35:02.670 –> 00:35:03.930
Jason Mefford: You know, and even when
325
00:35:04.710 –> 00:35:05.820
Jason Mefford: Depending on the call.
326
00:35:06.870 –> 00:35:11.940
Jason Mefford: But I won’t really do a cop do certain calls unless people will turn on their camera. Yeah.
327
00:35:11.970 –> 00:35:24.840
Jason Mefford: And if and if they can’t get their camera on, then it’s like, Okay, well, we’re gonna have to reschedule. Yeah, right. Other other times where, you know, again, I might let them hide, but I never hide. I always have my camera turned on, except for one meeting.
328
00:35:25.920 –> 00:35:32.130
Jason Mefford: That I have with one of my clients because they don’t have it on. It’s quick meeting kind of thing, but
329
00:35:33.120 –> 00:35:44.730
Jason Mefford: You know, have your camera on, don’t, don’t try to hide and in most of the time people will be like, Oh, well you know i i look I look a mess today. And it’s like, well, so do I look at me right now. I don’t care.
330
00:35:45.870 –> 00:35:55.110
Jason Mefford: Because it, it gives you the better the better connection. And since only about 7% of the message is the words that are used.
331
00:35:56.250 –> 00:35:57.360
Jason Mefford: You need to see people
332
00:35:57.450 –> 00:35:59.310
Jason Mefford: See how they’re responding see their
333
00:35:59.460 –> 00:36:04.110
Jason Mefford: Their intonation their volume. Everything else as well, but their body language too so
334
00:36:04.170 –> 00:36:08.580
Toby DeRoche: This is, this is something that’s like a really personal thing for me. So I have a son who’s seven with autism.
335
00:36:09.120 –> 00:36:11.220
Toby DeRoche: Okay, and he’s verbal
336
00:36:11.400 –> 00:36:20.730
Toby DeRoche: He speaks just, you know, but his vocabulary is limited, his ability to have a conversation is limited and you learn really quick, that you can say a whole lot without opening your mouth.
337
00:36:21.930 –> 00:36:23.820
Jason Mefford: Yes, yes, he says.
338
00:36:24.210 –> 00:36:25.920
Jason Mefford: He says a whole bunch without opening his
339
00:36:25.920 –> 00:36:26.670
Jason Mefford: Mouth, doesn’t it.
340
00:36:27.030 –> 00:36:30.660
Toby DeRoche: Yes, all nonverbal communication even look at you and you know exactly what’s going on.
341
00:36:31.170 –> 00:36:31.530
Jason Mefford: Uh huh.
342
00:36:32.580 –> 00:36:38.610
Jason Mefford: Yeah, well, and so we need to incorporate that in into what we’re doing as well. Right, so
343
00:36:39.780 –> 00:36:42.390
Jason Mefford: And like usual. We kind of end up bumping up on time here so we
344
00:36:43.740 –> 00:36:51.330
Jason Mefford: Were gonna have to do a timeout and probably have you on later, too. But it’s, you know, hopefully for everybody that’s listening, you know. And as we’ve been talking
345
00:36:51.870 –> 00:37:05.280
Jason Mefford: There’s practical ways to start implementing some of these things, but you just got to get out of your way. Quit overthinking it try to take it in some small chunks, you know, and realize that
346
00:37:06.210 –> 00:37:15.420
Jason Mefford: You know everybody’s running around saying, oh, the world is so different today than it’s ever been. No, it’s not actually it’s not folks right
347
00:37:15.930 –> 00:37:33.600
Jason Mefford: We’ve gotten used to going to the store. Why because, for the last, I don’t know 60 or 80 years we’ve been programmed to go to the store. But how did people in the US, get their bread and their milk and their eggs 100 years ago home delivery.
348
00:37:34.260 –> 00:37:37.050
Jason Mefford: It was just done by horse and carriage. Right.
349
00:37:38.130 –> 00:37:43.950
Jason Mefford: Instead of Amazon trucks. So, you know, a lot of this stuff isn’t really that different
350
00:37:45.090 –> 00:37:48.570
Jason Mefford: And there’s there’s ways when you start thinking about it.
351
00:37:49.740 –> 00:37:55.200
Jason Mefford: That you can, you know, a lot of it’s just keep doing the same thing. It’s just with a different medium.
352
00:37:56.340 –> 00:37:56.700
Jason Mefford: So,
353
00:37:57.990 –> 00:38:08.370
Jason Mefford: Anyway, any final thoughts that you want to leave with people because like I said, I appreciate what you’re doing to and trying to help people become much more practical and actually do stuff. Yeah.
354
00:38:08.400 –> 00:38:10.410
Jason Mefford: Instead of getting hung up in the theoretical
355
00:38:10.830 –> 00:38:15.720
Toby DeRoche: Yeah, I’d say like the way that I’m trying to get the message out. I’m doing webinars.
356
00:38:17.190 –> 00:38:28.140
Toby DeRoche: I try to do them every third Thursday of the month. They’re very practical. I try to keep it all. You know, we don’t talk theory we’re really getting down to, how do we do things.
357
00:38:30.060 –> 00:38:32.280
Toby DeRoche: Those are all on demand on the risk Academy
358
00:38:32.730 –> 00:38:39.990
Toby DeRoche: Yep. And I’m also doing these where they do get to be a little more technical. I’m actually putting them into a book format that I’m putting on Amazon.
359
00:38:40.290 –> 00:38:46.020
Toby DeRoche: That way you can follow along with it if it’s something more like it really is a long drawn out process to go from
360
00:38:46.800 –> 00:38:58.170
Toby DeRoche: I need to move from traditional to agile, there’s some steps in the middle. And it really does work better. Sometimes if you’ve got those as a reference to go back to. And so I’m putting those in print, so people can have that as a takeaway as well.
361
00:38:58.710 –> 00:39:16.650
Jason Mefford: Which is great. Yeah. Because like you said you can’t get from that knowledge and skills area to the application or experience unless you have some kind of tools with that are, you know, eat it at a minimum questions to answer or kind of thought exercises to go through
362
00:39:18.180 –> 00:39:19.770
Jason Mefford: To be able to make that application.
363
00:39:20.130 –> 00:39:21.000
Jason Mefford: Over so
364
00:39:21.030 –> 00:39:23.520
Toby DeRoche: It’s really like we’ve been talking about, you have to change the way you’re thinking
365
00:39:24.180 –> 00:39:30.960
Toby DeRoche: And this is really to be a guide to get you from A to B, so that now that you’re looking at things differently and you’re trying to apply it.
366
00:39:31.380 –> 00:39:39.000
Toby DeRoche: Trying to be as explicit with it as possible of here’s how you do it, and you’re going to have your own take on it. But now that you’re thinking that way you can make that week.
367
00:39:39.660 –> 00:39:51.420
Jason Mefford: Yeah, well, and for everybody to just relax, too, because like we talked about a couple times in our discussion, your organization doesn’t have to do it the same way as
368
00:39:51.960 –> 00:39:53.190
Jason Mefford: Somebody else. In fact,
369
00:39:53.520 –> 00:39:58.230
Jason Mefford: You shouldn’t do it the same way as somebody else because your organization is different.
370
00:39:58.860 –> 00:40:15.780
Jason Mefford: And so, you know, there while you know everybody always likes to hop on the best. Well, it’s best practice to do this as best practice to do that quit worrying about best practice and do what’s most practical and valuable to your organization, regardless of what everybody else is doing.
371
00:40:17.310 –> 00:40:17.610
So,
372
00:40:18.750 –> 00:40:20.460
Jason Mefford: All right, well, Toby. Thank you.
373
00:40:22.170 –> 00:40:34.260
Jason Mefford: Like I said so. Yeah. You mentioned you know you doing webinars third Thursday of the month. Usually, and that’s inside CP. So how can people find find those webinars will try to put that in the show notes as well.
374
00:40:34.530 –> 00:40:37.560
Toby DeRoche: Yeah, it’s on inside CPA com slash webinars.
375
00:40:38.070 –> 00:40:38.310
Toby DeRoche: Okay.
376
00:40:38.730 –> 00:40:40.260
Toby DeRoche: We post them on LinkedIn as well.
377
00:40:41.310 –> 00:40:47.100
Toby DeRoche: And then all of our on demand. I have links to them on my page and they’re also they’re all on serious Academy
378
00:40:48.270 –> 00:40:54.360
Jason Mefford: Yeah, so on there and serious. You can even just search by Toby’s name and it’ll, it’ll filter out all of his courses as well.
379
00:40:55.110 –> 00:41:05.850
Jason Mefford: So that you can see it because, yeah, there’s some great ones out there like no more audit reports, one that you just recently did to us about. Was it something about the fraud triangle and getting we need a new fraud triangle.
380
00:41:06.210 –> 00:41:06.930
Toby DeRoche: Triangle. This
381
00:41:07.530 –> 00:41:15.750
Toby DeRoche: A lot of the ones that are doing. It’s really just taking some of these things like cross training has been around for 70 years. It’s really a different world out there that doesn’t work anymore.
382
00:41:16.980 –> 00:41:20.340
Jason Mefford: Well, in the whole reason it was created was for law enforcement.
383
00:41:20.880 –> 00:41:22.380
Jason Mefford: And then it’s just been kind of
384
00:41:22.440 –> 00:41:25.080
Jason Mefford: Kind of adopted by the fraud industry as well and the
385
00:41:25.080 –> 00:41:27.930
Toby DeRoche: Fraud industry, the way that it’s been taken, it’s purely financial
386
00:41:28.410 –> 00:41:28.620
Jason Mefford: Yeah.
387
00:41:28.950 –> 00:41:41.580
Toby DeRoche: It doesn’t consider things like, well, what about hacking and what, what about all. What about AI. Where does the I come into play. What happens if there was no motivation behind it, other than I wanted to see if I can do it. It’s not because
388
00:41:42.180 –> 00:41:43.170
Jason Mefford: The classic hacker
389
00:41:43.860 –> 00:41:48.660
Toby DeRoche: Hacker. Yeah. Yeah. Not because I was under some financial pressure, but I wanted to see if I can hack the VOD
390
00:41:49.830 –> 00:41:52.710
Jason Mefford: And I did. No, I didn’t. I did not. And so you’re
391
00:41:52.710 –> 00:41:53.370
Toby DeRoche: Not eating.
392
00:41:56.580 –> 00:42:03.300
Jason Mefford: Yeah. So anyway, so go check out, check out you know Toby’s webinars and like I said, if you can’t catch them live there.
393
00:42:03.810 –> 00:42:16.140
Jason Mefford: They’re on see risk afterwards for you to be able to go back to as well. So, Toby. Thanks, my brother. Let’s keep up the keep up the fight. Keep out them that profession and help everybody be more practical.
394
00:42:17.310 –> 00:42:18.750
Jason Mefford: So that we can move forward into the future.
395
00:42:18.990 –> 00:42:23.400
Jason Mefford: And not not just becomes some other compliance activity in the organization.
396
00:42:23.730 –> 00:42:25.410
Toby DeRoche: Absolutely. Thanks for having me on.
397
00:42:25.740 –> 00:42:26.310
Hey, thanks.
