Bruce Turner, “an active company director and audit committee chair”, was recently interviewed on this topic. You can see the full interview at CERM Risk Insights and there is also an article in Future of Professions.
Vendor master file blunders caused a $2.7M loss for a company whose insurer refused to cover most of the loss. At the root of the loss was the company's inadequate response to a phishing email. A few simple best practices could have prevented the loss.
A $900M error, poor system design, and failed internal controls intersected in a recent court case decided in New York. Citibank, in its role as administrator for loans that a group of lenders, or syndicate, had made to Revlon, was responsible for coordinating between lenders and Revlon.