u/CrimsonChallenger

I have never practice Ninjutsu, and the thing that really stands out to me is the philosophy behind it. The way I see feudal ninjas were essentially the ultimate problem-solvers of their time. They were experts at looking at their environment, identifying what was needed, and finding ways to adapt and survive under really tough constraints.

I have a lot of respect for the traditional schools that are keeping that history alive. It is a cool piece of history. But I have found myself wondering if the core of that mindset that radical ability to adapt could be applied to our world today.

If you took that same spirit and brought it into 2026, it would look pretty different than the historical stuff. I imagine it would be more about things like staying low-profile in a world full of cameras, managing a digital footprint, moving through busy cities, and figuring out how to use the everyday items we have on us to solve problems as they come up.

Does anyone know if there is a community out there that treats Ninjutsu as a living, evolving set of skills for modern urban life? I am genuinely curious if there is anyone exploring this side of things, or if it is mostly focused on the traditional and historical side. I would love to hear what you guys think.

I've recently moved from external audit (accounting) into IT internal audit, and one thing I've been struggling with is what feels like a lack of methodology compared to what I was used to before.

In external audit, there were well-established concepts and principles that guided the work. Whether it was materiality, completeness, accuracy, existence, occurrence, or other assertions, there was usually a clear framework behind why procedures were being performed and how conclusions were reached.

Since moving into IT internal audit, I often feel like I'm missing that same foundation. I'm trying to understand what the equivalent methodology is supposed to be and whether I'm overlooking something.

At the same time, I'm very new to IT audit, so I'm not sure if what I'm experiencing is specific to my company, my audit team, or if it's something more common across the profession.

For those with more experience in IT audit:

• What methodology do you rely on when planning and performing audits?
• Are there concepts equivalent to financial statement assertions that help structure your thinking?
• How do you connect risks, controls, and testing in a consistent way?
• Is there a body of knowledge, framework, or approach that experienced IT auditors tend to follow?

One thing that would be especially helpful would be seeing an example of how experienced IT auditors structure a work program.

In external audit, I was used to seeing a clear chain between objectives, assertions, risks, and audit procedures. I'd be interested in understanding how that same thought process is applied in IT audit.

If anyone is willing to share a simplified example of an audit program (for example, user access management, change management, privileged access, etc.), showing how risks are translated into controls and testing procedures, I would really appreciate it.

Hoje eu tenho uma pós-graduação, trabalho em uma multinacional e sigo um caminho profissional que faz sentido. Mas, se dinheiro não importasse, eu seria o melhor Homem Aranha de festas infantis do planeta.

Já pensei bastante sobre isso. Existe algo em ser homem aranha que eu não sei explicar completamente. Nunca fui um Homem aranha de festa, mas parece exigir um nível enorme de dedicação. Não é apenas vestir uma fantasia. É incorporar um símbolo, lidar com crianças e sustentar a ilusão, por que o público realmente vê você como o Homem-Aranha. Para aquelas crianças, você não é um ator contratado. Você é o herói que saiu dos quadrinhos para aparecer no aniversário delas. Há algo muito bonito nisso.

Talvez eu nunca siga esse caminho. Mas, se o dinheiro deixasse de ser uma preocupação, é exatamente isso que eu faria. E não faria de qualquer jeito. Eu iria querer ser o melhor do mundo nisso.