Sergeja Slapnicar

Sergeja Slapničar is Associate Professor of Accounting and Co-lead of Digital Finance Research Hub. Her research is at the intersection of auditing, risk management, cyber security, and AI governance. She investigates how organisations financially quantify and audit cyber risk, coordinate the lines of defence in cyber security, and manage cyber and AI risks effectively. Sergeja disseminates her research findings to professional and regulatory audiences through policy engagement, practitioner journals, and by presenting at national and international industry events. She is a member of the Editorial Boards of Journal of Management Control, International Journal of Auditing, and Behavioral Research in Accounting. Sergeja is a passionate educator whose work-integrated approach, connecting students with real startups, has earned multiple awards, including faculty, university, and national citations for outstanding contribution to student learning. She has extensive Board experience by having served as a non-executive Director in a systemic bank in Eurozone; in a multinational pharmaceutical corporation, on the Board of the Slovenian Agency for Public Oversight of Auditing, as a Chair of the settlement committee in owners' disputes (Slovenia) and as an independent member in audit and remuneration committees of various public interest entities (the Slovenian Bad Bank among others). She has trained over 1,000 executive and non-executive directors in accounting, finance and cyber security risk management at the Slovenian Directors Association, and advised organisations on risk management. Prior to her employment at the UQ Business School, Sergeja was a Professor at the University of Ljubljana, Slovenia. She is a member of ISACA; serves on the Education Committee of the Institute of Internal Auditors Australia and on the Auditing, Assurance, and Ethics Standards Committee at the European Accounting Association. Governance and risk management of cyber security, Governance and risk management of Artificial Intelligence, Internal auditing and assurance

[2026] The FABRICS framework: a Bayesian approach to financial quantification of cyber risk. Slapničar, Sergeja and Joshi, Chaitanya (2026). The FABRICS framework: a Bayesian approach to financial quantification of cyber risk. Computers and Security, 167 104900, 1-18. doi: 10.1016/j.cose.2026.104900 [2026] A rising tide of operational risk: new directions for management control research on core and novel risks. Oelrich, Sebastian and Slapničar, Sergeja (2026). A rising tide of operational risk: new directions for management control research on core and novel risks. Journal of Management Control, 37 (2), 285-294. doi: 10.1007/s00187-026-00418-y [2026] Collaborating across boundaries: toward an integrated cyber risk assessment by internal auditors and cybersecurity professionals. Slapničar,