POPULARITY
This week on The Audit Podcast, Danielle Ritter, VP and Head of Internal Audit at GitLab and former CAE at Instacart, joins the show to share lessons from her leadership journey and practical advice for audit professionals at every stage of their careers. Drawing from her experience leading audit functions across multiple organizations, Danielle discusses what matters most during a CAE's first 100 days, how to build credibility with stakeholders, and why strong relationships are essential to an effective audit function. She also shares how her team is embracing AI, developing new skills, and preparing for the future of the profession. 2:06 – Using AI in work and everyday life 5:16 – Where CAEs should focus: insights vs. efficiency 6:46 – Day One: listening and learning 10:11 – Navigating the CAE interview process 13:09 – How to define and demonstrate value 16:40 – What information belongs in the boardroom 19:00 – A practical approach to building strong relationships 22:45 – AI and the future of job security 27:55 – Making time for self-directed learning 30:07 – Final thoughts: your career does not define you Be sure to connect with Danielle on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule.
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this companion episode to Internal Auditor magazine's "Better Together" article, Paula Michaels talks with Ashwathama Rajendran about how AI can support more connected, continuous, and coordinated assurance across the three lines. They discuss why combined assurance can be difficult to achieve in practice, how AI can act as a connecting layer across risk, compliance, operations, and internal audit, and why human judgment, independence, and data privacy remain critical. HOST: Paula Michaels Senior Director of Creative and Content Services, The IIA GUESTS: Ashwathama Rajendran Data Analytics Lead, Stripe All opinions are Ashwathama Rajendran's own and do not represent his employer, and all scenarios discussed are hypothetical and based on broad industry experience rather than any specific organization. KEY POINTS: Introduction and Ash's Background [00:00:30 - 00:02:05] Why Combined Assurance Struggles in Practice [00:02:17 - 00:04:21] AI as a Connecting Layer Across the Three Lines [00:04:33 - 00:06:29] Creating Real-Time Combined Assurance Maps [00:05:37 - 00:06:09] Continuous Monitoring Integration and AI [00:06:30 - 00:09:07] Using AI to Detect Cross-Functional Risks Earlier [00:09:07 - 00:11:20] Translating Risk Taxonomies Across Functions [00:11:29 - 00:13:35] Maintaining Auditor Independence and AI Governance [00:13:35 - 00:16:52] Roles of the Three Lines in AI Oversight [00:16:52 - 00:18:01] Where Organizations Should Start with AI-Enabled Combined Assurance [00:18:01 - 00:20:31] Internal Audit as a Catalyst for AI Adoption [00:20:31 - 00:22:35] How AI Will Change Internal Auditing Over the Next Five Years [00:22:35 - 00:25:17] Final Thoughts [00:25:17 - 00:25:49 Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Better Together — Internal Auditor Magazine (June Issue) Pulse Check: Combined Assurance Knowledge Center: Artificial Intelligence The Three Lines Model Vison 2035 Global Internal Audit Standards Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
This week on The Audit Podcast, Aadesh Gandhre, CAE at DTCC, steps in as guest host for a conversation with his colleague, Idania Orengo, Chief of Staff, Internal Audit at DTCC, about the human side of audit transformation. Drawing from their experiences at DTCC, they discuss how culture, communication, and leadership help build high-performing audit teams. They explain that innovation is not always driven by technology. Sometimes it comes from simplifying processes, building trust, and creating an environment where people feel comfortable sharing ideas. The conversation also highlights the importance of mentorship, collaboration, and strong relationships in driving successful transformation within internal audit. 6:15 - Early Days at Goldman 7:45 - What Makes a Great Leader 9:55 - Feedback, EQ & Confidence 13:55 - The Human Side of Transformation 16:08 - Building DTCC's Audit Culture 18:58 - Leadership Behind the Scenes 23:27 - Strong Teams & Communication 25:36 - ERGs, Identity & Inclusion 27:48 - AI vs Human Connection 30:00 - Innovation That Actually Works 34:10 - Changing the View of Internal Audit 39:50 - Finding Your Voice 41:30 - Final Thoughts Be sure to connect with Aadesh and Idania on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule.
Most organizations believe they are compliant - until the independent audit begins. In this episode of InfosecTrain Tech Talks: Real World Decoded, host Payal Pawar sits down with Anish Mishra, a prominent Head of GRC and Internal Audit, to uncover the disconnect between corporate paperwork and real-world security. We move past static checklists to explore why fully documented frameworks, policies, and controls still collapse under professional scrutiny.The "course titled" Certified GRC Auditor Training is essential for professionals who understand that true compliance is an operational reality, not a static binder. We analyze critical corporate blind spots, dissect the friction between governance strategy and everyday risk management, and explain how to design a sustainable GRC structure that survives active audit testing.
The Institute of Internal Auditors Presents: All Things Internal Audit In this Internal Audit Awareness Month special, internal audit leaders share the human side of the profession. Through stories of resistance, difficult findings, stakeholder trust, courage, and career-defining moments, the episode highlights how internal auditors add value by building relationships, asking better questions, and helping organizations see what they might otherwise miss. HOST: Catie Brown Associate Manager & Producer, Content Development, The IIA GUESTS Asim Fareeduddin, CPA, CISA, CISM, CIPP, CISSP Head of Internal Audit & Assurance, RELX Ashanti Clark, CIA Executive Advisor, FedEx Express Corporation Jasdeep Gill, CIA, CISA, CISM, CFE Senior Manager, Internal Audit & Assurance, RELX Aadesh Gandhre, CIA, CISA Chief Audit Executive, DTCC Chad Bourque, CIA Global Director of Enterprise Risk Management, Gallagher Benefits Services Nam Phong Ho, CIA, CISA, CFE, CRMA, QILM, MBA Former Chief Audit Executive, Glencore / Independent Advisor KEY POINTS: Introduction [00:00:02-00:01:42] Navigating Internal Audit Resistance [00:01:42-00:05:34] Preparing for Difficult Conversations [00:05:34-00:08:05] Emotional Intelligence and Cultural Awareness [00:08:05-00:09:53] Delivering Difficult Audit Findings [00:09:53-00:14:28] Leadership During Challenging Audit Moments [00:14:28-00:16:38] Communicating the "So What" [00:16:38-00:19:42] Active Listening and Stakeholder Trust [00:19:42-00:22:53] Building Real Relationships [00:22:53-00:24:21] Demonstrating Internal Audit's Business Value [00:24:21-00:27:48] Courage and Career Growth in Internal Audit [00:27:48-00:29:51] Internal Audit as a Mission [00:29:51-00:31:52] Reflecting on Value After Every Audit [00:31:52-00:32:48] Sharing Internal Audit Successes [00:32:48-00:33:41] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Discover Internal Audit Certifications May Sale Internal Audit Month Global Awareness Global Internal Audit Standards Vision 2035 Career Center Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
Prodcast: ПоиÑк работы в IT и переезд в СШÐ
В этом выпуске гостья - Татьяна Пугачева, Internal Audit Program Manager в Tesla, которая переехала в США из Беларуси, прошла путь от работы в мотеле и баре до карьеры в одной из самых известных технологических компаний мира.Мы обсудили, как Татьяна оказалась в США после отчисления из университета в Беларуси, почему решила полностью поменять карьерный путь и как выбрала аудит как одну из самых стабильных и востребованных профессий в Америке. Разобрали, как устроено американское образование, зачем многие студенты начинают с community college, как можно сократить стоимость обучения со $180,000 до долга в $26,000 и почему связи университетов с работодателями иногда важнее самого диплома. Поговорили о разнице между accounting и bookkeeping, внутренним и внешним аудитом, карьерном росте в Big Four и зарплатах аудиторов в США. Отдельно затронули работу в Tesla: как проходят интервью, как компания оценивает корпоративные риски, почему аудиторы анализируют даже политические связи Илона Маска и как AI меняет профессию аудитора, не уничтожая ее полностью. Также обсудили, почему фундаментальные профессии остаются устойчивыми несмотря на технологические изменения, как стратегически выбирать карьеру в США и почему образование может стать самым надежным активом в жизни.Татьяна Пугачева (Tatsiana Puhachova) - менеджер программ внутреннего аудита (Program Manager, Internal Audit) в Tesla.LinkedIn: https://www.linkedin.com/in/tpuhachovaСтажировки в США. Диплом в американском вузе - это еще не гарантия получения работы! Дарья Скалицкиhttps://youtu.be/p5t9LPFA5W0***Записаться на карьерную консультацию (резюме, LinkedIn, карьерная стратегия, поиск работы в США)https://annanaumova.comКоучинг (синдром самозванца, прокрастинация, неуверенность в себе, страхи, лень)https://annanaumova.notion.site/3f6ea5ce89694c93afb1156df3c903abТелеграм https://t.me/prodcastUSAИнстаграм https://www.instagram.com/prodcast.usТикТок https://www.tiktok.com/@us.job⏰ Timecodes ⏰00:00 - Начало00:45 - Гость выпуска: Татьяна Пугачева из Tesla01:00 - Переезд из Беларуси и учеба в США01:18 - DePaul vs University of Chicago03:20 - Первые впечатления от Америки05:09 - Сложности адаптации после переезда07:35 - Визовые проблемы и поступление10:09 - Эмиграция, стресс и внутренние перемены15:14 - Финансовые трудности и жизнь студентки20:01 - Почему выбрала DePaul University25:01 - Как устроен accounting и аудит в США29:49 - Разница между accountant и bookkeeper30:03 - Как работодатели смотрят на опыт кандидатов35:03 - Стоимость образования и курсов40:03 - Возраст, учеба и ощущение среди студентов45:00 - Работа в крупных компаниях и McKinsey50:01 - Карьера, рост и корпоративная среда55:02 - Переходы между компаниями и развитие карьеры01:00:00 - Работа в Tesla и внутренняя структура01:05:03 - Что значит уровень директора в США01:10:03 - Судебные процессы и корпоративные риски01:15:08 - Масштаб Tesla и количество сотрудников01:20:01 - Культура компании и личные наблюдения01:25:03 - AI, бизнес и будущее профессий01:30:08 - Советы тем, кто хочет переехать в США
In deze aflevering: • Waarom internal audit veel meer is dan controleren achteraf • Governance, cultuur en menselijk gedrag • De nieuwe Verklaring Omtrent Risicobeheersing (VOR) • De spanning tussen onafhankelijkheid en business partnership • AI en de toekomst van internal audit • ESG en risicobeheersing • Internationale ontwikkelingen via IFAC • Diversiteit en verschillende perspectieven binnen teams • Adviezen voor jonge accountants en auditors Gast: Esther Bosch Chief audit executive en riskmanager Actief binnen IFAC en voormalig voorzitter van de NBA-ledengroep voor intern en overheidsaccountants (LIO) Links: NBA-brochure over de Verklaring omtrent Risicobeheersing (VOR)
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Levy sits down with Reebu George to get practical about one of the most significant shifts underway in internal audit right now: the automation of IT controls. They talk through where this shift is happening, what use cases are proving their value, and how internal audit can lead the conversation rather than wait for the business to figure it out first. HOST: Mike Levy, CIA, CRMA, CISSP CEO, Cherry Hill Advisory GUEST: Reebu George, CISSP, CISA, PMP Audit & Assurance Managing Director, IT Internal Audit Leader, Deloitte & Touche LLP KEY POINTS: Introduction [00:00:02-00:00:47] The Shift Toward Continuous Auditing [00:00:47-00:02:26] How Automation Is Changing IT Controls [00:02:26-00:04:54] Building an Internal Audit Digital Strategy [00:05:39-00:07:09] Where Internal Audit Teams Should Start [00:07:09-00:09:33] Using AI and Automation in Audit Workflows [00:09:33-00:10:04] Earning a Seat at the Table [00:10:04-00:11:35] Developing Talent for Advisory Conversations [00:11:35-00:12:23] Rule-Based Controls and Automation Opportunities [00:12:23-00:13:45] Governance Risks in Automated Controls [00:13:45-00:15:39] Selling the Value of Automation [00:15:39-00:18:37] The Future of Continuous Assurance [00:18:37-00:19:49] Closing [00:19:52-00:20:23] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: IT General Controls Certificate Program Knowledge Centers: Artificial Intelligence Global Internal Audit Standards Vision 2035 Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Ahmed Sharif Hawky and Emmanuel Pascal discuss why greenwashing is no longer just a reputational risk, but also a governance and assurance challenge. Together they break down how greenwashing qualifies as legal misrepresentation, why most control environments are far weaker than leadership realizes, and what a practical audit approach looks like — from mapping sustainability claims across channels to using data analytics and intensity ratios to test what companies report and what they don't. HOST: Ahmed Sharif Shawky, CIA, CPA CEO, SustainGRC GUESTS: Emmanuel Pascal, CIA, CRMA, CFE CEO, Condor Strike Member, Committee of Research and Education Advisors, Internal Audit Foundation KEY POINTS: Introduction [00:00-00:00:50] Defining Greenwashing [00:00:50-00:02:14] Political Backlash vs. Regulatory Reality [00:02:16-00:03:21] Greenwashing as Misrepresentation [00:03:24-00:06:13] Global Greenwashing Regulations [00:06:13-00:07:16] Greenwashing as Value Fraud [00:07:22-00:11:07] Assessing Greenwashing Risk [00:11:14-00:13:49] Green Strategy and Red Flags [00:13:50-00:14:48] Using Data Analytics to Test Sustainability Claims [00:14:48-00:18:10] Building a Strong Control Framework [00:18:13-00:19:27] Internal Audit's Approach to Greenwashing Risk [00:19:27-00:20:58] Training Auditors on Sustainability [00:20:58-00:21:52] DWS Greenwashing Case [00:21:52-00:23:42] 2026 International Conference Promo [00:23:47-00:24:18] Closing [00:24:25-00:24:34] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: 2026 IIA International Conference Knowledge Centers: Environmental, Social, and Governance Global Internal Audit Standards Vision 2035 Global Perspectives & Insights: Sustainability All Things Internal Audit: Unmasking Greenwashing On the Frontlines: Greenwashing and Closing the Authenticity Gap Five Questions: Preventing Greenwashing Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
Join hosts John Salling and Sherri Kropp as they delve into the world of internal audits. Discover the essential role of internal auditing in maintaining compliance, preventing fraud, and ensuring accountability within the City of Fayetteville.
Most internal audit functions are still operating like it's 2010. In the first episode of Embark's new GRC series, Adam Olsen is joined by Allison Bradshaw, Principal and head of Embark's GRC and Internal Audit Services practice, to make the case for a fundamentally different model. The conversation covers what modern IA looks like, how to build the right delivery structure, and how CFOs can measure real return on investment.In this episode:Why compliance-checkbox IA is leaving significant value on the table, and what a risk-based, consultative function looks like insteadCo-sourcing vs. outsourcing: a practical framework for deciding which model fits your organization's size, complexity, and risk profileHow data analytics and AI are shifting IA from sampling transactions to testing entire populations in near-real timeThe emerging demand for IT audit, cybersecurity, and AI governance capabilities, and why most teams can't hire for all of itA framework for measuring IA ROI: prevented costs, recovered value, process improvements, and stakeholder confidenceA real-world co-sourced engagement example where a single year yielded over $1.6M in identified losses and fraud
Welcome to RIMScast. Your host is Justin Smulison, Business Content Manager at RIMS, the Risk and Insurance Management Society. In this episode, Justin interviews the RIMS 2026 Risk Manager of the Year, Jeff Bray, about his award and his career at AMB, which merged with Prologis early in his career. Justin and Jeff discuss how risk management earns a strategic seat at the table, how Jeff revived the ERM Program at Prologis, tying it to the business model, and how cross-functional risk management works at Prologis today. Jeff speaks of resilience in the face of polycrisis and climate risk, and working on what he has control over while being aware of the rest. Jeff shares his excitement for developing the next generation of risk professionals and about the amazing opportunity the risk profession holds for them today. Listen for insight on ERM, resilience, and building relationships. Key Takeaways: [:01] About RIMS and RIMScast. [:14] We hope you are listening to this episode of RIMScast while at RISKWORLD 2026, and we are gently reminding you to download the RIMS Events App to navigate the show successfully! [:29] About this episode of RIMScast. This is our annual Risk Manager of the Year episode. We are delighted to be joined by this year's honoree, Jeff Bray of Prologis. If you are listening to this on its release day of May 4th, you might see him onstage at RISKWORLD. But first… [:59] RIMS Virtual Workshops. The next RIMS-CRMP-FED Exam Prep Course will be on May 13th and 14th. The popular CBCP and RIMS-CRMP Exam Prep Bootcamp will be held from May 18th through the 21st. The next RIMS-CRMP Exam Prep Course will be held on June 9th and 10th. [1:19] Links to registration are in this episode's notes. [1:22] Webinars. On May 14th, Origami Risk will return with a new session, "Future-Proofing Your Risk Program: Keeping Pace with Scale, Complexity, and Visibility." [1:34] On May 21st, GRC returns to present "Is Your Fire Protection Strategy Outdated? Emerging Risks Are Changing the Rules." [1:43] On May 28th, Zurich returns with "From Underwriting To Risk Management: What To Expect From The Growing Demand For Data Center Construction." Register for webinars at RIMS.org/Webinars or through the links in this episode's show notes. [1:58] Folks, RIMS is back on YouTube. Our handle is @RIMSOfficialChannel. We've got plenty of videos there, including RIMScast, RIMScast Canada video podcasts, and other informative and entertaining content from RIMS. Subscribe to the channel today! [2:16] RISKWORLD 2026 is underway in Philadelphia, Pennsylvania! If you are here or on your way, be sure to download the RIMS Events App. It is free and publicly available. This will help you set your agenda and provide ample navigation through the Philadelphia Convention Center. [2:36] RIMS has also released its RISKWORLD Playlist, available through Apple Music and Spotify. Whether you want to get in the zone before RISKWORLD or relive the energy after it, these official RISKWORLD Playlists are available to keep the energy going. [2:53] Links are in this episode's show notes. [2:57] On with the Show! This is our special Risk Manager of the Year episode of RIMScast! This year's honoree is Jeff Bray. [3:08] Jeff is the Senior Vice President and Head of Global Risk Management at Prologis, a global leader in logistics real estate, with 1.3 billion square feet across 20 countries on four continents, and more than 6,500 customers focused on moving goods around the globe. [3:24] That is a lot of responsibility for one person, but don't worry, he's got a mighty team who shoulder it with him. [3:31] We're going to learn all about his work, the leaps and bounds he's made over the last 20 years, his involvement with the Spencer Educational Foundation, and what it takes to succeed in an increasingly uncertain world. We're going to have a lot of fun! Let's get to it! [3:46] Interview! RIMS 2026 Risk Manager of the Year, Jeff Bray, welcome to RIMScast! [4:07] Justin and Jeff met recently for his profile in RIMS Risk Management Magazine. [4:14] This episode is released on Day 1 of RISKWORLD. When people are listening to this, they might be seeing Jeff onstage accepting his award. Jeff says, first and foremost, he is looking forward to RISKWORLD; the award is a nice cherry on top. [4:37] Jeff is 20 years into his career, and he has only missed a few RISKWORLDs. [4:45] Jeff joined AMB Property Corporation in 2005, not knowing anything about risk management and knowing only environmental insurance, a few weeks before Hurricane Katrina. It was trial by fire. Then, Hurricane Rita and Hurricane Wilma hit. It was a transformational year. [5:34] There were two years in a row of serious hurricanes affecting the property insurance market. The challenges AMB had experienced transformed the way the insurance and risk management program has been run ever since. [6:02] AMB merged with Prologis a few years later, following a great financial crisis that occurred in June 2011. [6:32] Jeff says Prologis is an owner of logistics real estate. They don't operate any of the buildings. Jeff's purview is the 1.3 billion square feet of real estate in 20 countries, with around 60,000 assets. [6:47] Prologis has a couple of billion dollars a year of development activity. They have a renewable energy business and a digital infrastructure. [7:32] Jeff says it's critical to see properties first-hand. Warehouses are different in different countries, and seeing them helps solve problems when they arrive. Early on, he attended a captive owners conference in Bermuda, and meeting many peers accelerated his learning. [9:03] Through serving the business, Jeff built trust with senior leaders and the board. Jeff started by figuring out what people wanted or needed and helped them achieve it. He built strong relationships with every group; he's in lockstep with legal, finance, and business teams. [10:33] Jeff's risk team has seven members. He also has two members of the corporate security team. He has worked hard to grow the team as needed. He sees an opportunity with technology to scale the team's capabilities to focus on critical tasks. He's grateful for the team's efforts. [11:49] Risk management is centralized at Prologis. They operate as a consistent global program. Jeff is in San Francisco, with team members in the Bay Area, Denver, and one in Dallas. [12:45] Jeff says he takes advantage of every crisis and pays close attention to every near-miss. It's a reminder that this is why what we do is important. Sometimes it's all hands on deck. What can we do differently next time? [13:35] One big near-miss was a fire that arose from customer operations in a building, which didn't amount to much because the sprinklers operated properly. Jeff participates in Prologis's global safety board. They pay close attention to anything like a contractor injury. [14:06] June is National Safety Month. The Head of Safety of Prologis's Development Team plans Safety Month activities. Every project and team member will be involved. It sends a good message. They make it very clear to every contractor they hire that safety is paramount. [14:49] Justin says the leader of the ASSP will soon be a guest on RIMScast. Safety should be observed every month. Jeff says in the past, safety was something they focused more on when something happened, but now it's ingrained in the way they operate. It's not treated separately. [15:44] Jeff reestablished Prologis's ERM program. His ERM Committee is a sounding board with seven or eight global leads. The members are the Head of Internal Audit, the Head of Info Security, and others, who work closely across the risk register to ask, "What are we missing?" [17:14] The challenge in reactivating the ERM committee was getting the relevance right. For the first meeting or so, they brainstormed. Now it's operating at the right frequency with the right dynamic input. It will continue to evolve in every meeting. [17:55] They meet annually with the Audit Committee, and some years they meet with the Board of Directors. It evolves from the day-to-day Risk Register, working with the business teams. The Audit Committee and the Board are very invested in what the ERM Committee does. [18:34] ERM at Prologis is tied to what's relevant to the CFO, the Chief Legal Officer, and other stakeholders. With the CFO, it's tied to earnings per share and net operating income impact. Jeff is always looking at what the business is looking to accomplish and how ERM can support it. [19:17] A Quick Break! The 2026 Florida RIMS Educational Conference will be held from July 28th through August 1st at the lovely Ritz-Carlton in Naples, Florida. A link to the event is in this episode's show notes. [19:40] Register now for the Second Annual RIMS Texas Regional Conference, to be held from August 10th through 12th at the Grand Hyatt on the San Antonio River Walk. Advance rates are available through June 5th. [19:55] The 11th Annual Chicagoland Risk Forum will return to the Old Post Office on Thursday, September 24th, 2026, in Chicago. Visit ChicagolandRiskForum.org for more information. [20:08] The RIMS Western Regional Conference will be held from October 4th through the 7th in Seattle, Washington. Registration is open, and you can also submit a session. Visit RIMSWesternRegional.com and the link in this episode's show notes for more information. [20:26] Save the dates October 18th through the 21st. That is when the 50th Annual RIMS Canada Conference will be held in Quebec City. Booth sales are already open. The call for educational sessions is open through May 8th. Early-bird registration will open in June. [20:44] Visit RIMSCanadaConference.ca for more information. Also, remember to check out RIMS.org/Canada for our spinoff show, RIMScast Canada, hosted by National Conference Committee Chair, Aaron Lukoni. [20:59] Check RIMS.org for an announcement about the RIMS ERM Conference 2026. It will be up soon! [21:07] Let's Return to Our Interview with RIMS 2026 Risk Manager of the Year, Jeff Bray! [21:24] Justin asks what Jeff loves about RISKWORLD. Jeff loves the people, the interactions in the hallways, even when racing from session to session, and meeting to meeting. There's no better place to meet people and build meaningful relationships over the years. [21:45] Jeff says there's no better place to get apprised of what's coming up in the risk industry and reconnect with our most important relationships. [22:17] Jeff says RISKWORLD is a connection point where a group of risk professionals from around the country can get together. [22:31] Jeff's team members, the Head of Risk and the Head of Claims, have attended RISKWORLD for the last few years. [23:07] Justin asks about cross-functional risk management. Jeff says that he can't imagine a problem crossing their desk that Risk Management can solve solely by themselves, figure out, and move on. Generally, they will engage Legal, HR, and the Business Teams. [23:28] Jeff says that's hugely important to be able to solve problems effectively, and in a way that enables the business. [23:55] Jeff thinks the perspective on risk has changed over time. The needs have changed over time. At the beginning of his time at AMB and Prologis, there was a focus on insurance because they were expanding to new countries and standing up a global program. [24:17] Within 90 days, Hurricanes Katrina, Rita, and Wilma hit, and Jeff was learning about disaster recovery and response. He saw the teams in action and how it can be a competitive advantage if they can get their properties up and running quicker than someone else. [24:37] That's absolutely a competitive advantage to Prologis, and that's been in their DNA ever since. [24:53] Justin asks about Jeff's dashboard. It's a Claims dashboard, created by the Claims team, so Jeff can look at the Claims activity every day. [25:16] Jeff says Prologis retains a bunch of risk itself. It's Prologis's money. It concerns not only Jeff, but also the Finance Team and others. None of them likes surprises. Jeff manages it like a business, managing actual claims against the forecast. [25:53] Jeff says it's been phenomenal. He's asking for more dashboards! [26:08] Jeff discusses the impacts of technological innovation on his role. One of the biggest pieces was onboarding Archipelago, a tool to intake Statement of Value information and other property characteristics and deliver it to an insurance company in a reliable and verifiable way. [26:33] Jeff says during that period, they went through $40 to $50 billion of acquisitions, so Archipelago was a game-changer in a way that insurance companies couldn't believe. [26:48] Prologis would bring on a portfolio in September and was ready for its December renewals with the full Schedule of Values. Jeff says it was about, "What questions am I asking myself, and how do we solve for that?" [27:03] Jeff was looking beyond the Cap Modeling results to what other information he could get out of the data, from the newness of the assets, different specifications, and different protections in place, and quantifying that in a way that was meaningful for the insurers. [27:25] When Prologis onboarded Archipelago, there weren't any other systems available to do what was needed. They were developing something that hadn't been in place yet. Prologis was part of the development team. [27:43] Jeff says the Claims dashboard is driven by Origami, which has been an important partner of Prologis. [27:55] Prologis has always been focused on the combination of good data and leveraging technologies to interpret that data. That's been very important to Prologis. [28:15] Another Quick Break! The Spencer Educational Foundation's Risk Manager on Campus application period is now open, and it will close on June 30th. Grant awardees, colleges, and universities are typically notified in September. [28:42] The Course Development Grant application deadline for Interval Number 2 will be on June 15th, 2026. Award notifications will be sent out in late July. [28:57] General Grant applications will open on May 1st, 2026, and the application deadline is July 30th. Internship Grant applications open on August 15th and close on October 15th. [20:08] Links to each of these grants are in this episode's show notes. Visit SpencerEd.org for more information. [29:17] Let's Conclude Our Interview with RIMS 2026 Risk Manager of the Year, Jeff Bray! [29:43] Jeff says the younger risk professionals are absolutely more well-versed in technology. The challenge is not to let technology become more important than understanding the basics of the business. [30:00] Jeff says you still need to understand what that policy says and what the submission process looks like, so you can get the right outcomes out of the technology. Most of the folks Jeff works with are younger than he is. [30:21] Jeff says what they're doing with AI, dashboards, and other insights is super impressive. They balance that with learning the fundamentals. [30:47] In a new risk professional, Jeff looks first for curiosity and questions. When Jeff hit stagnant parts of his career, he had stopped asking questions, so today, he asks a lot of questions. Curiosity is key to investigating what's happening in the company to solve problems. [31:18] Jeff says connecting the dots is something he still works on today. We live in a complex world. There's generally not one threat or risk that operates in a silo. Risks are connected. Someone who can understand how different risks might be interconnected will be critical. [31:43] Jeff says that being hungry, learning, and striving to do more than the person who started next to you is more important than ever. [32:06] Jeff says polycrisis is an interesting term, and he fully believes in it. He spends a fair amount of time thinking about what he has control over and what he doesn't have control over. Jeff says Prologis doesn't let the polycrisis drive its strategy on a day-to-day basis. [32:45] Jeff says awareness is key, and knowing how you can respond as an organization. [33:02] On mitigation and navigation, Jeff says, it's like being on defense versus offense. Risk mitigation works if it's a very simple solution. Putting a floodwall in a building to prevent flooding is a great mitigation. [33:15] Most risks are not that simple, and they require navigation. They require keeping options open and multiple solutions. Navigation lends itself to how risks evolve and how we respond to those risks. [33:40] Jeff says Prologis is an owner of 1.3 billion square feet of real estate, with two to three percent of the world's GDP flowing through its buildings. Supply chain resilience is key. Prologis focuses on climate risk, but Jeff wants to look at it from more of a resilience perspective. [34:04] Jeff's perspective is about what Prologis should be worrying about, and how that affects how they build a building and how they operate an asset. Climate risk is front-of-mind to this day for many of Prologis's investors. [34:17] Investors want to know what Porlogis is doing about things and how they are looking at exposures. So Prologis has always tried to be on the front end of that discussion with investors. The decisions Prologis makes just need to make good business sense. [34:41] As long as Prologis can communicate, this is a concern, and this is how it translates into a business impact or impacts performance. That remains key, and we are in an environment that is evolving in frequency and severity. It's something Prologis pays close attention to. [35:16] Solar panels are part of Prologis's sustainability goals. Thicker rooftops are needed. Solar panels affect how air conditioning is used and the temperature levels within a building. It affects how Prologis might construct the building to have a better working environment. [35:51] Jeff says it all ties together, which comes back to a more resilient and better-performing portfolio. [36:00] Justin asks about earthquake resilience for new construction. Prologis has a lot of property on the California coast and has been focused on earthquake risk for the life of the company, doing voluntary retro-fittings and seismic upgrades. [36:33] That's not to get reduced insurance premiums but to take steps to reduce interruptions that may occur for Prologis's customers' activities when an earthquake does arise. It's about taking Prologis's objectives and aligning them with the business, not to save premiums. [37:16] Jeff is very excited by the level of abilities he sees in college students. He was recently at Old Dominion for Risk Manager on Campus. This industry has an amazing amount of opportunity. Risk is at the crossroads of finance, operations, legal issues, and HR. [38:27] Jeff's words to students and aspiring risk professionals: "There's an incredible amount of opportunity. What risk strategy means today is very different than what it meant 15 years ago. It's a hidden gem of an industry, still today." [38:44] Justin congratulates Jeff on being named RIMS Risk Manager of the Year 2026. Nobody accomplishes anything by themselves. Is there anyone you want to thank? Jeff says thanking a whole host of folks might take its own podcast. [38:59] Jeff thanks his team across Risk, Resilience, and Claims, and the deep bench of external risk advisors, from broker placement to consulting, technology partnerships, and the insurers. He couldn't do this without all of those team members. He's very grateful for it all. [39:49] Justin says, I look forward to meeting you and seeing you up onstage and cheering you on. I hope we can continue to stay in touch because you've got so much knowledge to share with the global risk community, here through RIMScast. Thank you so much for your time! [40:16] Special thanks again to Jeff Bray, the 2026 RIMS Risk Leader of the Year. We are delighted for him and congratulate him once again. Be sure to check out last week's episode, featuring RIMS Rising Risk Professional, Tyler Vaughan. [40:32] In May, we intend to have Honor Roll Awardee, Emily Buckley, back on RIMScast. Check RIMS Risk Management Magazine for the Awards Digital Edition, which also features profiles on the Chapters of the Year and other special awards. More winners will be on RIMScast in 2026. [40:55] I hope everyone who's listening in Philadelphia at RISKWORLD is having a blast! Next week's episode will feature interviews recorded live while in Philadelphia. Let's relive the magic! [41:08] Plug Time! You can sponsor a RIMScast episode for this, our weekly show, or a dedicated episode. Links to sponsored episodes are in the show notes. [41:37] RIMScast has a global audience of risk and insurance professionals, legal professionals, students, business leaders, C-Suite executives, and more. Let's collaborate and help you reach them! Contact pd@rims.org for more information. [41:55] Become a RIMS member and get access to the tools, thought leadership, and network you need to succeed. Visit RIMS.org/membership or email membershipdept@RIMS.org for more information. [42:13] Risk Knowledge is the RIMS searchable content library that provides relevant information for today's risk professionals. Materials include RIMS executive reports, survey findings, contributed articles, industry research, benchmarking data, and more. [42:29] For the best reporting on the profession of risk management, read Risk Management Magazine at RMMagazine.com. It is written and published by the best minds in risk management. [42:43] Justin Smulison is the Business Content Manager at RIMS. Please remember to subscribe to RIMScast on your favorite podcasting app. You can email us at Content@RIMS.org. [42:55] Practice good risk management, stay safe, and thank you again for your continued support! Links: RISKWORLD Playlists:
Guest Bio: Michelle Wagner is Vice President and Head of Internal Audit at DocuSign, where she leads global audit strategy and helps the organization strengthen governance, risk management, and internal controls while supporting a culture of integrity and accountability. With more than 25 years of experience across consulting and industry, Michelle has held leadership roles at Deloitte, Costco, and SAP, where she led large audit portfolios, built high-performing teams, and drove governance and risk transformation initiatives across complex global organizations. Michelle is known for her practical, people-centered approach to risk leadership and for translating complex risk insights into clear, actionable guidance. She is passionate about mentoring emerging leaders and helping organizations move from reactive risk management to proactive, insight-driven decision-making. Show Notes: Risk is often framed as technical work, but at its core, it is deeply human. In this episode of Great Women in Compliance, Dr. Hemma Lomax sits down with Michelle Wagner, Head of Internal Audit at DocuSign, to explore how curiosity, empathy, and partnership help organizations manage risk more effectively and build stronger ethical cultures. Michelle shares insights from a career spanning consulting and global leadership roles, reflecting on the moments that shaped her leadership philosophy and the lessons she has learned about influencing without authority, building trust, and helping teams see risks as opportunities to improve rather than problems to avoid. Together, they discuss the evolving role of internal audit, the importance of collaboration across risk functions, and how emerging technologies such as AI can help leaders identify patterns and generate insights while reinforcing the need for human judgment. This conversation is a reminder that great risk leaders don't just protect organizations — they help them succeed. Episode highlights: Why risk management is fundamentally a leadership discipline Lessons from moving from consulting to executive leadership roles What makes an internal audit function truly valuable How audit, compliance, and business teams can partner effectively The role of curiosity and psychological safety in surfacing risks Michelle's perspective on AI and the future of risk management Leadership lessons from mentoring and building teams
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Adam Ross speaks with Vipul Patel about how organizations can better prepare for ransomware attacks. They talk through what goes wrong in the first hours of an attack, what smart preparation looks like, and where traditional audit approaches fall short when a business is in crisis mode. HOST: Adam Ross, CIA, CISA Partner and Internal Audit Services Leader, Grant Thornton GUEST: Vipul Patel, CISA Audit and Assurance Managing Director, IT Internal Audit Leader, Deloitte & Touche LLP KEY POINTS: Introduction [00:00:02-00:00:27] Common Mistakes in Ransomware Response [00:00:27-00:02:14] Building Crisis Communication Plans [00:02:20-00:03:03] A Simple Incident Response Runbook [00:03:03-00:05:03] Internal Audit's Role Before an Incident [00:05:03-00:07:05] Stress Testing and "What If" Scenarios [00:07:05-00:08:01] Tabletop Exercises and Cross-Functional Readiness [00:08:02-00:10:03] Partnering With the CISO and Management [00:10:03-00:11:15] Lessons Learned After Ransomware Incidents [00:11:15-00:14:05] Governance Changes After an Attack [00:14:55-00:16:55] Cyber Risk as a Business Issue [00:16:55-00:17:16] Traits of Organizations That Respond Well [00:17:20-00:19:44] Final Advice for Internal Auditors [00:19:44-00:20:56] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Cybersecurity Topical Requirement Course: Detecting, Mitigating and Responding to Global Ransomware Attacks Articles: A Ransomware Playbook IIA Certificates: IT General Controls Certificate Knowledge Centers: Artificial Intelligence Vison 2035 IIA Courses: Fundamentals of IT Auditing Become a Certified Internal Auditor (CIA) CIA Challenge Exam Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
This week, internal audit leader and tax expert Michelle V. joins the show. Michelle brings a unique perspective, coming from a tax background into internal audit leadership—an area where tax expertise isn't always front and center. She shares insights into her transition from leading tax to stepping into a broader internal audit role, and how that experience shapes the way she approaches emerging topics today. The conversation centers on upcoming guidance around effective tax rate requirements set to take effect in 2026. Michelle breaks down why this topic matters, what audit teams should be paying attention to, and how even those without a tax background can better understand and communicate the implications—whether within their organizations or at the board level. This is a quick, practical episode packed with insights that can help auditors stay ahead of an important, and often overlooked, area. Be sure to connect with Michelle on LinkedIn. 6:34 - Utilizing LLMs for report research 11:06 – ASC guidance effective tax rate 2026 15:33 – Prioritizing Tax Data Accuracy in the Audit Plan 17:43 – What's Driving ASC guidance 19:18 – Map Your Current Footnote to New Requirements 23:27 – Final Thoughts Be sure to connect with Mark on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
The Institute of Internal Auditors Presents: All Things Internal Audit What does it take to move an internal audit function from being risk traditionalists to risk strategists, and what's quietly holding most teams back? In this companion episode to Internal Auditor magazine's "Becoming a Risk Strategist" article, host Erin Banet sits down with Jess Rodgers to examine why the traditional audit model no longer fits the world we're operating in, and what leaders need to unlearn before they can change it. You'll hear three assumptions most audit teams are still running on, a real-world example of transformation done right, and one concrete action CAEs can take in the next six months to start shifting their function's standing with leadership. HOST: Erin Banet, CPA Chief Audit and Risk Officer, Humana GUEST: Jess Rodgers, CIA, CPA Global Internal Audit Leader, EY Vice Chair, Finance, IIA North American Board KEY POINTS: Introduction [00:00:02 - 00:00:25] What Defines a Risk Traditionalist Function [00:00:51 - 00:02:31] Why the Traditional Model No Longer Works [00:02:37 - 00:04:22] Assumptions Internal Audit Must Unlearn [00:04:28 - 00:06:39] The Mindset Shift Required for Transformation [00:06:44 - 00:08:44] A Real-World Transformation Example [00:08:44 - 00:11:10] Where Traditional Approaches Fall Short [00:11:10 - 00:13:36] Measuring Success as a Risk Strategist [00:13:36 - 00:15:27] Decision Velocity in Practice [00:15:27 - 00:17:25] Common Barriers to Transformation [00:17:25 - 00:19:23] One Action Leaders Can Take Now [00:19:23 - 00:21:03] Advice for CAEs Navigating the Transition [00:21:22 - 00:23:06] Driving Change Within Audit Teams [00:23:06 - 00:24:36] Closing Thoughts [00:24:36 - 00:25:05] Visit The IIA's website or YouTube channel for related topics and more. RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Becoming a Risk Strategist — Internal Auditor Magazine (April Issue) Global Internal Audit Standards Vison 2035 GTAG: Continuous Auditing and Monitoring Learning Solutions: Agile Auditing Global Guidance: Developing a Risk-Based Internal Audit Plan, 2nd Edition Learning Solutions: Fundamentals of Risk-based Auditing Become a Certified Internal Auditor (CIA) Risk in Focus 2026 EY Global Risk Transformation Study Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
Leeann Kennedy, Director of Internal Audit at Irish Revenue
The Institute of Internal Auditors Presents: All Things Internal Audit Five women. Five careers. Decades of experience across some of the world's largest organizations. They didn't just find their way into this profession. They helped shape it. In this companion episode to Internal Auditor magazine's "Leading the Way" article, five internal audit leaders sit for a conversation that's long overdue: Erin Banet, Doris Myles, Chrysti Ziegler, Dominique Vincenti, and Beili Wong. Together, they cover the careers they built, the rooms they walked into alone, and what they'd tell every woman in this profession today. You'll hear why preparing thoroughly is not the same as having permission to speak. You'll learn what it looks like to walk into a high-stakes conversation as a professional first, not as a woman managing a narrative. You'll hear the bad advice one of them ignored, and what happened when she did. And you'll discover what sponsorship really means when it's the difference between being mentored and having someone actively advocate on your behalf. HOST: Catie Brown Associate Manager & Producer, Content Development, The IIA GUESTS: Erin Banet, CPA Chief Audit and Risk Officer, Humana Chrysti Ziegler, CIA, CRMA, CFE Chief Auditor, Citgo Petroleum Corporation Dominique Vincenti, CIA, CRMA Immediate Past CAE, Uber Board Member, Loft Orbital Beili Wong, CIA, CISA, CPAComptroller General, Ontario Treasury Board SecretariatDirector, Global Guidance, IIA Global Board of Directors Doris Myles, CIA, CPA Director of Internal Audit, St. Jude Children's Research Hospital KEY POINTS: Introduction: Women's Voices in Internal Audit [00:00:02 – 00:01:33] Career Journeys Into Internal Audit [00:02:12 – 00:09:01] Finding Your Voice in High-Stakes Conversations [00:09:01 – 00:12:14] Confidence vs. Permission [00:12:21 – 00:15:23] Owning Expertise and Leading the Narrative [00:15:23 – 00:18:23] Early Career Challenges and Speaking Up [00:18:23 – 00:20:07] Progress of Women in Internal Audit Leadership [00:20:07 – 00:21:24] Redefining Leadership Through Empathy and Relationships [00:21:24 – 00:23:51] Women as Strategic Leaders, Not Just Technicians [00:23:51 – 00:24:57] The Value of Sponsorship vs. Mentorship [00:26:25 – 00:29:21] Creating Opportunities and Building Networks [00:29:21 – 00:31:51] Balancing Career and Personal Life [00:31:51 – 00:33:57] Final Reflections: Passion, Risk, and Owning Your Space [00:34:03 – 00:36:02] Closing Remarks [00:36:02 – 00:36:45] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Leading the Way — Internal Auditor Magazine (April Issue) How Personal Branding Benefits Female Leaders Building a Better Auditor: Celebrating Women Who Paved the Way Internal Auditing Competency Framework Vison 2035 Become a Certified Internal Auditor (CIA) Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
The Institute of Internal Auditors Presents: All Things Internal Audit In this companion episode to the Global Best Practices' Elevating Internal Audit Communication With the Board, Rob Clark Jr. and Fábio Pimpão discuss how internal auditors can communicate more effectively with boards and executive leaders. They explore how to simplify complex risks, use storytelling to drive impact, and align messaging with what boards care about, from financial and reputational risk to strategic priorities. The conversation also covers practical tips for preparing for board presentations, leveraging AI, and building trusted relationships across the organization. HOST: Rob Clark Jr., CIA, CCEP, CBM Chief Audit Executive, City of Hope GUEST: Fábio Pimpão, CIA, CRMA, CCSA Director, Internal Audit, Whirlpool Corporation Director, Professional Certifications, IIA Global Board of Directors KEY POINTS: Introduction [00:00:40 - 00:01:46] How Board Expectations Have Evolved [00:01:46 - 00:03:32] Simplifying Complex Risks for the Board [00:04:19 - 00:06:00] Why Communication Is a Critical Audit Skill [00:06:00 - 00:07:55] Using AI to Improve Clarity and Messaging [00:07:17 - 00:08:13] Storytelling as a Tool for Impact [00:13:15 - 00:16:05] Preparing for Board Presentations [00:16:05 - 00:18:59] Translating Technical Issues into Business Impact [00:21:26 - 00:25:30] Focusing on Financial and Reputational Risk [00:25:30 - 00:26:55] Building Trusted Relationships Across the Organization [00:27:00 - 00:31:35] Final Advice: Priorities, Storytelling, and Driving Impact [00:31:35 - 00:32:38] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Best Practices: Elevating Internal Audit Communication With the Board Global Internal Audit Standards Course: Using the Standards to Communicate Clearly with the Board Vison 2035 Global Audit Committee Center Become a Certified Internal Auditor (CIA) 2026 Analytics, Automation and AI Virtual Conference Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Daniel McCarville speaks with Bill Bensing about shadow IT and why it continues to emerge inside organizations. They explore how shadow IT often signals innovation rather than just risk, and how internal auditors can help organizations balance experimentation, governance, and operational control. The conversation also introduces a practical framework for understanding how ideas move from exploration to validation and ultimately into formal operations. HOST: Daniel McCarville Associate Vice President of Internal Audit Arch Capital GUEST: Bill Bensing Chief Technologist and Co-Founder Attestify KEY POINTS: Introduction [00:00:02-00:00:39] What Is Shadow IT? [00:00:39-00:01:56] Why Shadow IT Exists in Organizations [00:02:13-00:05:08] Shadow IT as a Source of Innovation [00:05:33-00:08:03] Why Small Internal Solutions Can Deliver Big Value [00:06:10-00:07:33] The Role of Shadow IT in Validating Ideas [00:09:14-00:10:56] Why Innovation Often Fails to Take Hold [00:12:41-00:14:00] How Leaders Can Enable Innovation Safely [00:14:00-00:16:54] Building Communities and Internal Flywheels of Innovation [00:17:00-00:18:55] Developing Internal Innovation Teams [00:19:08-00:21:24] Why Experimentation and Imperfection Are Necessary for Innovation [00:21:59-00:22:59] How Auditors Should Rethink Shadow IT Risk [00:23:02-00:24:17] The Exploration-Validation-Operation Model [00:24:17-00:28:07] Internal Audit's Role Across the Innovation Lifecycle [00:28:07-00:31:11] Addressing Shadow IT Risks Without Stifling Innovation [00:32:29-00:35:32] Why Building Tools Strengthens Career Growth [00:37:11-00:39:04] Learning Principles vs. Learning Tools [00:39:21-00:41:51] How Auditors Can Encourage Innovation While Maintaining Controls [00:41:59-00:46:30] Final Thoughts: Enabling Coordination Across the Three Lines [00:47:39-00:50:14] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards IIA Certificates: IT General Controls Certificate Knowledge Centers: Artificial Intelligence Vison 2035 Become a Certified Internal Auditor (CIA) IIA Courses: Fundamentals of IT Auditing Combined Assurance 2026 Analytics, Automation and AI Virtual Conference The Big Idea: Shadow AI Isn't Just a Sign of Control Gaps Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
In this episode of The Quality Hub, Chatting with ISO Experts, host Xavier Francis is joined by Core Business Solutions consultant Yarelis Rios to explore the ISO 9001 internal audit process and its real purpose within a quality management system. Drawing on over two decades of experience in engineering and quality leadership, Yarelis explains how internal audits should go beyond simple compliance checks to evaluate process effectiveness, identify risks, and uncover opportunities for continual improvement. The discussion covers how auditors can shift from a “policing” mindset to a collaborative, value-adding approach, how leadership and risk-based thinking are evaluated, and the differences between nonconformities, opportunities for improvement, and observations. Listeners will gain practical insights on using internal audit results to strengthen decision-making, support management review, and drive long-term organizational performance. Helpful Resources: How is ISO 9001 Implemented?: https://www.thecoresolution.com/how-is-iso-9001-implemented For All Things ISO 9001:2015: https://www.thecoresolution.com/iso-9001-2015 Contact us at 866.354.0300 or email us at info@thecoresolution.com A Plethora of Articles: https://www.thecoresolution.com/free-learning-resources ISO 9001 Consulting: https://www.thecoresolution.com/iso-consulting
This week, our guest is Anthony Pugliese, President and CEO of the Institute of Internal Auditors. Anthony joins the show as he approaches his five-year anniversary leading the IIA, reflecting on the major milestones and progress the organization has made during that time. He shares a look back at key initiatives from the past five years and discusses what the next phase could look like for the profession. We also talk about several recent research efforts, including the 2026 Risk in Focus survey and the joint report with AuditBoard on AI driven fraud. Anthony highlights a few key trends auditors should be watching, particularly as organizations navigate emerging technology risks and evolving expectations around governance and oversight. Finally, Anthony explains two initiatives aimed at strengthening the future of the profession: the Global Audit Committee Center, which supports stronger engagement with audit committees, and VisionU, a development program designed for new and aspiring chief audit executives. Be sure to connect with Anthony on LinkedIn. 6:02 - AI Tips 11:03 - 5 Years as IIA President 14:32 - Strategy and the New Internal Audit Standards 14:32 - Why "Simple" Implementations Rarely Actually Simple 17:40 - Key Insights from Risk in Focus 2026 and the AI Fraud Report 21:50 - AI Literacy and Training in Internal Audit 24:26 - The Audit Committee Center 27:54 - How to Join the Audit Committee center 33:25 - Experienced CAE resources 35:35 – Final Thoughts 38:26 - Best advice for CAEs from Anthony Pugliese Be sure to connect with Mark on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Antonio Cacciapuoti and Alessandro Casarotti unpack the ethical challenges of artificial intelligence in internal audit and anti-financial crime. They discuss AI hallucinations as a risk to be governed, not eliminated, and examine why governance, accountability, and human judgment are central to ethical AI. HOST: Antonio Cacciapuoti, CIA, CAMS Head of Internal Audit, Eurizon Capital Vice President, IIA Luxembourg GUEST: Alessandro Casarotti Director, Forensic & Anti-Financial Crime, PwC Luxembourg KEY POINTS: AI Hallucinations as a Governance Risk (00:00:28 – 00:02:46) How AI Developers Build Ethical Safeguards (00:02:50 – 00:06:10) Human Judgment and Ethical Decision-Making in AI (00:06:14 – 00:09:26) Automation, Accountability, and Ethical Responsibility (00:09:26 – 00:10:49) Global Approaches to AI Regulation (00:10:49 – 00:14:52) Why "Human in the Loop" Is Necessary but Not Sufficient (00:14:52 – 00:19:10) Strengthening Governance and Risk Controls for AI (00:19:10 – 00:21:01) Using AI in Anti-Financial Crime Investigations (00:21:01 – 00:24:12) How Fraudsters Attempt to Bypass AI Safeguards (00:24:12 – 00:27:44) The Future Relationship Between Internal Auditors and AI (00:27:44 – 00:31:17) Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Domain II: Ethics and Professionalism Knowledge Centers: Artificial Intelligence Vison 2035 Become a Certified Internal Auditor (CIA) 2026 Analytics, Automation and AI Virtual Conference Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Jacka and Tshepo Mofokeng tackle one of the most common questions internal auditors face: Who audits the auditors? They break down how the quality assurance and improvement program (QAIP), professional standards, peer reviews, and self-regulation protect the integrity of the profession. They discuss how quality assurance strengthens credibility with boards, builds trust with stakeholders, and positions internal audit as a strategic advisor. HOST: Mike Jacka, CIA, CPA, CPCU, CLU Chief Creative Pilot at Flying Pig Audit, Consulting, and Training Solutions GUEST: Tshepo Mofokeng, CIA, CRMA CAE, Sefako Makgatho Health Sciences University Global Board of Directors, The IIA KEY POINTS: Introduction: Who Audits the Auditors? [00:00:06–00:01:23] What QAIP Really Means and Why It Matters [00:01:29–00:02:43] The Role of Standards in Professional Legitimacy [00:03:05–00:03:58] Explaining Self-Regulation to the Board vs. Management [00:04:02–00:06:06] Addressing Defensiveness and Educating Peers [00:06:52–00:08:10] Moving from Compliance to Credibility in Quality Reviews [00:08:43–00:11:28] Measuring Impact, Not Just Audit Volume [00:12:01–00:13:39] Marketing Internal Audit's Value Through Quality [00:14:02–00:14:30] Finding Time for Quality Assurance Work [00:14:40–00:15:22] Real-World Example: How Peer Review Strengthened Trust [00:15:24–00:17:48] When Weak Self-Regulation Damages Trust [00:17:52–00:20:48] The Future of QAIP and Vision 2035 [00:21:02–00:23:19] Internal Audit's "Superpower" with the Board [00:23:21–00:25:11] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Quality Assurance and Improvement Program Vison 2035 Become a Certified Internal Auditor (CIA) 2026 Analytics, Automation and AI Virtual Conference Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
According to the OIG, EPA regions underreported improper and unknown payments in the SRF program by tens of millions of dollars, driven by documentation gaps and incomplete reporting. The findings point to weaknesses in the agency's largest funding stream and the controls meant to protect it. We walk through the implications with Devon Padula from the EPA Office of Inspector General.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
In Episode 78 of Audit Bites, host Rob Berry dives deep into one of the most common sources of audit frustration: why internal audit strategic plans so often derail.And what you can do to make yours work.Drawing from real-life stories, behavioral psychology, and years of experience, Rob Berry breaks down the seven key reasons audit plans fall apart.We'll talk about:The dangers of self-centered strategic planning and how to align with organizational objectivesWhy "trusted advisor" is more than a buzzwordHow to combat the planning fallacy and keep your plan aliveThe trap of overengineering your frameworks and keeping objectives simple and actionableThe importance of forward-looking audits over reactive, backward-focused onesCritical communication techniques to inspire, engage, and involve your audit team and stakeholdersEnsuring your strategy is resourced for reality, not just wishful thinkingWhether you're a Chief Audit Executive, audit manager, or aspiring professional, this episode is full of bite-sized insights you can immediately apply to your strategic planning process.Ready to level up your internal audit function?Listen now, share with your team, and use this episode as a discussion guide at your next planning meeting.For more resources, more courses, or to connect with Rob for training and speaking, visit www.thatauditguy.com.Don't forget to subscribe, leave a review, and tell your fellow auditors about the show.
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Scott Madenburg and Sanjay Vadlamani talk trust; and why it's the defining currency of internal audit. From hyper-growth environments to large, mature organizations, they discuss how audit teams can build credibility, and deliver value without slowing the business down. Through real-world use cases; including AI-assisted code reviews, ERP implementations, and building an internal audit function from scratch, they share practical examples of how trust enables earlier insights, stronger controls, and a true seat at the table. HOST: Scott Madenburg, CIA, CISA, CRMA Founder and President, ARC Hybrid Corporation GUEST: Sanjay Vadlamani, CIA, CISA, CISM, CRISC Senior Manager, Internal Controls, PayJoy KEY POINTS: Defining Trust in Internal Audit [00:01:27 – 00:03:17] Holistic Risk and Connected Controls [00:03:55 – 00:07:01] Bridging the Gap Between Audit and Leadership [00:07:15 – 00:10:18] Small vs. Large Organization Trust Challenges [00:11:45 – 00:13:56] High-Growth Tension: Will Audit Slow Us Down? [00:14:14 – 00:16:51] AI-Assisted Code and "Slow Down to Speed Up" [00:17:01 – 00:18:53] Building Trust from Scratch in a Developing Organization [00:19:09 – 00:23:19] Early Insight Through ERP Implementation [00:23:49 – 00:26:02] Rolling Up Sleeves: Creating SOPs and Process Improvements [00:26:25 – 00:28:35] Where Audit Can Undermine Trust [00:29:28 – 00:33:16] Audit Committee Alignment and Expectation Management [00:33:16 – 00:36:44] The Next 6–12 Months: AI Literacy and Critical Thinking [00:37:00 – 00:40:52] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Resources: Governance Course: Building Stakeholder Relationships Course: Effective Communication and Conflict Resolution for Internal Auditors GAM 2026 Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
This week on The Audit Podcast, our guest is Aadesh Gandhre, Chief Audit Executive at DTCC. Aadesh shares his perspective on reshaping the perception of internal audit, both inside organizations and across the profession. Drawing on his background in technology and innovation, he explains why internal audit must move away from being seen as a spotlight that hunts for findings and instead become a lighthouse that helps organizations navigate risk and change. We talk about servant leadership and how small cultural shifts, such as celebrating wins, encouraging experimentation, and reframing failure as learning, can unlock innovation within audit teams. Aadesh also walks through how his team is using gamification, internal recognition, and creative engagement to build a stronger audit brand and a more motivated global workforce. Be sure to connect with Aadesh on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 3:00 – Practical AI use cases 10:30 – The servant leadership mindset 14:55 – Scaling this approach based on team size 16:30 – Building the internal audit brand 26:40 – Bringing innovation into internal audit 33:12 – Making innovation a priority in the office 40:00 – Staying current with tools and resources 44:32 – The freeze–unfreeze–refreeze change management model 49:32 – Final thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
Your first 100 days in Internal Audit can define your entire career.In this episode, internal audit storyteller Benjamin Moulder explains why early perception is everything, how “GPA starts at zero,” and what new auditors must do to build credibility and trust.Work ethic, communication, networking, and certifications, we covered it all.
Key emerging risks include cybersecurity (41%) and Generative AI (Gen AI) (35%), both of which present challenges in skill development and retention. The growing reliance on external providers reflects these gaps. In two years, strategic risk has fallen 10% as technological advancements have shifted auditors' attention away from strategy. So what are the top concerns? Tim Lietz, National Practice Leader Internal Audit Risk & Compliance at Jefferson Wells, joins Business Security Weekly to discuss the shifting priorities for internal audit leaders, with technology, business transformation and digitization remaining central amid rising economic uncertainty. This reflects the broader economic challenges and uncertainties that organizations are facing in the current environment. Tim will discuss the need for enhanced skills inAI, cybersecurity and digital transformation and why Internal Audit is increasingly seen as a strategic partner in navigating transformation within their organizations. Segment Resources: - https://www.jeffersonwells.com/en/internal-audit-report-2025 In the leadership and communications segment, Conventional Cybersecurity Won't Protect Your AI, Will Cybersecurity Budgets Increase in 2026?, To Execute a Unified Strategy, Leaders Need to Shadow Each Other, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-431
Key emerging risks include cybersecurity (41%) and Generative AI (Gen AI) (35%), both of which present challenges in skill development and retention. The growing reliance on external providers reflects these gaps. In two years, strategic risk has fallen 10% as technological advancements have shifted auditors' attention away from strategy. So what are the top concerns? Tim Lietz, National Practice Leader Internal Audit Risk & Compliance at Jefferson Wells, joins Business Security Weekly to discuss the shifting priorities for internal audit leaders, with technology, business transformation and digitization remaining central amid rising economic uncertainty. This reflects the broader economic challenges and uncertainties that organizations are facing in the current environment. Tim will discuss the need for enhanced skills inAI, cybersecurity and digital transformation and why Internal Audit is increasingly seen as a strategic partner in navigating transformation within their organizations. Segment Resources: - https://www.jeffersonwells.com/en/internal-audit-report-2025 In the leadership and communications segment, Conventional Cybersecurity Won't Protect Your AI, Will Cybersecurity Budgets Increase in 2026?, To Execute a Unified Strategy, Leaders Need to Shadow Each Other, and more! Show Notes: https://securityweekly.com/bsw-431
Key emerging risks include cybersecurity (41%) and Generative AI (Gen AI) (35%), both of which present challenges in skill development and retention. The growing reliance on external providers reflects these gaps. In two years, strategic risk has fallen 10% as technological advancements have shifted auditors' attention away from strategy. So what are the top concerns? Tim Lietz, National Practice Leader Internal Audit Risk & Compliance at Jefferson Wells, joins Business Security Weekly to discuss the shifting priorities for internal audit leaders, with technology, business transformation and digitization remaining central amid rising economic uncertainty. This reflects the broader economic challenges and uncertainties that organizations are facing in the current environment. Tim will discuss the need for enhanced skills inAI, cybersecurity and digital transformation and why Internal Audit is increasingly seen as a strategic partner in navigating transformation within their organizations. Segment Resources: - https://www.jeffersonwells.com/en/internal-audit-report-2025 In the leadership and communications segment, Conventional Cybersecurity Won't Protect Your AI, Will Cybersecurity Budgets Increase in 2026?, To Execute a Unified Strategy, Leaders Need to Shadow Each Other, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-431
Key emerging risks include cybersecurity (41%) and Generative AI (Gen AI) (35%), both of which present challenges in skill development and retention. The growing reliance on external providers reflects these gaps. In two years, strategic risk has fallen 10% as technological advancements have shifted auditors' attention away from strategy. So what are the top concerns? Tim Lietz, National Practice Leader Internal Audit Risk & Compliance at Jefferson Wells, joins Business Security Weekly to discuss the shifting priorities for internal audit leaders, with technology, business transformation and digitization remaining central amid rising economic uncertainty. This reflects the broader economic challenges and uncertainties that organizations are facing in the current environment. Tim will discuss the need for enhanced skills inAI, cybersecurity and digital transformation and why Internal Audit is increasingly seen as a strategic partner in navigating transformation within their organizations. Segment Resources: - https://www.jeffersonwells.com/en/internal-audit-report-2025 In the leadership and communications segment, Conventional Cybersecurity Won't Protect Your AI, Will Cybersecurity Budgets Increase in 2026?, To Execute a Unified Strategy, Leaders Need to Shadow Each Other, and more! Show Notes: https://securityweekly.com/bsw-431
Is your audit department too focused on compliance and missing out on business strategy? In Episode 72 of Audit Bites, host Rob Berry examines why internal auditors often find themselves trapped in the world of checklists and regulatory paperwork—while overlooking opportunities to truly impact business growth.Drawing from three decades of experience, Rob Berry shares real-life stories and actionable strategies auditors can use to break free from the “compliance bubble.” Learn the crucial difference between being a compliance cop and a strategic advisor, why business acumen is key, and how your team can add tangible value to the organization.Key topics covered:Why compliance is comfortable but business strategy is riskierMoving from rule enforcer to valued business partnerHow asking “why” leads to better audit outcomesThe importance of business acumen for auditorsHow reframing audit findings can foster real improvementsYou'll also hear insights on balancing compliance with strategic input, involving internal audit in decision-making, and ways to measure audit success beyond just findings. Plus, Rob Berry introduces Audit Leverage, his new AI-powered tool for internal auditors, and answers listener questions about audit reporting and stakeholder value.Ready to evolve your audit role?Listen now, subscribe, and visit Audit Leverage for next-level AI tools for auditors. For more resources, training, and merch, check out www.thatauditguy.com.
The Institute of Internal Auditors Presents: All Things Internal Audit Deepfakes are reshaping fraud, trust, and evidence, and challenging what organizations can rely on as "proof." In this episode, Andrew Guasp speaks with Corey Chadderton about how AI-generated media is being used to impersonate leadership and bypass controls, why the barriers to entry have collapsed, and what internal auditors must do to strengthen governance, training, and response as these risks accelerate into 2026. HOST:Andrew Guasp, CIA, CFE Senior manager, Standards & Professional Guidance, The IIA GUEST:Corey Chadderton, IAP Internal Auditor, Barbados Water Authority KEY POINTS: Introduction to Deepfakes and Audit Risk [00:00:02–00:00:40] What Are Deepfakes and Why Auditors Must Pay Attention [00:00:40–00:02:40] How Deepfake Technology Works (Without Becoming a Technical Expert) [00:02:50–00:04:10] Deepfakes as a "Force Multiplier" for Fraud [00:04:20–00:06:22] Real-World Deepfake Fraud and Governance Failures [00:06:24–00:08:36] Reputational Risk, Content Monitoring, and Trust Breakdown [00:08:36–00:09:32] Where Organizations Are Most Vulnerable Today [00:09:51–00:12:59] Applying Cyber Testing Techniques to Deepfake Risk [00:13:10–00:13:55] Red Flags and Indicators of Manipulated Media [00:14:04–00:16:10] The Power of the Pause and Training Against Urgency Attacks [00:16:13–00:18:22] Limits of Deepfake Detection Tools and the Human Factor [00:18:28–00:22:01] Professional Skepticism Beyond the Audit Function [00:22:01–00:23:51] Internal Audit's Advisory Role in Policies and Incident Response [00:24:02–00:27:14] Staying Ahead Through Continuous Risk Assessment [00:27:23–00:30:04] Closing Thoughts [00:30:04–00:30:19] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: GAM 2026 AI Knowledge Centers CEO Message: Combating Deepfakes Global Internal Audit Standards Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
In corporate finance, we often focus on balance sheets, cash flow, and NPV. However, there is an "invisible factor" that dictates whether those numbers hold up: Corporate Culture. While it doesn't have a line item, culture acts as either a precision tool for financial discipline or a toxic liability that destroys enterprise value.In this episode of Corporate Finance Explained, hear how to move culture from the HR office to finance, exploring how trust, psychological safety, and accountability translate into hard dollars and cents.The 4 Financial Levers of CultureA strong culture isn't just about "feeling good" it's a performance multiplier that impacts the bottom line through four direct channels:Productivity & Execution: High-trust cultures move with incredible velocity. By cutting through bureaucratic "sign-off" layers and blame-avoidance, high-trust teams can reduce decision cycle times by up to 40%, accelerating time-to-market.Decision-Making Quality: Healthy cultures encourage "robust debate." When employees feel safe to voice concerns (Psychological Safety), leadership avoids the catastrophic blind spots that lead to failed mergers or flawed product launches.Cost of Human Capital: Employee turnover is a massive recurring expense. Replacing an employee can cost 50% to 150% of their salary, but the hidden costs—lost institutional knowledge and training dips—are even higher.Risk Management & Compliance: Fear-based cultures suppress bad news. A culture that encourages surfacing risks early lowers the company's risk profile, directly reducing the Cost of Capital (the interest rates you pay) demanded by lenders.Culture in Strategy: Accuracy, Discipline, and InnovationCulture fundamentally changes how a company executes its financial planning and growth:Forecast Accuracy: Transparent cultures provide cleaner, earlier data. Surfacing a risk is rewarded, leading to fewer "end-of-quarter" surprises.Cost Discipline: Cultures of high accountability drive Zero-Based Budgeting (ZBB), moving away from "entitlement spending."Innovation: Real innovation requires the safety to fail. If failure is punished, employees only pursue safe, incremental ideas, stifling disruptive growth.Resilience: During market shocks, trust enables rapid cost-cutting and resource reallocation that low-trust competitors cannot match.Case Studies: Triumphs and TragediesNetflix (Success): Their "Freedom & Responsibility" model enabled massive capital shifts from DVDs to streaming via extreme strategic agility.Google (Success): Psychological safety powers an R&D engine that prunes failing projects early, saving billions in "sunk costs."WeWork (Failure): A culture of unchecked exuberance ignored financial controls, erasing tens of billions in paper value.Theranos (Failure): Suppression of dissent led to massive misstatements and total corporate obliteration.The Finance Professional's Cultural DashboardFinance teams should track cultural health using these granular data indicators:Turnover by Function: High churn in Internal Audit or Compliance is a massive red flag. Forecasting Behavior: Are teams "padding" budgets to create easy beats? This is a symptom of low trust. Project Delivery Metrics: Consistent delays in cross-functional handoffs often signal a collaboration problem, not a funding one. Ethical Indicators: Spikes in whistleblower reports or audit findings are leading indicators of catastrophic financial risk.
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Eric Wilson talks with Dr. Kelly Richmond Pope about the psychology behind fraud, why ordinary people commit unethical acts, and how trust, pressure, and culture shape fraud risk. They explore accidental versus intentional perpetrators, cognitive blind spots, whistleblowing challenges, and what auditors can do to better detect and prevent fraud. HOST: Eric Wilson, CIA Director of Internal Audit & Chief Audit Executive, Gulfport Energy GUEST: Kelly Richmond Pope, CPA, PhD Forensic Accounting Professor, DePaul University https://www.kellyrichmondpope.com/ KEY POINTS: Introduction to Fraud Psychology [00:00:02–00:00:32] What Sparked an Interest in Fraud and Human Behavior [00:00:32–00:03:33] Why Fraud Is Often Committed by "Ordinary" People [00:03:33–00:04:21] Pressure, Life Events, and the Path to Fraud [00:04:21–00:06:48] Thrill-Seeking, Power, and the Adrenaline Factor [00:06:58–00:08:20] Intentional, Accidental, and Righteous Fraud Explained [00:08:20–00:10:18] Why Accidental Perpetrators Are the Hardest to Detect [00:08:40–00:10:18] Cognitive Blind Spots and the Role of Trust [00:10:19–00:13:46] Lessons from One of the Largest Municipal Fraud Cases [00:12:29–00:13:46] The Difficult Reality of the Internal Auditor's Role [00:13:46–00:15:38] When and Why to Bring in Third-Party Investigators [00:15:52–00:16:16] Cultural Warning Signs That Fraud Risk Is Increasing [00:16:36–00:17:51] Charisma, Likability, and Fraud Risk [00:17:51–00:19:07] Managing Relationships While Maintaining Objectivity [00:18:20–00:20:12] Behavioral Red Flags Auditors Should Not Ignore [00:20:16–00:22:50] Narcissism, Leadership, and Corporate Environments [00:22:50–00:23:38] Why Whistleblowing Is So Difficult [00:23:59–00:25:59] A Critical Mindset Shift for Auditors [00:26:11–00:26:33] Closing Thoughts and Practical Takeaways [00:26:33–00:27:16] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Practice Guide: Internal Auditing and Fraud, 3rd Edition Vision 2035 2026 Fraud Unmasked Virtual Conference Global Internal Audit Standards Internal Auditor Magazine: "Playing the Long Game" (Eric Wilson's article) Webinar: Internal Auditing and Human Personality: Compatibility Mapping Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Levy talks with Dan Fornelius about the skills internal auditors need in 2026 and how to deliver real advice, insight, and foresight that leaders value. They discuss earning a seat at the table, balancing advisory work with independence, aligning audit work to strategy, and how AI and analytics are transforming internal audit. The conversation highlights the shift toward strategic, insight-driven auditing and what auditors must do to stay relevant. HOST:Mike Levy, CIA, CRMA, CISSP CEO, Cherry Hill Advisory GUEST: Dan Fornelius, CIA Director & Integrated Risk Leader, CrossCountry Consulting IIA North Jersey Chapter Board Member KEY POINTS: Introduction and the Evolution of Internal Auditing [00:00:02–00:00:39] Defining Advice, Insight, and Foresight in Internal Audit [00:00:39–00:01:16] Earning a Seat at the Table Through Early Engagement [00:01:16–00:02:00] Aligning Audit Work With Organizational Strategy [00:02:42–00:03:33] Using Business Language to Drive Impact and Value [00:03:37–00:04:20] Balancing Advisory Services and Independence [00:04:32–00:06:40] Independence vs. Objectivity: Reframing the Debate [00:07:02–00:08:35] Providing Real-Time Guidance on Emerging Risks [00:09:12–00:10:27] Why Internal Audit's Holistic View Drives Insight [00:10:31–00:11:24] Defining and Delivering Actionable Insights [00:11:26–00:16:01] Using Data, Analytics, and Early Warning Indicators [00:12:21–00:15:27] Technology and AI as Enablers of Better Storytelling [00:16:12–00:18:33] How AI Frees Auditors to Focus on the "So What" [00:18:45–00:21:06] Skills and Attributes of the Future Auditor [00:21:22–00:23:25] Why Communication and Questioning Matter More Than Ever [00:23:25–00:25:01] Final Reflections on Value-Driven Internal Auditing [00:25:01–00:26:16] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: 2026 Fraud Unmasked Virtual Conference Global Internal Audit Standards Vision 2035 Advice and Resources Knowledge Centers Artificial Intelligence All Things Internal Audit: Advisory Work: How to Consult Learning Solutions: The Advisory Engagement Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Pamela Stroebel Powers and James Rose unpack the new Global Practice Guide: Developing an Internal Audit Strategy, created to support Standard 9.2 in the Global Internal Audit Standards. They discuss why strategy is essential for internal audit functions, how it differs from the audit plan, and the importance of foresight, scenario analysis, and continuous development. They also explore the connection between strategy and performance measurement, and how these tools help internal auditors stay aligned with organizational objectives. HOST:Pamela Stroebel Powers, CIA, CGAP, CRMA, CPA Director of Professional Guidance, Public Sector, The IIA GUEST:James Rose, CIA, CRMA, CPA, CISA Managing Director, Sunhawk Consulting Member, International Internal Audit Standards Board (IIASB) KEY POINTS: Introduction to the New Global Practice Guide [00:00:02–00:00:30] Why Internal Audit Needs Its Own Strategy [00:00:51–00:01:33] How Internal Audit Strategy Differs from Organizational Strategy [00:01:55–00:03:39] Continuous Improvement as a Strategic Mindset [00:03:42–00:04:44] Strategy vs. the Internal Audit Plan [00:04:55–00:07:54] Building Capabilities for the Future, Not Just Executing Audits [00:05:35–00:07:33] Foresight and Scenario Analysis in Internal Audit Strategy [00:08:01–00:14:39] Predicting the Future: Preparing Internal Audit for Multiple Scenarios [00:10:19–00:13:54] Linking Strategy to Performance Measurement (Standard 12.2) [00:15:21–00:19:59] Balancing Required vs. Aspirational Performance Measures [00:16:40–00:19:26] Using Strategy and Measurement to Strengthen Governance Assurance [00:19:26–00:20:39] Wrap-Up and Available Companion Tools [00:21:20–00:23:09] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Practice Guide: Developing an Internal Audit Strategy Vision 2035 2026 Fraud Unmasked Virtual Conference Global Internal Audit Standards Performance Measurement Tool Internal Auditing Competency Framework Templates Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
Head Of Internal Audit at KMRC, Olive Gitau On Capital In The Morning. by Capital FM
The Institute of Internal Auditors Presents: All Things Internal Audit Deborah Poulalion and Brian Tremblay unpack the top three risks from the 2026 Risk in Focus report: geopolitical uncertainty, digital disruption, and cybersecurity. They discuss why these risks are rising, how internal audit can approach "hard-to-audit" areas, and how to use Risk in Focus to drive stronger conversations with leadership. For a global perspective, read insights from audit leaders in the article 'Risk Around the World.' HOST: Deborah Poulalion Senior Manager, Research & Insights, The IIA GUEST: Brian Tremblay, CIA, CISA Vice President of Internal Audit, V2X Member, Internal Audit Foundation, Committee of Research and Education Advisors KEY POINTS: Introduction [00:00–00:00:32] The Foundation's Research [00:00:32–00:01:32] Using the North American Report & Board Briefing [00:01:32–00:02:29] Geopolitical and Macroeconomic Uncertainty [00:02:29–00:07:01] Digital Disruption and AI Risk [00:07:01–00:12:13] Cybersecurity: Still the Top Risk [00:12:13–00:18:03] Final Takeaways: Going Deeper on Complex Risks [00:18:03–00:19:41] Closing Thoughts and Where to Access Risk in Focus [00:19:41–00:20:12] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Risk in Focus 2026 'Risk Around the World' — Internal Auditor Magazine (December Issue) 2026 Fraud Unmasked Virtual Conference All Things Internal Audit: Navigating Sustainability Regulations Global Perspectives & Insights: Sustainability Tool: Assessing Sustainability Readiness Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
This week on The Audit Podcast, there's a new host in town… and it's not me. Eric Wilson steps in and leads a reverse interview where I finally take a turn as the guest. Be sure to connect with Eric on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 0:39 – What Made Trent Start The Audit Podcast 4:09 – The Origins of IA on AI 6:09 – Understanding the "How" 10:34 – Trent's Most Memorable Podcast Episodes 13:11 – Where to Listen to The Audit Podcast 14:13 – Skill Sets New Auditors Should Focus On 15:36 – The Biggest Shift in Internal Audit 16:25 – What Keeps Trent Motivated 17:04 – Trent's Green Thumb Challenges 18:56 – Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
Anthony Pugliese of the Institute of Internal Auditors discusses the new and perennial risks and challenges facing his members, and the new standards and resources the IIA is rolling out to help.
This week on The Audit Podcast, we're joined by three members of Snowflake's internal audit team: Amrita, Pooja, and Ajay. Amrita Kapoor, Head of Internal Audit at Snowflake, walks us through how their team is using Snowflake's native tools to build practical analytics and AI solutions. She shares several real use cases their internal audit function has deployed—many of which Snowflake customers can replicate with the tools they already have. We're also joined by Pooja K., who takes us inside the AI tool she built for the audit team. And here's the part that might surprise you: Pooja has no technical background—no analytics, no IT, no engineering—and yet she built her AI solution in a single evening. She breaks down exactly how she approached it, what she created, and why auditors without a tech background should feel empowered to start experimenting. Finally, Ajay R., Internal Audit Manager at Snowflake, walks through additional AI and data analytics use cases their team has implemented, highlighting what's possible when internal audit fully leverages Snowflake's capabilities. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 4:38 - Snowflake: Team Introductions 14:08 - Leveraging Data Analytics for ITGCs 20:07 - Testing Termination Controls 24:16 - Strengthening Collaboration Between Internal and External Audit 27:46 - How AI Is Shaping Resources and Hiring 30:17 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
Are you auditing at the speed of risk? Richard Chambers—50-year internal audit veteran and AuditBoard advisor—joins Blake to map the path forward. Hear why AI now ranks as risk #1, how to build continuous risk monitoring, and what “independence, not isolation” means for the three-lines model. Learn where CAEs should start with AI (risk assessment, analysis, reporting), how to audit culture and AI governance, and how to earn audit committee trust with no surprises.Chapters(01:37) - Richard Chambers' Career Journey (03:15) - Evolution of Internal Audit (05:34) - Emerging Risks in Internal Audit (08:13) - AI and Cybersecurity Challenges (10:51) - Continuous Risk Monitoring (25:30) - Connected Risk and AI Integration (27:42) - Introduction to the Three Lines of Defense (30:01) - Evolution to the Three Lines Model (31:18) - Connected Risk and Collaboration (32:08) - AI's Impact on Risk Management (35:20) - AI in Internal Audit: Opportunities and Challenges (40:32) - The Human Element in Internal Audit (44:40) - The Future of Internal Audit and AI (54:00) - Conclusion and Final Thoughts Sign up to get free CPE for listening to this podcasthttps://earmarkcpe.comhttps://earmark.app/Download the Earmark CPE App Apple: https://apps.apple.com/us/app/earmark-cpe/id1562599728Android: https://play.google.com/store/apps/details?id=com.earmarkcpe.appConnect with Our Guest, Richard ChambersLinkedIn: https://www.linkedin.com/in/richard-chambers-a5108914/Twitter: https://x.com/rfchambersWebsite: https://auditboard.com/Connect with Blake Oliver, CPALinkedIn: https://www.linkedin.com/in/blaketoliverTwitter: https://twitter.com/blaketoliver/
Discover how Alteryx SparkED is transforming accounting education in this episode of the Alter Everything Podcast. Guest host Eric Roy interviews professors Ashley Davis (University of Oklahoma) and Ahmet Kurt (Bentley University) about integrating Alteryx into their accounting curricula. Learn how data analytics, automation, and low-code tools are preparing students for the future of accounting. Hear real-world stories of students landing jobs with Alteryx skills, practical tips for educators, and the impact of AI and automation on the profession. Panelists: Eric Roy, Sr. Instructional Program Manager @ Alteryx - @ericroy, LinkedInAshley Davis, Associate Professor of Accounting @ University of Oklahoma - @adavis1, LinkedInAhmet Kurt, Associate Professor of Accounting @ Bentley University - @Ahmet_Kurt, LinkedInShow notes: Alteryx SparkED ProgramAlteryx Community Learning Paths and TutorialsAlteryx Certification Exam Interested in sharing your feedback with the Alter Everything team? Take our feedback survey here!This episode was produced by Megan Bowers, Mike Cusic, and Matt Rotundo. Special thanks to Andy Uttley for the theme music.
On the latest episode of Chesterfield Behind the Mic, we talk to Internal Audit Director Khara Durden about the upcoming International Fraud Week and what all goes into that each year as the county looks to focus on fraud, waste, and abuse across the organization and schools. Credits: Director: Martin Stith Executive Producer: Teresa Bonifas Producer/Writer/Host: Brad Franklin Director of Photography/Editor: Matt Boyce Producer/Camera Operator: Martin Stith and Matt Neese Graphics: Debbie Wrenn Promotions and Media: J. Elias O'Neal and Joanna Heims Music: Hip Hop This by Seven Pounds Inspiring Electronic Rock by Alex Grohl Guest: Khara Durden, Director of Internal Audit Recorded in-house by Communications and Media Chesterfield.gov/podcast Follow us on social media! On Facebook, like our page: Chesterfield Behind the Mic. On Twitter, you can find us at @ChesterfieldVa and on Instagram it's @ChesterfieldVirginia. And you can also watch the podcast on WCCT TV Thursday through Sunday at 7 p.m. as well as on weekends at noon on Comcast Channel 98 and Verizon Channel 28.
This week on The Audit Podcast, our guest is Ronnie Welch, Chief Audit Executive at Guardian Life. Ronnie has spent his career in insurance audit, with experience at MetLife, Blue Cross Blue Shield of New Jersey, and several Big Four firms. In this episode, Ronnie talks about how he's modernizing internal audit and shares the practical steps his team has taken at Guardian Life. He explains his three-tier analytics system, which helps his 48-person audit team work more efficiently and make a bigger impact. Listeners will come away with clear, actionable ideas for strengthening their own audit teams—no matter the size. We also highlight Ronnie's achievement of winning Guardian Life's CEO Award nearly ten years before stepping into his current role, showing the dedication and leadership that have defined his career. Be sure to connect with Ronnie on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 1:06 – How Ronnie Uses LLMs 4:38 – Agent Outsourcing 10:04 – Innovating the Team's Knowledge of AI 15:17 – Who Is Internal Audit's Customer? Let's Serve Them 18:20 – Training for Soft Skills 20:45 – Getting the Entire Team to a Basic Analytics Level 27:12 – Tweaks Made to the Three-Tier System Along the Way 30:13 – Ronnie Wins the CEO Award 32:42 – IIA Vision 2035 33:53 – Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
AI is transforming audit, risk, and corporate governance—but most companies are struggling to keep up. In this episode of The Pre-Read, Radical Compliance's Matt Kelly and Shane Negangard, Senior Director of Internal Audit at Workiva, join hosts Steve Soter and Alyssa Zucker to discuss: ✅ Why “shadow AI” is a real compliance threat ✅ How governance and internal controls must evolve ✅ The risks of AI in employee training and internal audit ✅ How auditors can move from reactive to proactive in an AI world Timestamps 00:00 – Intro: The real risk of “shadow AI” in audit and compliance 02:10 – Why AI is rewriting governance faster than policies can catch up 05:25 – The blurred line between automation and accountability 09:40 – What internal auditors are seeing on the ground 14:05 – How CFOs and CAOs can partner with marketing and data teams on AI 17:30 – Governance, controls, and the need for real-time oversight 21:15 – Why culture and education matter more than ever 25:10 – The future of AI governance and trust in reporting If you're in audit, risk, compliance, or finance, this episode is your playbook for governing AI responsibly—without slowing innovation.
In this episode of The Audit Podcast, we're joined by Alex Rusate, Senior Vice President and Director of Internal Audit at Arrow Financial, and former chair of the IIA's Emerging Leaders Mentoring Program. Alex shares how the program began in 2019, grew so quickly that the IIA brought in full-time support, and has continued to thrive ever since. As both one of the first mentees and later a leader of the program, he offers a unique perspective on its evolution and the benefits it brings to internal auditors. The conversation covers the program's purpose, what it means to participate as a mentor or mentee, success stories from past participants, and how much it has changed over the past six years. Registration for this year's program is now open and closes September 15 if you would like to get involved. Be sure to connect with Alex on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 2:47 – AI Prompts and Practical Use Cases 9:00 – IIA Emerging Leader Mentoring Program 12:15 – Alex's Perspective as a Mentee 13:37 – Feedback from Mentees During the Program 15:07 – How the Program has Evolved Over the Years 17:40 – Career Paths after Completing the Program 18:50 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics