POPULARITY
Our finance team is different from your typical firm. As Jeff, Vice President of Internal Audit puts it: "You don't want to just be another number. You want to be part of something great—and growing. That's what I found here from day one." We sat down with Jeff, a seasoned audit leader, to discuss his experience and why DraftKings could be a game-changer for your career. He spent two decades at large financial institutions and came to DraftKings eight months ago to help create the playbook for many different projects. “We're sort of building as we go through our day-to-day, and that's been great for both me and the team to realize there's not really a dedicated, correct way to do this work yet,” Jeff said.
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Charles King talks with Debbie Lew about the transformative role of artificial intelligence in internal auditing. They discuss the integration of AI tools like Copilot, the importance of prompt writing, and how AI is enhancing audit processes. The conversation also covers training strategies, real-world applications, and the impact of AI on stakeholder engagement. HOST: Charles King, CIA, CPA, CFE, CIPP Partner, AI in Internal Controls Leader, KPMG US GUEST: Debbie Lew, CISA, CRISC, CHIAP Senior Vice President and Chief Audit Executive, Kaiser Permanente Key Points: Introduction [00:00-00:38] Inside Kaiser Permanente's Internal Audit Team [00:39-02:14] AI Adoption at Kaiser Permanente [02:15-03:21] Prompt Writing as a Core Skill [03:22-04:10] Guidance Manuals and Prompt Libraries [04:11-05:02] Building AI Agents to Support Audits [05:03-05:51] Training, Communication, and Driving Adoption [05:52-07:23] Innovative Applications of GenAI in Audit [07:24-08:28] Inspiring a Tech-Forward Culture [08:29-10:06] Final Thoughts [10:07-10:31] IIA Related Content: Interested in this topic? Visit the links below for more resources. 2025 International Conference Knowledge Centers: Artificial Intelligence Auditing the Cybersecurity Program Certificate Cybersecurity Topical Requirement “Undercover AI,” Internal Auditor Magazine The IIA's Updated AI Auditing Framework Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, George Barham talks with Mike Callino about how agile methodologies and artificial intelligence are transforming internal audit functions. Mike shares practical insights on implementing agile auditing, the challenges and benefits of this approach, and how AI is being used throughout the audit lifecycle. HOST:George Barham, CIA, CISA, CRMA Director, Standards & Professional Guidance, The IIA GUEST:Mike Callino, CIA, CISA Senior Director, Internal Audit, Braze Key Points Introduction [00:00-00:00:27] Defining Agile Auditing [00:00:28-00:01:12] Applying Agile in Practice [00:01:13-00:03:03] Metrics for Agile Success [00:03:04-00:04:15] How Agile Auditing Has Evolved [00:04:16-00:06:06] Getting Started with Agile [00:06:07-00:07:28] Roles and Responsibilities in Agile [00:07:29-00:09:12] Measuring Agile Success [00:09:13-00:10:04] Training for Agile Adoption [00:10:05-00:11:20] AI Use Cases in the Audit Lifecycle [00:11:21-00:14:51] Common Misconceptions About Agile [00:14:52-00:16:12] The Future of Agile and AI in Auditing [00:16:13-00:18:48] IIA Related Content: Interested in this topic? Visit the links below for more resources: 2025 International Conference Agile Auditing Course Building a Better Auditor: Embracing Agile Audit Agile Auditing: Transforming the Internal Audit Process. Debunking Agile Myths Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, The IIA's Lindsay Patterson talks with Anna Davis of Qualcomm about the crucial aspects of internal audit team formation and dynamics. They discuss hiring strategies in the current market, the importance of soft and hard skills, the challenges and benefits of remote and in-office work, and methods for fostering a strong team culture. HOST:Lindsay Patterson, CIA, CPAExecutive Vice President , Membership, Marketing and Communications, The IIA GUEST:Anna Davis, CPAVice President, CAE, Qualcomm Key Points Introduction [00:00-00:22] Team Formation: Starting with Hiring [00:23-01:34] In-Office Work and Recruitment Challenges [01:35-04:13] Hard and Soft Skills and Business Acumen [04:14-06:00] Retention and Career Growth Opportunities [06:01-07:05] Team Size and Responsibilities [07:06-07:44] Building a Team Culture [07:45-10:32] The Value of Authentic Leadership [10:33-12:03] Advice for Aspiring Audit Leaders [12:04-13:44] Final Thoughts [13:45-14:44] The IIA Related Content Interested in this topic? Visit the links below for more resources: 2025 AuditSphere Virtual Conference Tools for Audit Managers Course IIA Group Membership Group Training Solutions All Things Internal Audit Podcast: 'Mastering Soft Skills in Internal Auditing,' Building a Better Auditor: Optimizing Team Communication Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
The Institute of Internal Audit's (IIA) Vision 2035 report highlights the pivotal role that soft skills will play in shaping the future of internal audit. Join Jodi Lewis, Manager, and Andy Jameson, Director, from our Risk Advisory practice as they discuss the top three critical skills that internal auditors must cultivate to excel in the evolving internal audit landscape. Additionally, they will share insights on how auditors can effectively develop these essential skills. This is the second in our four-part internal audit series. Listen to the first episode, The Evolving Role of Internal Audit: Unpacking IIA's Vision 2035 Report, and stay connected for upcoming episodes.Tune in to learn more about:The importance of effective communication in internal auditPractical ways to enhance communication skillsStrategies to enhance critical thinking in internal auditThe role that adaptability plays in keeping auditors relevant and effectiveRelated Insights:Podcast: https://www.cbh.com/insights/podcasts/a-guide-to-iias-vision-2035-for-audit-teams/ Article: 2025 Internal Audit Risks and Hot Topics View All Podcasts from this Series
Welcome to RIMScast. Your host is Justin Smulison, Business Content Manager at RIMS, the Risk and Insurance Management Society. Justin and his guest, Jennifer Pack, RIMS 2025 Risk Manager of the Year, discuss her career and achievements, including Hyatt's VP of Risk Management. Jennifer describes how her membership in the RIMS Chicago Chapter and service on the Board impacted her career. Jennifer helped align Hyatt's risk strategies with its evolving business model to ensure resilience in today's complex environment. Leading nearly 40 professionals, Jennifer's leadership and innovative risk solutions have helped strengthen Hyatt's risk management framework, to proactively identify risks and develop strategies to address them. Jennifer successfully redesigned and centralized Hyatt's Short-Term, Long-Term Disability, and Workers' Compensation programs, reducing manual processing by up to 80,000 hours, improving compliance, and reducing legal exposure. It is linked to millions of dollars in savings. Under her leadership, Hyatt's risk management team is overhauling Hyatt Hotels' fire safety with the first-of-its-kind Fire Life Safety Compliance and Governance Program, setting a standard for the organization and industry. The initiative includes the implementation of new technology, as well as auditing the 1,450 Hyatt hotels in 79 countries. Jennifer is a beloved mentor who has had an impact on many careers. She continues to demonstrate her commitment to advancing the risk management profession as an active member of the RIMS Chicago Chapter. Jennifer's innovations may inspire your work for your organization's ERM program. Key Takeaways: [:01] About RIMS and RIMScast. [:16] About this episode of RIMScast. It is one of my favorite episodes to produce, with the Risk Manager of the Year. This year's honoree is Jennifer Pack, Hyatt's Vice President of Risk Management. We will talk about her success in ERM, captives, and more. [:48] RIMS-CRMP Workshops! RIMS is co-hosting an intensive four-day program which is your gateway to achieving two prestigious certifications, the DRI Certified Business Continuity Professional (CBCP) and the RIMS Certified Risk Management Professional (RIMS-CRMP). [1:08] This workshop will be held from May 19th through the 22nd in collaboration with DRI International. Links to these courses can be found through the Certification page of RIMS.org and this episode's show notes. [1:23] Virtual Workshops! On June 12th, Pat Saporito will host “Managing Data for ERM” and she will return on June 26th to present the very popular new course, “Generative AI for Risk Management”. [1:40] A link to the full schedule of virtual workshops can be found on the RIMS.org/education and RIMS.org/education/online-learning pages. A link is also in this episode's show notes. [1:51] We're at RISKWORLD this week but preparations are already underway for the RIMS ERM Conference 2025 on November 17th and 18th in Seattle, Washington. RIMS is accepting educational session submissions through May 20th. [2:08] The best submissions will address current and future challenges facing ERM practitioners as well as provide leading practices and concrete takeaways for a diverse audience of risk professionals from industries or organizations of varied sizes, disciplines, functions, and roles. [2:26] These include officers, leaders, managers, and students. The link to the submission form is in this episode's show notes. [2:35] While you are at RISKWORLD, be sure to take away some inspirado and channel it into an educational session submission for the RIMS ERM Conference 2025. Of course, mark your calendars for November 17th and 18th and I'll be sure to alert you when registration opens. [2:55] The RIMS Risk Manager of the Year Program aims to raise the profile of the risk profession and the outstanding programs the honorees have implemented within their organizations. [3:04] The award was created in 1977 and the Risk Management Honor Roll was added in 1981. The 2025 RIMS Risk Manager of the Year is Jennifer Pack of Hyatt. [3:16] As VP of Risk Management, Jennifer has transformed risk management at Hyatt, embedding a culture that has provided a launchpad for organizational success. Her innovations in captive management also earned her this award. [3:28] Jennifer is a long-standing member of the RIMS Chicago Chapter and an all-around fantastic professional. Her profile will soon appear in the Awards Edition of RIMS Risk Management magazine. [3:40] Jennifer will receive the award on May 5th at 4:00 p.m., on the main stage at RISKWORLD. We're going to get to know her a little bit now. We'll talk ERM, captives, Chicago RIMS, hotel and hospitality, and more. [3:57] Interview! RIMS 2025 Risk Manager of the Year, Jennifer Pack, welcome to RIMScast! [4:34] Jennifer has been at Hyatt, for going on 18 years. She can stay at any hotel she would like! [5:03] Some people like to leave their jobs every few years for a new company and skills. Jennifer's career at Hyatt has been an adventure! She hasn't been doing the same thing for 18 years. Every couple of years, she gets new roles and responsibilities. She's constantly learning. [5:24] She has a foundation of knowing whom to go to, what the systems are, and how to get things done. There's a base familiarity but with some excitement and learning opportunities. [5:36] If the feeling of being able to learn and grow ever stops, Jennifer will think about leaving. She's enjoying her time. It seems like she's working or a new company all the time. They're transforming. They're changing. The risk landscape is changing. There's never a dull moment. [5:56] Justin feels the same way about working at RIMS! He started as a writer but then got these responsibilities and they took on sort of a life of their own and attracted more of an audience. It's more work, but it's more fun and rewarding. [6:25] Jennifer joined Hyatt in a group called Compliance and Controls. She was hired to set up their Sarbanes-Oxley department. In reaction to the financial crisis after the downfall of Arthur Andersen and Enron, Sarbanes-Oxley was born and Jennifer became an expert on it. [6:58] Jennifer launched that group and then it was moved into Internal Audit where they were exposed to a lot more people and systems. Jennifer had the opportunity to backfill someone in the Risk Management department and never left. She's been in the risk function for 15 years. [7:30] When Jennifer joined the risk group it had seven risk practitioners in the corporate office. There were five or six Occupational Health Managers in the field, helping with Workers' Compensation and occupational safety. There are over 35 full-time members now. [8:09] They've taken on new roles in the 15 years: physical security, business resilience, fire life safety compliance, and other health and safety functions in the company. They could probably use a few more people but they're doing well. [8:38] The risk profile of the company has changed. The geopolitical risk profile of the world has changed. Hyatt's offerings have changed. They used to be mostly business, group, and convention, and now they lean into leisure, travel, and all-inclusive, which have different risks. [9:16] Hyatt has tripled its resort rooms and quintupled its lifestyle rooms since 2017. A lifestyle room is about meeting clientele where they are. Millennials want to travel the world and experience the environment, such as an attached nightclub in Miami or New York. [9:55] They're unconventional hotels with the framework of a well-known brand, where guests have comfort, safety, security, cybersecurity, and loyalty points while feeling like they're in a niche hotel with great and different experiences. It feels like a boutique, attached to the brand. [11:06] Social inflation is a risk. Liability insurance has gone up because claim payouts have gone up tremendously. Claim attorneys are targeting hospitality. [12:12] Hyatt is thinking globally about health, safety, and security, making sure policies are locked down, training is locked down, and people know how to report an incident, and when to report it. How do you de-escalate an incident to win the guest back? [12:36] Saying, “I'm sorry that happened to you. Here are some points. We care about you,” reinforcing that, versus saying, “Let my insurance company deal with it.” That's the last thing we want. If our guests had a bad incident, they had a bad experience. [12:51] Especially if you're traveling on leisure with your family, you want to know that you'll be taken care of. There's an expectation that you're going to be safe and secure. Hyatt wants to make sure to bring the level of care to them that they deserve. [13:07] Hyatt is working on the front end to retrain employees on ramping up safety and security measures and knowing how to respond when an incident happens. [13:18] Then, if it gets into the claims section, the claims management team has new robust processes to manage claims to drive down exposure. On the insurance procurement side, Hyatt is leaning into its captive to take on much higher retention in-house. [14:09] Hyatt is asking leadership in the field to bring education and awareness to the importance of risk management, what's at risk, and what the current legal environment is, and overlay that with wanting to care for people. Hyatt cares about the guest experience. [14:43] This is a macro-level environment. If you have litigation system abuse across the country, what are insurers doing about it? What are brokers doing about it? What are corporations doing about it? [14:56] Jennifer gets with her peers in the hospitality industry, working in their respective associations, to address these issues at the state and federal levels, change laws, and push for tort reform and disclosures of litigation funding. [15:28] Hyatt has partnered with the American Lodging and Hospitality Association and is considering partnering with insurance companies. You can't just hope someone else will take care of the problem. It's a much bigger problem that we all need to address. [16:06] Justin points out that third-party litigation funding is one of the top initiatives and campaigns for RIMS this year. RIMS recently had the Legislative Summit in Washington, D.C., where third-party litigation funding was a top priority. It was a top RIMS talking point on the Hill. [16:38] Jennifer says Hyatt and the hospitality industry are in with RIMS on the issue of third-party litigation funding. If it continues, guests are going to have to pay more for a stay and for the experiences they want to have as rising risk costs are passed to the consumers. [17:04] Plug Time! RIMS Webinars! We are back on May 22nd, with GRC, a TÜV SÜD Company, and their newest session, “Asset Valuations in 2025: Managing Tariffs, Inflation, and Rising Insurance Scrutiny”. [17:22] On May 29th, Origami Risk returns to present “Strategic Risk Financing in an Unstable Economy: Leveraging Technology for Efficiency and Cost Reduction”. On June 5th, Zywave joins us to discuss “Today's Escalating Risk Trajectory: What's the Cause and What's the Solution?” [17:44] More webinars will be announced soon and added to the RIMS.org/Webinars page. Go there to register. Registration is complimentary for RIMS members. [17:55] Spencer's goal to help build a talent pipeline of risk management and insurance professionals is achieved, in part, by its collaboration with risk management and insurance educators across the U.S. and Canada. [18:16] Since 2010, Spencer has awarded over $3.3 million in General Grants to support over 130 student-centered experiential learning initiatives at universities and RMI non-profits. Spencer's 2026 application process is now open through July 30th, 2025. [18:36] General Grant awardees are typically notified at the end of October. Learn more about Spencer's General Grants through the Programs tab of SpencerEd.org. [18:46] On the 7th of October, the New Jersey RIMS Chapter will return to the beautiful Fiddler's Elbow Country Club in Bedminster, New Jersey for their Annual Charity Golf/Pickleball Event. [18:59] Registration is open and the event proceeds are used to fund the chapter's Spencer and Kids' Chance Scholarships. It was the filming location for the upcoming movie sequel Happy Gilmore 2. For more information, and to register, please NewJersey.RIMS.org. [19:21] Let's Return to My Interview with RIMS 2025 Risk Manager of the Year, Jennifer Pack! [19:47] Hyatt put a captive in place in 2013. Back then, Hyatt had huge insurance cost swings year-on-year that they couldn't forecast. It created a lot of “noise” on the balance sheet. They originally put the captive in place to take away that noise and remove wild cost volatility. [20:38] Over time, Hyatt started to see success and build up a surplus they saw the value of a captive, especially as market conditions changed. They brought in additional forms of insurance coverage with traditional deductible buy-downs with workers' compensation and GL. [21:04] They started to see the surplus build up and they were able to give some of the surplus back to the participants and drive down their premium cost. [21:14] In the pandemic, the hospitality business came to a halt. Before the pandemic, Hyatt's average occupancy around the world was over 75%. In April 2020, it dropped to 6%. The owners of Hyatt were under extreme pressure. [21:43] Jennifer had an extra surplus in the captive and was able to give relief to the owners and to the company in that year and the next couple of years. Claim volume went down due to lower occupancy. Hyatt used some of that cash to fund large acquisitions. [22:19] That's when Hyatt saw social inflation in gaps in coverage. There was no coverage for a pandemic. Through the captive, Jennifer was able to offer that coverage to the owners. She offered wages and hours insurance to the owners. [22:48] Coming out of COVID-19, with the impact of social inflation, the captive took on larger line sizes and larger layers in its umbrella tower. They had some acquisitions in cyber. They bought the Apple Leisure Group. [23:36] In a lot of those services, Hyatt isn't providing the service but is almost like a travel agent, connecting you to the hotel, airline, or excursion. If there is an incident, the third party has the coverage. Hyatt has exposure for connecting you to the service. [24:01] Hyatt had to get creative with coverage for these new exposures, working with broker partners to fill those gaps. They did it largely with the captive, buying time until they could get a traditional product in place. [24:17] With the captive, Hyatt filled gaps, helped grow the business, and used it as a business enabler, providing cash, relief to owners, and coverage that may not have been commercially available, either to buy time or permanently fill a gap. It's been fun! [24:53] Jennifer regularly changes which hat she wears. As the captive President, she has to look at what Hyatt is doing to protect the captive and make sure it's adequately funded and complies with regulations. From a governance perspective, is Hyatt doing the right things? [25:21] Jennifer regularly brings in third-party experts to check the captive. Jennifer's decisions as President of the captive are through the lens of the captive and as the owner of this business, what they are doing to grow revenues, manage expenses, and keep an adequate surplus. [25:44] The captive doesn't run razor-thin. To have a forward-looking approach, it needs to have an adequate surplus, reserves, and cash in the captive. They're very conservative in protecting it. [26:06] From a corporate risk management perspective, when Hyatt needs to buy insurance, Jennifer asks, can we buy it from the captive? She sometimes has tough conversations with Hyatt about borrowing versus driving up investment income to protect everyone's interests. [26:37] Jennifer has to keep top-of-mind, which lens she's looking through, whether President of the Captive or Hyatt Vice President of Risk Management. She wears two hats, managing all the key stakeholders' needs and wants. [27:17] Some of the stakeholders are Hyatt, third-party owners, the corporation itself, and guests and colleagues with short-term and long-term disability and medical, adding value for the benefits team so they don't have to go to third parties for that insurance. [28:27] As the Captive President, Jennifer is looking at loss and expense ratios, reserve to operating ratios, surplus to premiums, and surplus to reserves, making sure that they're within the set ratios. They shoot for three to one. Anything above that number can go to participants. [29:09] They won't go below three to one so they are capitalized for future unexpected losses or to back up future business growth. Jennifer believes Hyatt is unique in having those ratios and guards in place. Jennifer is looking forward to future needs. [30:15] The captive evaluates from time to time whether to change the ratios to five to one or four to one. In the liability space, claims are growing. Some of the demands are wild and the settlements reached or not reached are eye-opening! [30:46] Jennifer explains the global risk management claims software that is now also used for incident reporting to the risk department. They look at data from all incidents and are seeing a trend and looking to what could come down the pike and new coverages they may need to offer. [31:44] The technology is supporting the department and overall risk management strategy. The captive is benefiting through better data on what's happening out there so they won't get blindsided by unusual trends that aren't yet seen in the claims. [32:19] Technology helps the captive to build out platforms to manage compliance, safety, and security in the environment. [32:28] The more data insights and comfort Jennifer has over the Health, Safety, and Security diagnostic at each property, region, and the globe, and overlays those with risk assessments Hyatt does, the more comfort she can get to take on more risks knowledgeably in the captive. [33:15] RIMS Plug! The first of hopefully many RIMS Texas Regional Conferences will be held in San Antonio from August 4th through the 6th, 2025. This groundbreaking event is set to unite the Texas RIMS Chapters and welcome risk management professionals from around the world. [33:34] Guess what, folks! Registration is now open! The advance rate is available through May 16th. A link is in this episode's show notes. You can also visit the Events page of RIMS.org to register. We look forward to seeing you in Texas! [33:50] Let's Conclude Our Interview with RIMS 2025 Risk Manager of the Year, Jennifer Pack! [34:04] Jennifer Pack is the RIMS Risk Manager of the Year 2025 and she has been such a wonderful guest. This episode is coming out the morning of the awards. We will see her onstage, for anyone who has the privilege of being there. [34:19] Jennifer is honored, excited, and a little nervous to be onstage at RISKWORLD for the award. A lot of the RIMS Chicago members will be there. Jennifer has a wonderful Chicago-based team that will be there. Jennifer's parents and her husband are coming. [36:26] Jennifer says moving up the ranks at Hyatt and RIMS Chicago has been a fun and wild ride! The growth in her career, switching from being a Public Accountant to Auditor to Risk Manager has been fun with a lot of learning. [36:54] Jennifer tries to lead and grow with optimism, fun, and humor. She's been able to grow and develop a team under her. It's been a really interesting 18-year adventure. [37:11] Once Jennifer was exposed to RIMS, it opened her eyes to the wealth of resources, friendship, collaboration, and knowledge-sharing. It's been such an excellent experience for her. She couldn't be prouder of the Chicago Chapter and the great things they do to develop talent. [37:43] Jennifer says since COVID-19, it's been wonderful to see the number of people who attend the outings and forums. It's great to have such a great community and seeing them regularly is impactful. [38:06] Jennifer is Risk Manager of the Year. The Rising Star is Megan Smalter, who has had a wonderful time with the Chicago Chapter before moving to New York. In her role on the RIMS Chicago Chapter Board, and when she ran the Golf Outing, Jennifer has worked with Megan. [38:45] Julie Bean won the Heart of RIMS Award recently. Jennifer says it's great to have the bench of expertise of long-standing members in the Chicago Chapter. Jennifer learned from them personally and in professional settings. They're great for sharing ideas and working with. [39:36] Jennifer also mentioned Theresa Severson who was RIMS 2023 Risk Manager of the Year, with Kite Realty. There's a lot of talent and deep risk knowledge in the RIMS Chicago Chapter. There's a genuine camaraderie. [40:30] Jennifer looks ahead to see companies leaning into the concept of full risk management philosophy. Risk management is so much more than just the insurance buyers. [40:45] Risk management is “How can we bring a risk management mindset to our enterprises? How can we be business enablers? How can we leverage the wealth of data and information that comes through our department to enable mindful growth in the business?” [41:05] It's “How can we help with ESG efforts, especially with the reporting? How can we mitigate risks to the company and not just to our financial tools of insurance? What can we do in loss prevention or mitigation?” [41:26] “What can we do in claims management with more expertise, as things heat up on the litigation side with social inflation and nuclear claims?” Jennifer sees Hyatt and other companies taking more risks in the captive's or balance sheet to offset what's happening.” [42:10] Risk managers are going to have to articulate that and bring solutions to the forefront of their companies. Jennifer is excited about the future. She's looking forward to launching and rolling out more technology solutions as Hyatt leverages all its data. [42:57] Jennifer knows her team can have a lot of positive impact on the organization and she's excited about it. [43:08] Special thanks and congratulations again to Jennifer Pack, the RIMS 2025 Risk Manager of the Year. A link to RISKWORLD coverage is in this episode's show notes via the Show Daily. [43:20] That will update this episode's show notes with a link to the RIMS Risk Management Magazine coverage in our special Awards Edition. More honorees from RISKWORLD will join us here on RIMScast soon. [43:35] Plug Time! You can sponsor a RIMScast episode for this, our weekly show, or a dedicated episode. Links to sponsored episodes are in the show notes. [44:03] RIMScast has a global audience of risk and insurance professionals, legal professionals, students, business leaders, C-Suite executives, and more. Let's collaborate and help you reach them! Contact pd@rims.org for more information. [44:21] Become a RIMS member and get access to the tools, thought leadership, and network you need to succeed. Visit RIMS.org/membership or email membershipdept@RIMS.org for more information. [44:38] Risk Knowledge is the RIMS searchable content library that provides relevant information for today's risk professionals. Materials include RIMS executive reports, survey findings, contributed articles, industry research, benchmarking data, and more. [44:55] For the best reporting on the profession of risk management, read Risk Management Magazine at RMMagazine.com. It is written and published by the best minds in risk management. [45:09] Justin Smulison is the Business Content Manager at RIMS. You can email Justin at Content@RIMS.org. [45:17] Thank you all for your continued support and engagement on social media channels! We appreciate all your kind words. Listen every week! Stay safe! Links: RIMS Texas Regional 2025 — August 3‒5 | Advance registration rates now open. ERM Conference 2025 — Call for Submissions (Through May 20) RIMS-Certified Risk Management Professional (RIMS-CRMP) RISK PAC | RIMS Advocacy RIMS Risk Management magazine RIMS Now The Strategic and Enterprise Risk Center Spencer Educational Foundation — General Grants 2026 — Application Dates Press Release: “RIMS Risk Manager of the Year Goes to Hyatt's Jennifer Pack” RIMS Webinars: RIMS.org/Webinars “Asset Valuations in 2025: Managing Tariffs, Inflation, and Rising Insurance Scrutiny” | Sponsored by GRC, a TÜV SÜD Company | May 22, 2025 “Strategic Risk Financing in an Unstable Economy: Leveraging Technology for Efficiency and Cost Reduction” | Sponsored by Origami Risk | May 29, 2025 “Today's Escalating Risk Trajectory: What's the Cause & What's the Solution?” | Sponsored by Zywave | June 5, 2025 Upcoming RIMS-CRMP Prep Virtual Workshops: CBCP & RIMS-CRMP Exam Prep Virtual Bootcamp: “Mastering Business Continuity & Risk Management” | May 19‒22, 2025 | In Collaboration with DRI International Full RIMS-CRMP Prep Course Schedule “Managing Data for ERM” | June 12 | Instructor: Pat Saporito “Generative AI for Risk Management” | June 26 | Instructor: Pat Saporito See the full calendar of RIMS Virtual Workshops RIMS-CRMP Prep Workshops Related RIMScast Episodes: “Risk and Leadership Patterns with Super Bowl Champion Ryan Harris” (RISKWORLD 2025 Keynote) “(Re)Humanizing Leadership in Risk Management with Holly Ransom” “Risk and Relatability with Rachel DeAlto” “RIMS Risk Manager of the Year, Steve Robles, Los Angeles County” (2024) Sponsored RIMScast Episodes: “The New Reality of Risk Engineering: From Code Compliance to Resilience” | Sponsored by AXA XL (New!) “Change Management: AI's Role in Loss Control and Property Insurance” | Sponsored by Global Risk Consultants, a TÜV SÜD Company “Demystifying Multinational Fronting Insurance Programs” | Sponsored by Zurich “Understanding Third-Party Litigation Funding” | Sponsored by Zurich “What Risk Managers Can Learn From School Shootings” | Sponsored by Merrill Herzog “Simplifying the Challenges of OSHA Recordkeeping” | Sponsored by Medcor “Risk Management in a Changing World: A Deep Dive into AXA's 2024 Future Risks Report” | Sponsored by AXA XL “How Insurance Builds Resilience Against An Active Assailant Attack” | Sponsored by Merrill Herzog “Third-Party and Cyber Risk Management Tips” | Sponsored by Alliant “RIMS Innovation with Archer” | Sponsored by Archer “Navigating Commercial Property Risks with Captives” | Sponsored by Zurich “Breaking Down Silos: AXA XL's New Approach to Casualty Insurance” | Sponsored by AXA XL “Weathering Today's Property Claims Management Challenges” | Sponsored by AXA XL “Storm Prep 2024: The Growing Impact of Convective Storms and Hail” | Sponsored by Global Risk Consultants, a TÜV SÜD Company “Partnering Against Cyberrisk” | Sponsored by AXA XL “Harnessing the Power of Data and Analytics for Effective Risk Management” | Sponsored by Marsh “Accident Prevention — The Winning Formula For Construction and Insurance” | Sponsored by Otoos “Platinum Protection: Underwriting and Risk Engineering's Role in Protecting Commercial Properties” | Sponsored by AXA XL “Elevating RMIS — The Archer Way” | Sponsored by Archer RIMS Publications, Content, and Links: RIMS Membership — Whether you are a new member or need to transition, be a part of the global risk management community! RIMS Virtual Workshops On-Demand Webinars RIMS-Certified Risk Management Professional (RIMS-CRMP) RISK PAC | RIMS Advocacy RIMS Strategic & Enterprise Risk Center RIMS-CRMP Stories — Featuring RIMS President Kristen Peed! RIMS Events, Education, and Services: RIMS Risk Maturity Model® Sponsor RIMScast: Contact sales@rims.org or pd@rims.org for more information. Want to Learn More? Keep up with the podcast on RIMS.org, and listen on Spotify and Apple Podcasts. Have a question or suggestion? Email: Content@rims.org. Join the Conversation! Follow @RIMSorg on Facebook, Twitter, and LinkedIn. About our guest: Jennifer Pack, VP of Global Risk Management, Hyatt Corporation Production and engineering provided by Podfly.
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Andrew Guasp talks with Alex Gacheche about the importance of emotional intelligence (EQ) in the internal audit profession, especially in the context of AI advancements. They discuss how EQ can enhance internal audit effectiveness, the role of empathy and communication, and the impact of cultural differences on EQ. From active listening to handling difficult conversations, this episode unpacks the human side of internal auditing. HOST:Andrew Guasp, CIA Senior Manager, Standards & Professional Guidance, The IIA GUEST:Alex Gacheche, CISAHead of Internal Audit, Information Security, Technology Infrastructure, Emerging Technology, and AI, Meta Key Points Introduction [00:00–00:01:16] What Is Emotional Intelligence? [00:01:17–00:03:34] Human Judgment with AI [00:03:35–00:05:01] Balancing Hard and Soft Skills [00:05:02–00:06:27] Developing EQ in Auditing [00:08:42–00:11:51] EQ in Communication and Reporting [00:11:52–00:13:16] Training for EQ Skills [00:13:17–00:14:31] Blending AI and EQ [00:14:32–00:15:49] Resources to Grow EQ [00:15:50–00:18:24] Using EQ in Remediation [00:18:25–00:21:42] EQ in Planning and Information Gathering [00:21:43–00:24:01] Cultural Sensitivity and Word Choice [00:24:02–00:26:32] Leading Multigenerational Teams [00:26:33–00:30:17] EQ's Role in the AI Era [00:30:18–00:32:25] Leadership, Retention, and EQ [00:32:26–00:35:02] EQ in Walkthroughs and Meetings [00:35:03–00:40:47] Final Thoughts [00:40:48–00:41:53] The IIA Related Content Interested in this topic? Visit the links below for more resources: 2025 AuditSphere Virtual Conference Building a Better Auditor: The Powerful Synergy of EQ and AI Knowledge Centers: Artificial Intelligence 'Mastering Soft Skills in Internal Auditing,' All Things Internal Audit Podcast The IIA's Updated AI Auditing Framework Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Charles King talks with Imraan Mulla about the transformative potential of AI in internal auditing. They discuss AI's evolution from basic automation to advanced applications, the challenges of adoption, and the future of AI in internal auditing. The conversation also covers continuous monitoring, risk assessment, and the role of human judgment in an AI-driven world. HOST:Charles King, CIA, CPA, CFE, CIPP, Partner, AI in Internal Controls Leader, KPMG LLP GUEST: Imrankhan (Imraan) Mulla, Vice president, Analytics and Innovation, Capital One Key Points Introduction [00:00-00:00:21] AI's Evolution in Internal Auditing [00:21-01:08] Challenges of AI Adoption [01:08-02:16] Driving AI Adoption and ROI [02:16-04:31] The Future of Internal Audit with AI [04:31-05:57] Prioritizing Investments in AI [05:57-08:10] Continuous Monitoring and Targeted Audits [08:10-11:05] Flexible Audit Plans and Risk-based Auditing [11:05-12:29] Analyzing Unstructured Data [12:29-14:14] Human Judgment and AI [14:14-16:06] Building a Culture of Innovation [16:06-18:11] Internal Audit as a Beacon for Innovation [18:11-20:48] Agentic AI and Its Applications [20:48-22:49] Final Thoughts [22:49-23:19] The IIA Related Content Interested in this topic? Visit the links below for more resources: 2025 AuditSphere Virtual Conference Knowledge Centers: Artificial Intelligence Auditing the Cybersecurity Program Certificate Implementing The IIA's New Cybersecurity Topical Requirement Cybersecurity Topical Requirement "Undercover AI," Internal Auditor magazine The IIA's Updated AI Auditing Framework Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
This week on The Audit Podcast, we're joined by Mark Freeman, Head of Internal Audit at Vermeer Corporation. In this episode, Mark shares insights from a recent CAE roundtable, where recruitment, audit committee metrics, and Copilot use cases topped the agenda. He also walks us through how he rebuilt internal audit's reputation at Vermeer after stepping into a challenging environment. Plus, he gives us a look at the actual metrics he shares with his audit committee—offering a practical starting point for your own reporting conversations. Be sure to connect with Mark on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 3:03 - Timeless Advice from Charlie Munger 7:15 - Rethinking Recruitment and Talent in Audit 12:10 - Unlocking the Full Value of Internal Audit 15:20 - Reframing the Image of Internal Audit 21:50 - Why Metrics Matter 27:58 - Must-Reads for Audit Professionals 31:30 - Implementing Copilot: AI in Action 39:15 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Levy speaks with Adam Neifach about the challenges of late audit responses — what they call the “dreaded 5:00 p.m. response.” They discuss why audit clients delay engagement, how to foster collaboration, and practical strategies for improving responsiveness. Host:Mike Levy, CIA, CRMA, CISA, CEO and managing principal, Cherry Hill Advisory Guests: Adam Neifach, CIA, CPA, CISA, senior manager of Internal Audit, Frontier Airlines Key Points: Introduction [00:00-00:43] The 5:00 PM Response [00:44-02:28] Explanation of the "5:00 PM response" and its impact on audit processes. Discussion on why audit clients delay engagement. Challenges and Causes [02:29-03:36] Adam Neifach shares his experiences with late responses and the challenges they pose. Exploration of potential reasons behind delayed responses, including inefficiencies and reluctance. Building Relationships [03:37-05:32] Importance of building relationships with audit clients to improve responsiveness. Strategies for fostering collaboration and understanding client perspectives. Proactive Communication [05:33-07:03] The role of proactive communication in preventing late responses. Techniques for maintaining open and constant communication throughout the audit process. Real-world Tactics [07:04-09:35] Adam Neifach shares real-world tactics from his own experience. Practical strategies for encouraging earlier engagement and ensuring smoother audits. Cultural and Generational Differences [09:36-11:08] How cultural and generational differences impact audit responses. Adapting communication styles to different stakeholders. Tactical Solutions [11:09-13:08] Specific tactics for dealing with delayed responses, including setting up pre-deadline meetings. Importance of addressing resource constraints and understanding client workloads. Escalation and Management [13:09-15:11] When and how to escalate issues to management without damaging relationships. Balancing the need for timely responses with maintaining positive client relationships. Final Thoughts [15:12-17:57] Final advice for auditors on improving audit response times and fostering collaboration. The IIA Related Content: Interested in this topic? Visit the links below for more resources: 2025 AuditSphere Conference 'Mastering Soft Skills in Internal Auditing,' All Things Internal Audit Podcast The IIA's On-demand Communication Basics Course The IIA's Effective Communication and Conflict Resolution for Internal Auditors Course Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
All Things Internal Audit: Fraud Podcast"Too Close to the Sun" Listen to The IIA's new Fraud Podcast brought to you by All Things Internal Audit. The Fraud Podcast provides fictionalized accounts of real-world frauds featured in Internal Auditor magazine's Fraud department. In this episode, Chief Audit Executive Robert Soar investigates Summit HVAC's disastrous acquisition of Tan Solar. Rushed due diligence had missed unpermitted installations, deceptive sales tactics, and mounting legal troubles. Soar uncovers critical oversights, highlighting internal auditors' role in preventing costly missteps. IIA members can access the full article here. Interested in more fraud-related topics? Earn CPEs by registering for The IIA's Fraud Analytics for Internal Auditors Certificate, online and in-person. Chapters: Introduction to the Case (00:00:01) Part 1: Setting the World on Fire (00:00:23) Part 2: Burning Money (00:01:57) Part 3: Going Down in Flames (00:04:08) Resources Mentioned: Association of Certified Fraud Examiners (ACFE) Follow All Things Internal Audit: Apple PodcastsSpotify Youtube LibsynDeezer
This week on The Audit Podcast, we're joined by we're joined by David Hill, Managing Director of HillAudit Training Ltd. In this episode, David challenges the idea that stability equals security and internal audit. He explores how budget cuts, resistance to change, and outdated processes can lead to disengagement—hurting recruitment, retention, and audit effectiveness. He also shares strategies to combat stagnation, from fostering innovation to leveraging AI and analytics for efficiency. Be sure to connect with David on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 2:40 - Shaking Up Complacency 9:17 - The One-Day Audit 12:57 - How Well do CAEs Know Their Budget 17:52 - How to Secure More Budget for Your Audit Goals 22:53 - How to Overcome Pushback 24:48 - Why Auditors Need Sales Skills 27:14 - Final thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Warren Stippich speaks with Ethan Rojhani about the evolving role of agentic artificial intelligence in internal auditing. They discuss how agentic AI differs from traditional AI, its impact on risk assessment, and the skills internal auditors will need to adapt. They talk about the ethical considerations, automation of controls testing, and the future of AI-driven audit execution. Host: Warren Stippich, CIA, CRMA, CPA, national managing principal — Advisory Services Quality and Risk, Grant Thornton Guest: Ethan Rojhani, CPA, CFE, principal, Grant Thornton Key Points Introduction [00:00-00:00:06] What is Agentic AI? [00:07-01:34] Key Differences Between Traditional AI and Agentic AI [01:35-05:45] The Future of Agentic AI in Internal Auditing [05:46-09:51] Real-world Applications of Agentic AI in Internal Audit [09:52-12:25] Shifting from Compliance to Advisory Roles [12:26-19:13] Ethical and Risk Considerations [19:14-25:51] The Future of Internal Auditors in an AI-driven World [25:52-30:34] Advice for Auditors on Adopting AI [30:35-33:02] Final Thoughts [33:03-36:04] The IIA Related Content Interested in this topic? Visit the links below for more resources: The IIA's 2025 Analytics, Automation and AI Virtual Conference The IIA's Vision 2035 Report Knowledge Centers: Artificial Intelligence Auditing the Cybersecurity Program Certificate Implementing The IIA's New Cybersecurity Topical Requirement Cybersecurity Topical Requirement "Undercover AI," Internal Auditor magazine The IIA's Updated AI Auditing Framework Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Deborah Poulalion and Andy Cook break down the 2025 North American Pulse of Internal Audit report. They discuss emerging trends, challenges, and opportunities for internal auditors, covering issues like strategy, funding, and artificial intelligence. The 2025 North American Pulse of Internal Audit report is sponsored by AuditBoard. The public consultation for the Third-Party Topical Requirement is open! Review the draft and share your feedback by April 20, 2025. Visit this link to access the public consultation draft to have your say! Host: Deborah Poulalion, senior manager, Research & Insights, The IIA Guests: Andy Cook, CIA, director, Professional Guidance – Financial Services, The IIA Key Points: Introduction (00:00-00:09) The North American Pulse of Internal Audit report (00:10-00:31) The impact of strategy and funding on internal audit (00:32-05:15) The shift toward advisory services (05:16-08:41) Technology risks and cybersecurity challenges (08:42-10:45) The growing importance of data analytics (10:46-13:31) The role of generative artificial Intelligence in internal audit (13:32-16:57) Expanding responsibilities of chief audit executives (16:58-19:10) Audit planning and resource allocation (19:11-22:36) Gender trends in internal audit leadership (22:37-24:10) Remote work trends in internal audit (24:11-28:41) The Global Internal Audit Standards and available resources (28:42-29:40) Final thoughts and closing remarks (29:41-30:25) The IIA Related Content: Interested in this topic? Visit the links below for more resources: The IIA's Research & Reports Center 2025 Risk in Focus Standards Knowledge Center Visit The IIA's website or YouTube channel for related topics and more. Resources Mentioned: The IIA's 2025 North American Pulse Of Internal Audit The IIA's Global Internal Audit Standards The IIA's Vision 2035 Report The IIA's Public Consultation for Third-Party Topical Requirement Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
What are the best industries for a career in internal audit?Which industry would you choose for internal audit?Listen to my perspective and let me know yours!
Leading and governing effectively recognises that “people are an integral factor to ensuring things are done effectively. Board members, staff, and volunteers need to be empowered, trained and equipped to serve. The concept of service needs to be embedded within the infrastructure. Internal audit is an essential part of this pathway. Different systems need to be managed, controlled, and reported upon, on a frequent basis. Where things are not happening as expected, they are investigated, then discussed and corrective action is taken”. Morlai Kargbo, an Association of Chartered Certified Accountants (ACCA) award winner, sets the scene for a fascinating conversation.
Welcome to the award-winning FCPA Compliance Report, the longest-running compliance podcast. In this episode, Tom welcomes Jonathan Marks, who discusses the role of internal audit in export control compliance. Jonathan starts by defining export controls and their significance: regulations governing the export, re-export, and transfer of goods, technology, and services across borders to protect national security and enforce foreign policy. As a Compliance Profession, you should recognize the severe impacts of operational disruptions, supply chain issues, and national security risks resulting from non-compliance, emphasizing the need for comprehensive compliance frameworks. Internal audit responsibilities are expanded, stressing the necessity of robust policies, clear responsibilities, consistent employee training, and thorough risk assessments. Jonathan discusses practical internal audit strategies, including evaluating high-risk transactions, identifying compliance gaps, and regularly monitoring and testing compliance controls through transaction testing, data analytics, third-party due diligence, and incident response mechanisms. Jonathan underscores the importance of collaboration between internal audit, legal, compliance, and supply chain teams to ensure an integrated and proactive compliance approach, thereby mitigating risks and strengthening corporate governance. Key highlights: Understanding Export Controls and Compliance Role of Internal Audit in Export Controls Key Areas for Internal Audit Focus Testing and Monitoring Controls Resources: Jonathan Marks on LinkedIn Tom Fox Instagram Facebook YouTube Twitter LinkedIn For more information on the Ethico Toolkit for Middle Managers, available at no charge, click here. Learn more about your ad choices. Visit megaphone.fm/adchoices
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Bill Truett talks with Nick Lasenko about the critical role of identity and access management in today's organizations. They discuss common risks, best practices, and the impact of AI on identity and access management. The conversation also covers frameworks, regulatory requirements, and real-world use cases. Host: Bill Truett, CIA, CISA, senior manager, Standards & Professional Guidance, IT, The IIA Guest: Nick Lasenko, CISA, CISSP, cybersecurity, privacy, and risk management practitioner Key Points Introduction [00:00-00:00:07] Overview of identity and access management [00:00:08-00:00:31] The financial impact of data breaches [00:00:32-00:01:26] Challenges in detecting and responding to security incidents [00:01:27-00:02:26] Common identity and access management risks for auditors [00:02:27-00:03:26] Weak governance and its implications [00:03:27-00:04:26] Siloed organizations and identity and access management complexities [00:04:27-00:05:26] Regulatory frameworks and standards [00:05:27-00:07:26] Identity and access management controls and data governance [00:07:27-00:09:26] Real-world use cases and security incidents [00:09:27-00:11:26] Horror stories and lessons learned in identity and access management [00:11:27-00:13:26] Best practices for managing user access reviews [00:13:27-00:16:26] Continuous authentication and its challenges [00:16:27-00:18:26] Privileged access management and audit considerations [00:18:27-00:21:26] The impact of AI and machine learning on identity and access management [00:21:27-00:23:26] Final thoughts on strengthening identity and access management controls [00:23:27-00:25:26] Closing remarks [00:25:27-00:31:43] The IIA Related Content Interested in this topic? Visit the links below for more resources: Intermediate IT Auditing Auditing IT Change Management GTAG: Auditing Identity and Access Management, 2nd Edition Fraud and Emerging Tech: Identity and Authentication with the Paycheck Protection Program Implementing The IIA's New Cybersecurity Topical Requirement Cybersecurity Topical Requirement Visit The IIA's website or YouTube channel for related topics and more. Resources Mentioned The IIA's 2025 Analytics, Automation and AI Virtual Conference The IIA's Updated AI Auditing Framework NIST Cybersecurity Framework (CSF) NIST AI Risk Management Framework IBM Cost of a Data Breach Report 2024 CISA and NSA Guidance on Identity and Access Management Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
This week's episode, we're joined by the Grant Thornton risk and advisory team—Andres Castañeda, Jaynitsa Paul, and EJ Jimenez. In this episode, they explain their article Risk Management: Get Your Three Lines in Order in simple terms. They clear up common misunderstandings about the first, second, and third lines of defense in risk management. They also give real examples of when the system works well and when it fails—and why that matters. Check out their article, and connect with Andres, Jaynitsa, and EJ on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 5:19 - How Grant Thornton Utilizes LLMs 8:43 - Understanding The Three Lines of Defense 16:49 -Best Practices for Physical Inventory Control 28:37 - Roles and Responsibilities in the Three Lines of Defense 32:13 - The Relationship Between Compliance and Internal Audit 34:53 - Common Misconceptions About The Three Lines of Defense 37:36 - External Audit's Role in The Three Lines of Defense 38:31 - Advantages of a Strong Third Line of Defense 42:05 - Tools for the Third Line of Defense 44:03 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Ernest Anunciacion and Tom Keaton discuss the evolving role of fraud analytics in internal auditing. They cover how data analytics and AI can improve fraud detection and prevention, along with the challenges and practical strategies for success. Host: Ernest Anunciacion, CIA, head of product marketing, MindBridge Guest: Tom Keaton, CIA, CRMA, CFE, CISA, director of Internal Audit, Crown Castle Key Points Introduction [00:00-00:00:06] Ernest's background [00:00:07-00:00:54] Tom's background [00:00:55-00:01:50] Impact of data analytics and AI on fraud detection [00:01:51-00:04:27] Challenges in implementing data analytics in internal audit [00:04:28-00:07:06] Using data analytics for fraud investigation [00:07:07-00:09:32] Predictive analytics and identifying fraud trends [00:09:33-00:12:06] Continuous monitoring vs. early warning dashboards [00:12:07-00:15:45] Skills required for fraud analytics [00:15:46-00:19:03] Role of AI in fraud investigations [00:19:04-00:24:04] Future of AI in internal audit [00:24:05-00:25:27] Interesting fraud investigation stories [00:25:28-00:29:00] Closing remarks [00:29:01-00:30:03] The IIA Related Content Interested in this topic? Visit the links below for more resources: Fraud Analytics for Internal Auditors Certificate Targeting Fraud With Data Analytics Global Knowledge Brief: Data Analytics: Part 2: Gathering, Understanding, and Visualizing Data Visit The IIA's website or YouTube channel for related topics and more. Resources Mentioned The IIA's Updated AI Auditing Framework 2025 Fraud Virtual Conference Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
All Things Internal Audit: Fraud Podcast"Frankenstein's Roadster" Listen to The IIA's new Fraud Podcast brought to you by All Things Internal Audit. The Fraud Podcast provides fictionalized accounts of real-world frauds featured in Internal Auditor magazine's Fraud department. In this episode, Chief Audit Executive Frank Harley investigates a sophisticated synthetic fraud scheme at Speed Bird Automotive. The fraudster, posing as Sheila Jackson, exploited weak identity verification controls to purchase a luxury Mercedes SL Roadster. Harley's investigation reveals the dealership's vulnerabilities and highlights the critical role of internal auditors in detecting and preventing such fraud. Don't miss "Frankenstein's Roadster." IIA members can access the full article and bonus content here. Interested in more fraud-related topics? Earn 6.6 CPEs by registering for The IIA's 2025 Fraud Virtual Conference, scheduled for February 20, 2025. Chapters: Introduction to the Case (00:00:01) Part 1: The Mysterious Customer (00:00:22) Part 2: Cracks in the Controls (00:02:02) Part 3: Fortifying the System (00:04:08 Resources Mentioned: 2025 Fraud Virtual Conference Association of Certified Fraud Examiners (ACFE) Follow All Things Internal Audit: Apple PodcastsSpotify Youtube LibsynDeezer
Here is my challenge to the Internal Audit community. We talk a lot about AI, but let's go beyond just improving reports or defining project scopes. I want to hear about advanced AI use cases you've implemented in your practice. f you have a real-world example, let's share it!
Trent's AuditBoard Webinar - Up Next for Internal Audit: AI Agents This week, Trent explains how AI Agents are set to transform internal audit. On January 22nd, he will host a webinar with AuditBoard to discuss generative AI for internal auditors, breaking down what AI Agents are and how they work. These agents handle tasks like analyzing data, writing reports, and reviewing findings, making audits faster and more efficient. If you're involved in SOX or similar work, this could be a game-changer. Register today and learn how AI Agents can transform your audit processes. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
The Institute of Internal Auditors Presents: All Things Internal Audit The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Dana Lawrence and Dhayalaruban Thangaraja discuss the complexities of auditing cryptocurrency and blockchain. They explore the unique challenges these technologies offer and share practical guidance for navigating this evolving landscape. Host: Dana Lawrence, senior director of fintech compliance, Pacific West Bank Guests: Dhayalaruban Thangaraja, internal audit director, BDO Malta Key Points: Introduction [00:00-00:00:07] Ruban's background [00:00:08-00:00:33] Unique challenges in auditing cryptocurrency [00:00:34-00:03:26] Cybersecurity risks and best practices [00:03:27-00:05:06] Overview of regulatory frameworks and MiCA [00:05:07-00:07:06] Preparing for regulatory compliance [00:07:07-00:09:32] Advocating for governance enhancement [00:09:33-00:11:55] Building technical knowledge for internal auditors [00:11:56-00:14:16] Emerging trends in digital assets [00:14:17-00:17:48] Practical steps for auditing cryptocurrency adoption [00:17:49-00:20:29] Final tips for internal auditors [00:20:30-00:22:41] Closing remarks [00:22:42-00:33:25] The IIA Related Content: Interested in this topic? Visit the links below for more resources: Blockchain and IT Governance Online Exclusive: Setting the Standard for Crypto Global Knowledge Brief: Fraud Part I: Fraud in the Cryptosphere Privacy and Data Proection: Part 3 The IIA's Proposed Letter to Congress for Enhancing Corporate Governance at Cryptocurrency Exchanges Visit The IIA's website or YouTube channel for related topics and more. Resources Mentioned: European crypto-assets regulation (MiCA) Dhayalaruban Thangaraja (2024, August 27). Decoding Digital Assets: Challenges for Internal Auditors in the Crypto World The IIA's Fraud Part I: Fraud in the Cryptosphere The IIA's Proposed Letter to Congress for Enhancing Corporate Governance at Cryptocurrency Exchanges Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
This week's episode, we're joined by John Thompson, Global AI Leader at EY. In this episode, John explains how AI, especially agents, will shape the future of businesses and internal audit teams. He identifies 2025 and 2026 as pivotal years for agent technology and the tools that will emerge from it. Be sure to connect with John on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 4:53 - Adopting a Safety Mindset for AI 8:38 - What's New in AI: Agents 11:42 - Real-World Examples of Agent Implementation 15:35 - Internal Audit and Resources for Agent Development 17:53 - New Terminologies Related to AI Agents 21:24 - The Path to AGI 22:36 - AGI and Robotics 24:54 - Will AI Help or Harm Society? 27:11 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
The Institute of Internal Auditors Presents: All Things Internal Audit In today's episode, to kick off the new year, we're counting down your top 5 favorite episodes from 2024! From tackling AI risks and ethics to uncovering misleading greenwashing claims and exploring the next frontier of quantum computing, these episodes highlight the key issues shaping the internal audit profession. So, whether you're a longtime listener or new to All Things Internal Audit, grab a seat and join us as we revisit the episodes that made the biggest impact in 2024. Let the countdown begin! Episode 1: Tackling AI Risks and EthicsRobert Pérez, owner, Pérez Communication Solutions George Barham, director of standards & professional guidance, The IIA Episode 2: Governance and Ethical Dilemmas in AI David Petrisky, director, professional standards, The IIA Brian Willis, LBMC senior manager, cybersecurity advisor Charles King, managing director, advisory services, KPMG LLP Alex Gacheche, head of information security, Meta Ivan Martinez, managing director, internal audit, Goldman Sachs Ethan Rojhani, Grant Thornton principal, risk advisory services Wes Luckock, Grant Thornton senior manager, AI, automation and analytics Episode 3: Exposing Greenwashing Claims David Petrisky, director, professional standards, The IIA Edith Wong, forensic accountant in Investigations and Compliance, FTI Consulting Brian Wilmot, Compliance and Regulatory Counseling and Investigations and White Collar Defense Practices attorney at Paul Hastings LLP Episode 4: Quantum Computing's Impact on Internal Auditing Lynn Moehl, director of internal audit and chief audit executive, The IIA Nick Reese, co-founder and COO of Frontier Foundry & former director of emerging technology at Department of Homeland Security Episode 5: Combating Financial Crime with AIRicardo Martinez, senior manager, Portfolio Strategy, The IIA Antonio Cacciapuoti, head of internal audit, Eurizon Alessandro Casarotti, forensic and anti-financial crime director, PwC Luxembourg Key Points: Introduction [00:00:02 - 00:00:36] Episode 1: Tackling AI Risks and Ethics [00:00:38 - 00:06:27] Overview of the AI auditing framework [00:00:54 - 00:01:41] Building an understanding within the organization [00:01:41 - 00:02:42] Governance, management, and internal audit domains [00:02:42 - 00:04:25] Engagement and leveraging relationships [00:04:25 - 00:05:25] Tools and resources for practitioners [00:05:25 - 00:06:27] Episode 2: Governance and Ethical Dilemmas in AI [00:06:32 - 00:11:42] Introduction to AI governance and ethics [00:06:45 - 00:07:18] Addressing bias and ethical risks in AI [00:07:18 - 00:08:19] Monitoring and controlling AI models [00:08:19 - 00:09:20] Governance standards and independent monitoring [00:09:20 - 00:10:15] Challenges and strategies for maintaining ethical standards [00:10:15 - 00:11:42] Episode 3: Exposing Greenwashing Claims [00:12:04 - 00:16:50] Introduction to greenwashing [00:12:10 - 00:13:00] Legal and regulatory aspects of greenwashing [00:13:00 - 00:14:19] Examples of greenwashing cases [00:14:19 - 00:15:08] Vague environmental claims and their scrutiny [00:15:08 - 00:16:02] Risks and impacts of greenwashing on companies [00:16:02 - 00:16:50] Episode 4: Quantum Computing's Impact on Internal Auditing [00:17:00 - 00:22:58] ntroduction to quantum computing [00:17:04 - 00:17:34] Impact of quantum computing on internal auditing [00:17:34 - 00:18:23] Malicious use and cybersecurity risks [00:18:23 - 00:19:26] Current state and future potential of quantum computing [00:19:26 - 00:20:24] Security risks and workforce training for auditors [00:20:24 - 00:22:58] Episode 5: Combating Financial Crime with AI [00:23:03 - 00:26:37] Introduction to AI in financial crime detection [00:23:18 - 00:24:08] Benefits of AI in transaction monitoring [00:24:08 - 00:25:03] Screening systems and reducing false positives [00:25:03 - 00:25:52] Training AI systems and cybersecurity considerations [00:25:52 - 00:26:37] IIA Related Content: Interested in this topic? Visit the links below for more resources: Auditing Artificial Intelligence Course Demystifying AI: Internal Audit Use Cases for Applying New Technology The IIA's ESG Certificate Program The IIA's Environmental, Social and Governance Knowledge Center The Big Idea: Quantum Computing Elevating Performance and Adding Value Get to Know the New Cybersecurity Topical Requirement Webinar Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
Soft Skills The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Jacka joins Mike Levy to discuss the importance of soft skills in internal auditing. They explore how emotional intelligence, communication, and relationship-building are crucial for auditors to drive change and add value to their organizations. Host: Mike Levy, CEO of Cherry Hill Advisory Guest: Mike Jacka, chief creative pilot at Flying Pig Audit, Consulting and Training Solutions Key Points: Introduction and Episode Overview [00:00:02] The Importance of Soft Skills [00:00:26] Evolution of Auditing and Soft Skills [00:01:43] Recruiting for Success [00:02:51] Driving Change Through Influence [00:04:48] Training and Development [00:06:12] Emerging Risks and Asking the Right Questions [00:08:18] Advisory vs. Assurance Roles [00:09:06] Adapting to Technology [00:10:16] Diverse Hiring Practices [00:13:32] Risks of Overreliance on Technology [00:16:33] Future-proofing Internal Audit [00:20:11] Key Takeaways for CAEs [00:24:27] Closing Remarks [00:27:31] The IIA Related Content: Interested in this topic? Visit the links below for more resources: Communication Skills for Auditors: Interviewing and Negotiating Course Talent Management: Recruiting, Developing, Motivating, and Retaining Great Team Members Practice Guide IIA's Internal Audit Competency Framework Internal Auditor Magazine Visit The IIA's website or YouTube channel for related topics and more. Resources Mentioned: J. Michael Jacka and Bryant Richards, "Stepping Into The Future," Internal Auditor magazine, April 2024 Vision 2035 Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
This week's episode, we're joined by Charles King, Internal Controls Leader in AI at KPMG US. In this episode, Charles brings a unique perspective as both an AI expert and an audit professional, He looks back on key moments from 2024, talks about where organizations are on the maturity model, and unpacks the biggest topic of 2025: agents. Charles does a fantastic job breaking down what agents are and what they mean for audit professionals. Be sure to connect with Charles on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 3:33 - ParentGPT 8:11 - AI's Role in Internal Auditing 18:04 - What's Next for AI in 2025 26:45 - Exploring the Future of AI Agents 38:11 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
The end of another year has rolled around in the blink of an eye! We've managed to publish a whopping 42 episodes this year, pushing us over the 200 episode mark. We want to thank all our listeners, both old and new, for allowing us to continue to share both ISO tips and success stories from our wonderful clients. We hope you'll follow along as we continue our podcasting journey in 2025. To close out the year, Ian Battersby and Steve Mason share some of their stories of misadventures during audits, from common mistakes, to broom battles and forklift mishaps, they really have seen it all! Listen, laugh and learn what not to do during an audit. You'll learn · What not to do in an audit Resources · Isologyhub In this episode, we talk about: [02:05] Episode Summary – Ian and Steve share some of their experiences from their time as auditors. From common mistakes to outlandish situations that you'd have to see to believe, listen and learn what shouldn't happen during an audit. [03:40] Lazy Copycats: Steve recounts a time where a company had copy and pasted their Management Review for years, which rightfully earned them a non-conformity. Ian shares a similar story where a construction company submitting a tender had copy pasted the content and included the wrong company name! The copying doesn't stop there, as Steve remembers a company Quality Manual that managed to include multiple company names. It was found that they'd simply copy and pasted example pages they'd found online that looked good, but didn't bother to update any of the content to be relevant to them. [06:30] Training Troubles – Ian recounts a time where he was auditing a subcontractor for a construction company that required a record of training. The induction was very important and obviously needed to be documented. When he checked the documents, though all the forms had different names, all the signatures suspiciously had the exact same handwriting! Turns out the Director was signing them all off, which is obviously in breach of a number of health and safety related regulations. [08:00] IT Security slip-ups – Steve recounts a time where a Finance Director had good intentions, but poorly implemented his idea. The Finance Director didn't trust their IT system back-up and instead backed-up all his information on a memory stick. Steve had pointed out the flaws with this, such as losing the memory stick, data getting corrupted ect. It just simply isn't a safe or reliable way to store such important information. [09:05] Disconnected Leadership – Ian shares a time where an auditor caught the lack of leadership commitment to their management system. Despite it being a very nice looking management system by all accounts, the cracks showed enough for an outsider to spot the flaws. Steve adds that sometimes, you can over engineer a management system to a point past useful. It needs to work for your business, otherwise people will work around it to get what they need done. Steve had a rather obvious example if this when he required a chat with a member of leadership, who refused on the day initially, despite it being scheduled for 6 months. The person relented a few minutes over lunch where he posed his complete commitment to BS 5750 – A standard that existed 20 years ago and had since been replaced by ISO 9001. Very telling for his level of ‘commitment'. As we have covered in a previous episode – Leadership commitment is imperative to a successful management system. [11:40] Skip Diving for Secrets – Steve shares his experience of conducting a skip diving exercise, which is following a document waste trail. At a certain company, they ended up looking in an actual skip only to find what looked like a lot of confidential documents, when questioned someone had said that they looked like they belonged in the CEO's filing cabinet. When questioned, the CEO remarked ‘I didn't want you to catch me with anything that I shouldn't have, so I threw it all out last night'. This warranted a non-conformity as anyone could have gone past and fished out that confidential information just as Steve had. Ian also adds a time where he worked in the NHS and a local hospital had an accident where a lot of confidential medical files ended up scattered across the floor. These were documents that should have been disposed of securely. [14:05] PPE? You've got to be kidding me! – Ian recounts a time working for a manufacturing company that was part of a large international firm. Their UK operation had to abide by strict PPE requirements, proper shoes, eye protection ect. It was something that everyone on the premises had to adhere to. One day, a Director walked in with none of the PPE which was clearly labelled on many of the signs decorating the shop floor. He had incorrectly assumed that because of his position, he could walk around with no PPE whatsoever. Fortunately the shop floor supervisor set him right and sent him to get properly suited up. [15:35] Data Centre security says no – Steve recalls a time when a member of top management went to visit one of their own data centre's, on getting to the gate the security had told him ‘I don't care who you are, your name isn't on the list so you're not getting in.' That person hadn't gone through the process of being approved for entry. Yet, predictably, they sent complaints everywhere, but the head of the UK branch had quite rightly praised the security personnel for simply following protocol. [16:55] Private bank details? Don't mind if I do! – While Steve was auditing physcial security for an office, a printer ended up printing the payroll of every employee at the business. This wasn't in a private room, this was in the middle of the office, so anybody could walk up and see bank account details and salaries! When questioned, it turned out their Finance Director was working from home, and hadn't bothered to contacts anyone to retrieve the documents. So unsurprisingly, they received a non-conformity. [19:55] Do not goad the auditor - A bit of advice from Steve “Never say ‘this is our most secure room' to an auditor” – that is essentially a challenge, and one that you'll likely lose if you don't follow your own processes. Steve put this to the test when someone had claimed only 3 people had access to a certain room. Out of curiosity, Steve used his visitor badge to gain entry, and asked if he was included in that 3. Obviously he wasn't, and this was simply down to access control being a bit muddled at that particular company. [21:25] Mistaken Identity: Steve recalls a time when he was given a visitors badge with a completely different person as the photograph. It had no effect on the correct access rights, but amusing all the same. He shares another story where he shared a waiting room with another Steve. When they called only the first name, the other Steve was taken into that business and questioned on ISO, to which the poor man had to inform them that he had no idea what they were talking about! Shortly after, the correct Steve was collected. But it goes to show how important it is to ensure you're giving access to the right people. [24:20] Battle of the Broomsticks: Ian recalls another time when working in construction, when he had the opportunity to work at a horse racecourse. They were looking to achieve what was OHSAS 18001 at the time (now known as ISO 45001), and it was going so well until a few new hires came running across the stable yard wielding 2 brooms, battling like gladiators in view of their auditor. Thankfully they weren't really harming each other, but it was enough for the auditor to raise a few questions about subcontractor controls. You really couldn't write the timing any better (or worse, I suppose!). [26:15] Clearly a certified forklift driver: While Steve was working at a warehouse, the manager there stressed how well trained all of their forklift drivers were, how sensible they all were. Though, Steve could see a person dancing, speeding and popping wheelies with his forklift over the managers shoulder. After he'd been alerted to the wannbe stunt driver, the manager went to have a word with them. [27:30] Accidents don't happen after 5pm: Ian was working at a company that highly valued the use of PPE on-site, everyone did a good job of abiding by that, until it came to the end of the day. One person leaves across the shop floor in just a normal t-shirt and jeans, waving them all off happily as he leaves for the day. He still had to cross the shop floor, and being off the clock doesn't make you invincible. [29:10] Fire Door Dramas: Steve recalls a time during an ISO 9001 audit where he spotted a fire door had been blocked by pallets in a warehouse. Another time he saw a fire door that was actually chained and padlocked! On another occasion, a local council had put their rubbish bins outside the fire door for the building, and during a fire drill, they couldn't get out. Ian states how many times he's seen signs ignored by drivers who park in front of fire exits. All this to say that a little awareness goes a long way. [31:10] Emergency Plans for the avid reader: During an incident at an NHS hospital where they'd suffered a long term major power outage, Ian and the staff had found that the emergency plans were 144 pages long! With Senior responsibilities hidden away in an Appendix on the last few pages. Well thought out plans are necessary, but the actual procedure needs to be something that can be followed in the event of an emergency. A little common sense should be applied when deciding what needs to be communicated. [34:00] Risk Assessment disaster: While working with a team in a manufacturing plant, Ian helped them to streamline their risk assessment process as their previous one needed too many signatures to actually go anywhere. This bottleneck was resolved with months of hard work, or so they thought… When it came to being audited, the auditor asked the team manager what happened to all of the risk assessments, he'd then pointed towards the Health & Safety Management and claimed they had them all, who had to admit that he didn't. Later that evening a director called the administration and asked to hide all of the documentation, to which she rightly refused to do. This also linked back to when the auditor had asked about how the apprentices were trained, and it happened that the apprentice supervisor was on holiday and so they were just let onto the shop floor. Suffice to say, this didn't reflect well on the resulting audit results. [36:30] Against the wire: Ian states that manufacturing companies are not famous for admin. He had one experience while trying to get a recertification booked in, which went up against the wire for their current certification running out. The CB obliged and sent a very qualified Health & Safety assessor there, who took them to pieces. It didn't take long for him to point out that they had a really nice management system with no commitment from managers to use it. A word to the wise – don't leave your recertification up until the last minute! If a CB tried to move your recertification past that expiry date, you can and should push back. [39:00] Password palavers: Steve shares an experience when he interviewed a very organised PA who managed 7 Directors. At the end of the audit he pointed out a folder on her computer called ‘passwords', to which she obliged to show him the contents. Predictably it contained all the usernames and passwords for various accounts the Directors owned. She knew about the secure passwords policy, but no one could realistically remember that many! When Steve questioned the technical team, they states only selected people needed one, and she wasn't one of them. Steve pointed out that she did, and had done the best she could with the tools available, and gifted them a non-conformity as a result as they hadn't done a good job of ascertaining who should get additional security tools. By the end of that day, the PA had their own password vault. [41:30] A fire extinguisher as useless as a chocolate teapot: In another company Steve had noted that they still had a black fire extinguisher. When asked, the staff replied that they were all up-to-date as of 2007. On checking, it was revealed that it had last been serviced in August 1997 – so no, it was not in fact ‘up-to-date'. It may be innocuous to some, but when it comes to safety equipment, that could be the difference between life and death in an emergency. [42:40] Technophobes in a modern age: Ian recounts a past quality audit he did for an engineering company. They require a lot of specific ISO Standards for that industry, and so the company paid a subscription service to ensure they had digital copies of all these Standards to refer back to. One such standard was on verification, and on asking a particular quality engineer about how he verifies a specific product, he pulls out a printed hard copy of a standard from 1993. Ian was interviewing him in 2017, there had been at least 2 updated versions of the Standard out by that point. When probed about why he wasn't using the online standards library paid for by the company, he simply stated ‘I don't like computers'. [45:00] The case of the mysterious ghost file: Steve once had an audit with a relatively nervous member of staff, after explaining that all he has to do is explin how he works, the interview went rather smoothly. At one point he photocopied a bit of paper, hole punched it and filed it away on a shelf in the corner. Steve initially thought ‘good admin, he's clearly following a process', so when he returned Steve asked why he filed that particular bit of information away, to which the staff member said ‘I don't know, I've just been told to do it'. Steve then questioned the Quality Manager there about that document and they replied with the same. He then questioned the warehouse personnel to get the same answer. So, you have this document being photocopied over and over, filed away each time and no one knows why! Steve politely pointed out that it might be a good idea to rethink that pointless process. [47:50] Useless numbering systems: Ian had a similar experience with a numbering system that nobody knew the origins of. The staff involved simply shrugged it off and stated it was simply just what they used. Ian decided to put something to the test, by getting rid of it. He removed an entire archive system from a company's network folder, as back then file space was a big cost and concern. He kept the files and waited to see if anyone actually needed them. After months, he only had 2 requests for documents. It's important to ask both what is and isn't working well. Getting input from all levels of staff can be eye opening, and empower those employees who can help shape up company processes to work more efficiently. [49:50] Allergic to Audits: Ian shares a secondhand story where a trainer for the HSE was conducting a site visit, where he needed to question the shop supervisor on a few things. He asked him for something he couldn't see, and the guy agreed to go get it, and just never came back. Apparently he was so scared of the auditing process that he just went home! [54:00] Shady police and stolen cars: One of Steve's previous clients had an experience where what they thought was a policeman asked about a hire car the company owned, stating it had been involved in a crime. They didn't think much of letting him take it for his ‘investigation'. Later when the hire company asked about getting their car back, the staff let them know what happened, rightly confused this led to a lot of discussion. As you can probably tell, the man was not a policeman and had made off with a nice shiny BMW simply by asking for it. If something like this happens to you, always ask for documentation from the police. [55:00] The Great Computer Caper: Ian recalls a training centre incident where a lot of computer equipment is stored in one suite. One day a few guys came in and started lifting stuff out, people were holding doors open for them, not at all thinking them to be thieves. Low and behold, they were and took everything. Steve recounts a very similar experience where the thieves posed as a computer service company, stripping the entire office on a Friday afternoon. It wasn't until Monday when everything was still gone that people thought to question who those people really were. Thank you all for a great 2024, we look forward to bringing you more ISO tips and success stories in 2025. We'd love to hear your views and comments about the ISO Show, here's how: ● Share the ISO Show on Twitter or Linkedin ● Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one. Subscribe to keep up-to-date with our latest episodes: Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List
The talent pipeline in Internal Audit needs a boost—but what can we do about it? Listen to my latest podcast episode with Lindsey Patterson for actionable strategies: ✅ Connect with Lindsey✅ Partner with your local universities✅ Leverage resources from the IIA Let's move beyond discussing the challenge—let's be the solution. Help shape the future of Internal Audit. #InternalAudit #TalentPipeline #IIA #Leadership #CareerDevelopment
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Antonio Cacciapuoti and Alessandro Casarotti join Ricardo Martinez to discuss the impact of AI on financial crime. They explore how AI is being used by criminals, the challenges it presents, and how internal auditors can leverage AI to enhance their controls and detection mechanisms. Learn more from this episode's guests, Antonio Cacciapuoti and Alessandro Casarotti, at their upcoming session at The IIA's 2025 Fraud Virtual Conference on February 20th, 2025. Host: Ricardo Martinez, senior manager, Portfolio Strategy, The IIA Guests: Antonio Cacciapuoti, head of internal audit, Eurizon Alessandro Casarotti, forensic and anti-financial crime director, PwC Luxembourg Key Points: Introduction to AI in Financial Crimes (00:00:02) Criminal Use of AI in Financial Crimes (00:00:35) AI's Impact on Misinformation and Market Manipulation (00:00:51) AI in Transaction Monitoring and Predictive Analysis (00:04:12) Challenges with Data Quality and System Maturity (00:07:24) Human Skills and Data Quality in AI Efficiency (00:08:31) AI's Role in Reducing False Positives (00:06:08) Importance of Human Factor in AI Implementation (00:09:11) AI's Limitations and the Need for Human Oversight (00:10:13) Future of AI in Internal Auditing (00:12:19) Multidisciplinary Approach for Future Talent (00:15:29) Risks of Over-Reliance on AI by Young Auditors (00:17:29) Conclusion and Final Thoughts (00:18:23) The IIA Related Content: Interested in this topic? Visit the links below for more resources: Auditing Artificial Intelligence Course Demystifying AI: Internal Audit Use Cases for Applying New Technology Visit The IIA's website or YouTube channel for related topics and more. Resources Mentioned: IIA 2025 Fraud Virtual Conference PwC Global Economic Crime and Fraud Survey IIA Artificial Intelligence Knowledge Center IIA Vision 2035 Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
From wanting to be a dentist, to musician, to then accountant, and finally internal auditor. Listen to Ian Senior's story and how all roads lead to internal audit.
This week's episode, we're joined by Michael Pellet, Director of Internal Audit at Lyft. In this episode, Michael explores strategies for hiring and retaining top talent, highlighting his innovative staffing model. He emphasizes the importance of all auditors being proficient in data, even if they aren't experts in AI, and underscores the critical role of data governance in today's audit landscape. Michael also shares how marketing automation techniques can be adapted to enhance internal audit processes. Be sure to connect with Michael on LinkedIn. Resources: Why All Internal Auditors Need to Be Data Experts - Internal Audit 360 Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 2:19 - What's in your Internet Browsing History? 6:10 - Tackling Hiring and Retention Challenges 16:17 - Innovative Staffing Model 18:03 - Why All Auditors Should Be Data Experts (But Not Necessarily AI Specialists) 27:28 - Why Data Governance Matters More Than Ever 36:48 - Applying Marketing Automation Techniques to Internal Audit 47:22 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
What is the future of Internal Audit in Corporate Governance? And where do you set the limit? Would you audit your own Board of Directors? Listen for insights from Adrian Resag and Benoit Lescot.
Today's guest is Eric Wilson, Director of Internal Audit and Chief Audit Executive of Gulfport Energy. Gulfport Energy is a natural gas-focused exploration and production company operating independently. It specializes in exploring, acquiring, and producing natural gas, crude oil, and natural gas liquids (NGL) within the United States, with key activities centered in the Appalachia and Anadarko basins. With his extensive experience in the energy and retail sectors, Eric shares his insights on the critical challenges auditors face today, especially as they navigate the complexities of emerging AI capabilities. We explore how the oil and gas industry, among others, is integrating AI and advanced technologies. This episode is sponsored by MindBridge. Find out more about sponsored content and how to engage with the Emerj audience at emerj.com/ad1.
This week's episode, we're joined by Julio Tirado, Executive Vice President-Director of Internal Audit & Compliance at SpiritBank. In this episode, we focus on responsible AI and effective strategies for managing new technologies. Julio shares insights on integrating AI in the workplace, understanding AI hallucinations, and exploring emerging AI trends. He also recommends some great AI resources. Be sure to connect with Julio on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 1:07 - What's in your Internet Browsing History? 4:44 – Exploring Responsible AI 8:36 – Integrating AI into Your Workspace 11:35 – Applying Responsible AI to Internal Audit and Risk 18:24 – Understanding AI Hallucinations 22:27 – ChatGPT and Security Considerations 28:44 – Emerging Trends in AI Technology 37:58 – AI Community and Top Resources 42:36 – ChatGPT's Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
All Things Internal Audit: Filling the Internal Audit Talent Gap (Bonus Content) In this episode, Amanda Jo Erven talks with Desiree Rivera about developing the next generation of internal auditors. They discuss attracting new talent and the power of mentorship and community. In bonus content, Jerick Mediavilla joins Robert Perez to discuss the challenges of keeping content fresh and relevant for a global audience. Guests:Amanda Jo Erven, lecturer and director of Internal Audit Education, MSU Denver Host:Desiree Rivera, IIA Academic Relations manager Key Points: Introduction and Episode Overview (00:00:02) Amanda's Journey in Internal Audit (00:00:28) Challenges in the Internal Audit Talent Pipeline (00:02:59) Creative Recruitment Strategies (00:04:38) Essential Skills for Internal Auditors (00:07:22) Mentorship and Community Engagement (00:12:15) Advice for Young Professionals (00:18:24) Introduction to Bonus Content (00:20:48) Collaboration with Subject Matter Experts (00:23:08) Challenges in Content Development (00:24:27) Feedback and Continuous Improvement (00:26:38) Ensuring Compliance (00:26:38) BONUS CONTENT HOST: Robert Pérez, owner, Pérez Communication Solutions GUEST:Jerick Mediavilla, IIA curriculum quality specialist The IIA Related Content: Interested in this topic? Visit the links below: Internal Auditing Education Partnership (IAEP) Program Internal Audit Competency Framework IIA Learning and Development IIA's Learning Center Visit The IIA's website or YouTube channel for related topics and more. Resources Mentioned: Internal Auditing Education Partnership (IAEP) Program MSU Denver's Risk Assurance & Advisory (Internal Audit) Program MSU Denver Accounting Student Organization (ASO) NASBA (National Association of State Boards of Accountancy) Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
All Things Internal Audit Tech: Leveraging Data Analytics In this episode, Robert Findlay talks with Lynn Moehl about the evolving role of data analytics and AI in internal auditing. Findlay shares strategies for overcoming challenges, best practices for integrating data analytics, use cases, and the importance of clear communication with stakeholders. They discuss the differences between basic data analytics and AI, the skills required for each, and how advanced tools can enhance audit processes. Guests:Robert Findlay, global head of IT Audit, Glanbia Host:Lynn Moehl, IIA director of Internal Audit and CAE Key Points: Introduction to Data Analytics and AI in Internal Auditing (00:00:02) Differences Between Basic Data Analytics and AI (00:00:34) Skills Required for Data Analytics vs. AI (00:01:21) Effective Tools for Specific Audit Scenarios (00:02:17) Access to Data and Organizational Policies (00:04:07) Criteria for Choosing the Right Tool (00:05:02) Challenging Audit Scenarios and Data Analytics Solutions (00:05:35) Surprising Insights from Data Analytics (00:06:43) Pitfalls and Mitigation Strategies in Data Analytics (00:08:13) Communicating the Benefits of Data Analytics (00:10:08) Best Practices for Integrating Data Analytics (00:11:11) Measuring Success of Data Analytics Initiatives (00:12:19) Guidance for Using AI in Analytics (00:13:15) The IIA Related Content: Interested in this topic? Visit the links below for more resources: Data Literacy Certificate: A Journey to Data Analytics Data Analytics: Part 3, Developing a Resilient Data Analytics Strategy Microsoft® Excel: Data Analytics Descriptive statistics Getting Started With: Data Analytics Visit The IIA's website or YouTube channel for related topics and more. Resources Mentioned: Excel ACL: Galvanize ACL Python scripts Tableau QlikView SAP Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
This week's episode, we're joined by Marie Walsh, Spotify's Head of Internal Audit and Risk. In this episode, Marie shares her passion for guiding team members in their career paths, both within and beyond internal audit. She discusses her empowering strategies, including thoughtful one-on-one sessions that support individual growth, as well as her priorities for adding real value to Spotify's leadership. Be sure to connect with Marie on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 2:44 - What's in your Internet Browsing History? 6:38 - Analytics and AI Innovation at Spotify 10:00 - Guiding Your Team's Growth in Internal Audit 16:26 - Building Departmental Connections That Influence Beyond 20:16 - The Power of One-on-One Meetings 27:06 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
Internal auditors can be a not-so-secret weapon for strengthening an organization's ability to create value. We caught up with Ahmed Shawky Mohammed and Matej Drašček at the IIA International Conference, where they talked about purpose-driven function internal audit teams.
Sanjay shares how to run a successful franchise by following brand processes and adjusting to the shift towards digital, loyalty-driven operations. He also discusses the value of enterprise risk management, compliance, and consistency. Welcome to Elevating Brick and Mortar. A podcast about how operations and facilities drive brand performance.On today's episode, we talk with Sanjay Jain, the Chairman of the National DCP Board of Directors and independent franchise business owner. NDCP brings global expertise in strategic sourcing, distribution, restaurant solutions, business services, and supply chain to serve Dunkin', one of the world's leading restaurant brands.Guest Bio:Sanjay Jain serves as the Chairman of the National DCP Board of Directors. He brings 35 years of Accounting, Finance, and Information Technology experience with Fortune 500 companies to the supply chain management cooperative.Jain joined the NDCP Board in 2016, representing Series C. Prior to becoming Board Chairman, Jain served as the Treasurer, co-chaired the Sourcing Committee, and spearheaded the Internal Audit function at NDCP through his role on the Finance/Audit Committee. He currently owns a large network of Dunkin'/Baskin Robbins stores in Queens and Long Island, New York. As an elected District Advisory Co-Chair franchisee from Queens, he is actively involved with the Development Committee, Compliance, NY Sales Taxes and the Wage Group. In his capacity as a member of Dunkin's Brand Advisory Committee, he works with the Menu Management and Development Advisory Sub-Committees.Jain's work as a financial executive and certified public accountant in the retail, food and supply chain industry has included an emphasis on internal controls, financial reporting, tax, and risk management. As the Executive Vice President and Chief Internal Auditor of Abovenet Inc., Jain helped turn the Company from bankruptcy into a publicly traded company on the New York Stock Exchange by working closely with the Audit Committee and the Board of Directors. He developed their annual strategy, conducted risk analysis, and developed corporate plans for both domestic and foreign entities.He also has ten years of public accounting and consulting experience. In his role as Audit Director at Ernst & Young and BDO Seidman in the Metro New York area, Jain helped clients streamline both their operations and control processes, managing and leading groups of professional auditors worldwide that saved his clients millions of dollars. He has been actively involved as a Board member with the Institute of Internal Auditors and has presented at the American Institute of Certified Public Accountants forum.Jain has a Management Information Systems degree from the University of Hartford, a Master of Business Administration degree from Dallas Baptist University and a Master of Commerce degree from the University of Rajasthan in India. Timestamps:13:45 - About NDCP05:17 - Sanjay's venture into franchise ownership08:53 - Following brand guidelines10:24 - Handling consumer expectations20:31 - How do you ensure consistency? 28:35 - Dealing with scarce human capital33:49 - The consumer of the future39:35 - Advice for franchisees41:13 - Where to find SanjaySPONSOR:ServiceChannel brings you peace of mind through peak facilities performance.Rest easy knowing your locations are:Offering the best possible guest experienceLiving up to brand standardsOperating with minimal downtimeServiceChannel partners with more than 500 leading brands globally to provide visibility across operations, the flexibility to grow and adapt to consumer expectations, and accelerated performance from their asset fleet and service providers.Links:Connect with Sanjay on LinkedInConnect with Sid Shetty on LinkedinCheck out the ServiceChannel Website
On the latest episode of Chesterfield Behind the Mic, we welcome Internal Audit Director Khara Durden to talk about her department, what it does for the county, how it helps to improve processes throughout the organization, and why International Fraud Week is something it draws attention to each fall. Credits: Director: Martin Stith Executive Producer: Teresa Bonifas Producer/Writer/Host: Brad Franklin Director of Photography/Editor: Matt Boyce Producer/Camera Operator: Martin Stith and Matt Neese Graphics: Debbie Wrenn Promotions and Media: J. Elias O'Neal, Katie Cominsky, and Lina Chadouli Music: Hip Hop This by Seven Pounds Inspiring Electronic Rock by Alex Grohl Guest: Khara Durden, Director of Internal Audit Recorded in-house by Communications and Media Chesterfield.gov/podcast Follow us on social media! On Facebook, like our page: Chesterfield Behind the Mic. On Twitter, you can find us at @ChesterfieldVa and on Instagram it's @ChesterfieldVirginia. And you can also watch the podcast on WCCT TV Thursday through Sunday at 7 p.m. as well as on weekends at noon on Comcast Channel 98 and Verizon Channel 28.
All Things Internal Audit: The IIA's Updated Quality Assessment Manual The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Dirk Debruyne and Marthin Grobler discuss The IIA's recently released Quality Assessment Manual, 2024 Edition, with David Petrisky. They share their personal experiences with quality assessments and the development of the updated manual, including how it aligns with the new Global Internal Audit Standards. In bonus content, The IIA's Deborah Poulalion joins Robert Perez to discuss the 2024 North American Pulse of Internal Audit Report. Guests: Dirk Debruyne, managing director, D2 CAE Solutions Marthin Grobler, CAE and owner, IA Professionals Host:David Petrisky, director, Professional Standards, The IIA Key Points: Introduction to the episode and guests [00:00:02] Importance of quality assessments and ISB's role [00:00:30] Marthin Grobler on his project involvement [00:01:10] Dirk Debruyne's background and contributions [00:02:16] Task force responsibilities and challenges [00:03:16] Focus on ethics in Domain 2 [00:04:24] Comparison with previous QA Manual versions [00:05:50] Alignment with new standards and assessment impact [00:07:26] Use of manual for internal and external assessments [00:09:00] Challenges in assessing conformance methodology [00:10:00] Governance's impact on audit quality [00:12:23] Introduction of the maturity model [00:14:39] Adding maturity assessments [00:16:00] Templates and tools in the manual [00:17:16] Benefits of the four-point conclusion scale [00:18:49] Performance outcomes in assessments [00:21:01] Guidance on self-assessment with validation [00:22:38] Board and CAE expectations for assessments [00:24:14] QA Manual's role in meeting expectations [00:26:07] Future innovations and tech in assessments [00:27:42] Value of external quality assessments [00:30:54] Final thoughts for the internal audit community [00:32:23] Bonus content [00:38:20] BONUS CONTENT HOST: Robert Pérez, owner, Pérez Communication Solutions GUEST:Deborah Poulalion, IIA senior data analyst, The IIA The IIA Related Content: Interested in this topic? Visit the links below: Quality Services Webinar: Introducing the New Quality Assessment Manual: Aligned with the Global Internal Audit Standards Quality Insights: Implementing an Internal Audit Strategic Plan Webinar: Quality Assessment Challenges and Opportunities 2025 and Beyond Participate in the 2025 North American Pulse Survey Visit The IIA's website or YouTube channel for related topics and more. Resources Mentioned: Quality Assessment Manual, 2024 Edition International Internal Audit Standards Board North American Pulse of Internal Audit Risk in Focus Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
This week's episode, we're joined by Norman Marks, author, thought leader, blogger, teacher, and occasional consultant. In this episode, Norman shares what he sees as the top priority for Chief Audit Executives and gives practical tips on handling budget challenges, especially as audit teams face higher demands without matching resources. Be sure to connect with Norman on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 4:47 - What's in your Internet Browsing History? 11:45 — Key responsibilities for CAEs 20:25 — Approaches to adding value 27:42 — Strategies for justifying budget for internal audit 36:00 — Achieving audit objectives 44:20 - Ways to Improve Your Thinking * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
There is a power in the collective. Different perspectives. Benchmarking. We should do more of that in the internal audit profession. Listen to Tom discuss some of the top projects he's worked on and how collective insights led to their success.. For more resources, visit his website at www.internalauditcollective.com, the go-to hub for internal audit leaders wanting to elevate their skills.
SentiLink is at the forefront of fraud prevention and identity verification, offering innovative solutions to help financial institutions tackle synthetic fraud, identity theft, and more. We're thrilled to have them onboard as partners in our mission to equip you with the tools and knowledge you need to stay ahead in this ever-evolving landscape.Stay tuned for more great episodes and insights—thanks again to SentiLink for supporting the podcast! Visit: https://www.sentilink.com/ and learn all about them!---------------In this episode of Banking on Fraudology, host Hailey Windham engages in an insightful discussion with Christine Murray, the VP of Audit and Compliance at Kohler Credit Union. They delve into innovative uses of internal auditors as advisors in product and service development, preventing potential fraud and compliance issues before new launches.Christine shares her unique approach to fostering a positive company culture through personal interactions during branch audits. She stresses the importance of maintaining internal audit independence and objectivity, suggesting when to leverage external audits. Through the lens of history and compliance education, Christine highlights how understanding the reasons behind rules can drive adherence and improve organizational culture.Join them for a compelling conversation where internal audit is reimagined as a supportive partner dedicated to enhancing processes and fostering ethical practices within financial institutions.---------------------About Hailey Windham:As a 2023 CU Rockstar Recipient, Hailey Windham, CFCS (Certified Financial Crimes Specialist) demonstrated unbounding passion for educating her community, organization and credit union membership on scams in the market and best practices to avoid them. She has implemented several programs within her previous organizations that aim at holistically learning about how to prevent and detect fraud targeted at membership and employees. Windham's initiatives to build strong relationships and partnerships throughout the credit union community and industry experts have led to countless success stories. Her applied knowledge of payments system programs combined with her experience in fraud investigations offers practical concepts that are transferable, no matter the organization's size. Connect with Hailey on LinkedIn: https://www.linkedin.com/in/hailey-windham/ ----------------------Banking on Fraudology is part of the Fraudology Podcast Network.--------------------Banking on Fraudology is part of the Fraudology Network, and produced by Podyssey.io.
French fries dipped in a frosty... Peanut butter and pickle sandwich... Merging Internal Audit and Risk Management in the same function. Does it make sense? Yes, no, maybe? Join us for a thoughtful discussion on the topic.
This week's episode, we're joined by Michelle Velez, Vice President of Internal Audit at ITT Inc. Michelle offers a unique perspective, having transitioned from a tax background into internal audit. In this episode, Michelle covers how to audit tax processes effectively, why tax strategies matter, and the role of analytics in making audits more efficient. Michelle also shares lessons from her first year as CAE and practical tips for improving audit processes. Be sure to connect with Michelle on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 7:51 - Journey from Tax to CAE 11:14 - Where to Start in Audit from a Tax Perspective 13:47 - Lessons Learned from Being a CAE 16:58 - How to Audit Tax 22:28 - Tax Jurisdiction Information 27:24 - Efficiencies and ROI Hacks 30:46 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
This week's episode, we're joined by Kim Ford, Vice President of Internal Audit at Ingersoll Rand. In this episode, Kim shares her approach to building a strong internal audit function, including a program that trains auditors before moving them into the finance department, enhancing both controls and financial insight. She also discusses the evolving expectations of the audit committee, offering insights from a recent meeting, and explores how data and automation can boost audit efficiency, providing practical takeaways for listeners. Be sure to connect with Kim on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Timecodes: 6:56 - Building Internal Audit Functions 9:31 - People, Processes and Technology 10:35 - Kim's Training Method 15:04 - What the Audit Committee wants from a CAE 17:23 - Best Ways to Measure Success 23:19 - RPA Use Cases 25:12 - The Personal Side of DA 28:12- The BTS of the Audit Committee Quarterly Updates 32:18- Taking Analytics to the Next Level 33:29 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.
This week's episode, we're joined by Ben Phillips, Chief Audit Executive at PetSmart. In this episode, Ben shares his unique insights into the value that internal audit resources can bring to an organization, particularly in driving effective change. He also discusses his involvement with the CFO Leadership Council, highlighting the top concerns and priorities of CFOs today. Be sure to connect with Ben on LinkedIn. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel. Resources: Phoenix CFOLC Chapter Website: Phoenix - CFO Leadership Council CFOLF Membership info: Membership - CFO Leadership Council Timecodes: 5:33 - ChatGPT 7:00 - Creating Change with Internal Audit 11:00 - Staying Up-To-Date with the Business of Audit 15:20 - AI and Inflation 20:09 - How to be a Better Auditor 21:51 - Final Thoughts * This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype. Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.