Podcasts about Internal audit

The Institute of Internal Auditors Presents: All Things Internal Audit In this companion episode to Internal Auditor magazine's "The NextGen Audit Mentor," Marko Horvat sits down with Sarah Kuhn to explore how she built an AI-powered "audit mentor" to support auditor onboarding, training, and professional development. Kuhn shares how a simple idea to scale knowledge sharing evolved into an agentic AI tool that helps auditors learn, ask better questions, and navigate their careers. The conversation covers practical lessons for implementing AI, managing guardrails, fostering adoption, and ensuring AI enhances rather than replaces auditor judgment. HOST: Marko Horvat, CPA, Chief Financial Officer ,ELB Learning GUEST: Sarah Kuhn, CIA, CRMA, CCSA Principal Audit Consultant KEY POINTS: Introduction [00:00–00:01:30] Understanding Agentic AI and Identifying the Problem [00:01:31–00:04:27] Building and Testing the Audit Mentor [00:04:28–00:08:50] IIA Membership [00:08:51–00:09:27] Driving Adoption and Building Trust [00:09:28–00:13:02] Why the Tool Is a Mentor, Not an Answer Bot [00:13:03–00:17:14] Career Development, Coaching, and Quality Review [00:17:15–00:21:47] Preserving Auditor Judgment and Preventing Overreliance [00:21:48–00:25:42] Lessons Learned: Keeping AI Agents Focused [00:25:43–00:28:47] The Future of Agentic AI in Internal Audit [00:28:48–00:31:17] Final Thoughts [00:31:18–00:32:20] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: The NextGen Audit Mentor — Internal Auditor magazine (August Issue) IIA Membership Global Internal Audit Standards New Internal Auditing Competency Framework Knowledge Center: Artificial Intelligence   Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, we're moving past the hype and getting into how internal audit functions are using GenAI now -- not in theory, not in three years, but today. Doris Myles sits down with Neil White to talk through where the biggest efficiency gains are happening, how to pick the right use cases when everything feels urgent, and why most functions aren't failing at GenAI: They're just stuck. White shares the framework he uses to prioritize AI investments, why building a prompt library is the most underrated action any function can take immediately, and what he believes internal audit will look like in 10 years. HOST: Doris Myles, CIA, CPADirector of Internal Audit, St. Jude Children's Research Hospital GUEST: Neil White Audit and Assurance Principal, Deloitte & Touche LLP KEY POINTS: Introduction [00:00:00-00:00:43] Where GenAI Creates the Biggest Lift [00:00:43-00:02:34] From Automation to Agentic Reporting [00:02:34-00:04:31] Current Adoption and Internal Audit's Dual Role [00:04:31-00:06:51] Prioritizing Use Cases and Building a Prompt Library [00:06:51-00:10:58] Why GenAI Initiatives Stall [00:10:58-00:14:21] Gaining Enterprise and Leadership Alignment [00:14:21-00:16:38] Building Trust and Preserving Professional Skepticism [00:16:38-00:18:46] Explainability, Traceability, and Reliable Outputs [00:18:46-00:20:54] Balancing Speed, Human Review, and Model Validation [00:20:54-00:23:45] Scaling GenAI Across the Audit Function [00:23:45-00:25:41] First Steps for Internal Audit Leaders [00:25:41-00:27:35] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Vision 2035 Cybersecurity Topical Requirement Knowledge Center: Artificial Intelligence All Things Internal Audit Tech: Leadership Lessons from Scaling AI-Driven Companies   Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

Experiment Nation — in the lab.

Welcome to RIMScast. Your host is Justin Smulison, Business Content Manager at RIMS, the Risk and Insurance Management Society.   In this episode, Justin interviews Colette Cummins, Chief Risk Officer of Inland Fisheries Ireland and a RIMS-CRMP Commissioner, on what it's like to be a CRO in an organization whose mission is protecting a national natural resource. Justin invites Colette to share her career journey, and she tells how she developed in credit risk management, audit, and enterprise risk management, and how she landed in the public sector, protecting the environment while guiding Inland Fisheries Ireland toward building a solid risk framework. Colette speaks of the surprises she found in the public sector, and the impressive risk mindset and commitment she finds at IFI.   Listen for principles of building out risk registers and a risk framework, whether in the private sector or a public sector agency.   Key Takeaways: [:01] About RIMS and RIMScast. [:16] About this episode of RIMScast. Our guest today is Collete Cummins. She is the Chief Risk Officer for Inland Fisheries Ireland and a RIMS-CRMP Commissioner. We're going to have a great dialog. But first… [:42] RIMS-CRMP Workshop. We are delighted to announce that on August 27th and 28th, RIMS President Manny Padilla will be leading the two-day in-person workshop at St. John's University at 101 Astor Place in New York City. A link to the registration is in this episode's show notes. [1:02] RIMS-CRMP Virtual Workshops. RIMS will partner with PARIMA for the RIMS-CRMP Exam Prep on September 1st and 2nd. Registration links are in this episode's show notes. [1:12] On the webinars page, you will see a two-part series hosted by the RIMS Membership Department. The "Classroom to Career" webinar series highlights how RIMS equips students with the knowledge, skills, and connections needed to thrive in risk management careers. [1:28] Participants will gain insights into industry trends, career pathways, and practical tools that help them confidently step into the evolving world of risk management after graduation. These sessions will be hosted on September 1st and 9th. [1:41] These sessions are member exclusives and are complimentary for RIMS members, of course. So, if you are interested in becoming a member, this would be the time. Visit RIMS.org/membership. [1:51] RIMS is back on YouTube. Our handle is @RIMSOfficialChannel. We've got plenty of videos there, including RIMScast, RIMScast Canada video podcasts, and other informative and entertaining content from RIMS. Subscribe to the channel today! [2:08] On with the Show! Our guest today is Colette Cummins. She is the Chief Risk Officer for Inland Fisheries Ireland. The IFI is the dedicated state agency for protecting, managing, and conserving Ireland's inland fisheries and sea angling resources. [2:26] Colette is the agency's first CRO, but she's not new to risk management. We're going to hear about her career journey and why she feels that this position was custom-made for her, combining her love for environmental awareness with her risk management knowledge. [2:42] Colette is also a RIMS-CRMP Commissioner, and on September 24th, you can hear from her directly, along with Elliott Long, another RIMS-CRMP Commissioner, in the informational session, "A Conversation with RIMS-CRMP Commissioners Who Hold the Credential." [2:58] That's a free informational session. Visit RIMS.org/CertificationWeek for more information. A link is in this episode's show notes. But we're here to talk with Colette about her fascinating career and risk philosophies. Let's get to it! [3:13] Interview! Colette Cummins, Welcome to RIMScast! [3:28] Colette was told once that she is excessively optimistic. She's very positive. She took it as a compliment. [4:18] Colette started fresh out of university in credit analysis and credit risk management. She worked in a few financial services organizations. It gave her a taste for risk management at a high level. It was around portfolio analysis and the credit history of customers. [4:51] The role Colette was in wound down, and she was looking to move into a different area in the company, Hewlett Packard Enterprise, in the financial services subsidiary. An opportunity came up to work in internal audit. She decided to try it for a year. She stayed in it for 15 years. [5:32] In the middle of those 15 years, Colette had an interim stint in Operational Risk Management for a year and a half, and she loved it. [5:47] Colette says, in Operational Risk, you're seeing down at a tactical level how to manage and monitor risk. It was very much around risk monitoring. [6:01] Colette explains why she stayed in internal audit for 15 years. Ten years were spent in various internal audit management roles in the financial services subsidiary. It was a tough time for HPE in terms of meeting the new regulatory challenges in Ireland and Europe for financial services. [6:41] Colette was asked to take on the Head of Internal Audit role. She did that for five years. She went into Internal Audit for one year in 2008. In 2015, she worked in Operational Risk. In 2017, she was asked to come back to take over as Head of Internal Audit. [7:11] It was a challenging situation because new EU regulations were coming in for banks and financial services businesses. It was a lot of pressure to meet these. There was a lot of scrutiny from Irish regulators. It was a challenging environment for Internal Audit. [7:53] When Colette moved in as Head of Internal Audit, it was a pivotal role in terms of steering the organization through that regulatory time. It was a great learning experience and very helpful now that she's in a public sector role. [8:09] Colette says, the whole time she was Head of Internal Audit, she was thinking, "How do I get back to Risk? How do I get out of here?" She loved Operational Risk. [8:27] Colette networked heavily within the organization. She got the opportunity to move out of Financial Services up into the global HPE organization as an Enterprise Risk Manager. She got that role through networking. She enjoyed that ERM role and did it for about five years. [9:26] Colette says it was a strategic role. She was working with the heads of each business unit, reviewing their risks. It had a very heavy emphasis on reporting to the audit committee and the board on what was happening in risk management in the business units. [9:58] Colette didn't feel as if she was effecting change or driving new strategies within the organization, but she learned a huge amount about negotiating with senior management and a lot about the fundamentals of risk management. [10:18] For the last year or two of her role, Colette wondered what she was doing there. She had a sense of wanting to stay in risk management but wanting to do something different, maybe something more value-add and less commercially driven. [10:39] Colette says towards the end of 2025, HPE announced it was cutting resources and implementing cost-cutting initiatives. As part of that, her role was made redundant. At first, it was a big upheaval and quite a shock after 22 years with the organization. [11:03] Colette says that upheaval turned into a great opportunity. It was the push she needed to ask herself where she wanted to go and what she wanted to do. It was an opportunity to try something completely different. [11:28] Colette says she didn't know anybody in the public sector. She had no contacts. But in Ireland, you cannot in any way canvass for jobs in the public sector. Everything is heavily regulated with very strict anti-corruption regulations. [11:54] Colette says she had no knowledge of the organization. She had no intention of applying for a role for at least six months. But she started looking at what was out there. She was going to put some time into development and building out her CV and getting some qualifications. [12:33] Colette says she had been thinking she would like to do something in the public sector; something more meaningful and less commercially-driven. She wanted to do something with more autonomy, more impact, and more control over risk at the organisation. [12:54] Colette says, one Wednesday afternoon, she was looking, and she saw this job that had just come up. It's in exactly the right location, it's public sector, and it's IFI, an environmental body. Colette said, "Wow! This is it!" Forgetting her six months off, she had to go for it. [13:19] Colette interviewed for the job when she hadn't yet finished her old role at HPE. She was hugely busy, trying to wrap up her role and interviewing. The interview process for the public sector in Ireland is extremely rigorous and tough. She was successful in the role. [13:43] Colette says she just had a couple of weeks off and then went straight into it in March of 2026. She has been CRO at Inland Fisheries Ireland for four months now. [14:06] Colette says IFI is the state organization that is responsible for protecting the fish stock in Ireland. Ireland is a country with a lot of waterways. IFI is responsible for protecting the fish in 45,000 miles of rivers, 128,000 hectares of lakes, and 3,500 miles of shoreline. [14:43] It's doing everything to protect and restore the fish stock in those areas. Historically, the organization was very much about protection, preventing fishermen from overfishing and from fishing illegally, especially protected species. IFI has a substantial staff who patrol the rivers. [15:17] Now IFI is working on pollution, reacting to any pollution episodes and ensuring that they're investigated and stopped. Colette says that prevention measures sit with a different state body. The Environmental Protection Agency works on the prevention of pollution.  [15:41] Colette says because the IFI has staff on the ground, it will see pollution coming in, react to it, and get in touch with the EPA to say, We've seen something coming into this river at this location. We need your team out here to source and stop it. [16:08] The IFI staff on the ground takes samples of the water and has them ready for when the EPA team comes to look at it. Another huge element of what the IFI does is restoring the habitat and creating the perfect environment for the fish. They research how the stock is developing. [16:35] The IFI research teams go out and do things like electrofishing, where they stun the fish for a few seconds to take a scale from the fish, test it, and work out the genetic trail of the fish and where they've come from. There's a huge amount of information they take from that. [16:58] The IFI works on the rivers, as well. Salmon, in particular, always go back to where they spawned. You need to keep that route open for them. If a barrier, like a dam, has been built, the IFI team works with construction companies to remove those. [17:19] The IFI has a wide series of activities: patrolling, protection, pollution, habitat restoration, and research. Colette is sure risk professionals hearing this are saying, That's a lot of risks! [17:37] Justin points out that the IFI covers thousands of miles. It's not just the particulars of the job but also the volume and area it has to cover. [18:03] Colette says the other element is that fishing or angling is part of Ireland's tourist industry. The IFI promotes fishing, without overfishing, obviously, and supports and partners with the local fishing organizations. [18:28] A Quick Break! Many fantastic RIMS events are coming up in 2026. You can register now for the Second Annual RIMS Texas Regional Conference, which will be held from August 10th through the 12th at the Grand Hyatt on the San Antonio River Walk. [18:44] Visit RIMS.org/Events for registration information. The hotel cutoff date was July 10th. Reservations may still be made after the hotel cutoff date, subject to availability; however, the negotiated group rate is no longer guaranteed, so reserve now. [19:00] The 11th Annual Chicagoland Risk Forum will return to the Old Post Office on Thursday, September 24th, 2026. Visit ChicagolandRiskForum.org for more information. [19:11] The RIMS Western Regional Conference will be held from October 4th through the 7th in Seattle, Washington. The agenda is live, and registration is open. Visit RIMSWesternRegional.com and the link in this episode's show notes for more information. [19:28] Save the dates: October 18th through the 21st. We will be in Quebec City to celebrate the 50th Live RIMS Canada Conference. Booth sales are open, and sponsorship opportunities are still available. Advance registration is open now. [19:44] Visit RIMSCanadaConference.ca for more information. Also, remember to check out RIMS.org/Canada for our spinoff show, RIMScast Canada, hosted by National Conference Committee Chair, Aaron Lukoni. [19:59] The RIMS ERM Conference 2026 will be held on November 19th and 20th in Columbus, Ohio. Registration is now open. [20:08] An announcement seeking nominations for the RIMS Global ERM Award of Distinction will be made public in July. Visit RIMS.org/ERM2026. [20:19] We're already looking to RISKWORLD 2027, which will be held over four days in New Orleans, Louisiana, from April 18th through the 21st! The call for session proposals is now live and will stay active through August 21st. [20:34] RIMS members can exclusively register by September 4th for the best rate. And get first access to the hotel block. Hotel reservations open on October 28th, ahead of public registration. Sitting this out is the real risk! The link to registration is in this episode's show notes. [20:54] Let's Return to Our Interview with Inland Fisheries CRO and RIMS-CRMP Commissioner Colette Cummins! [21:05] Justin comments that fish is a critical food source, so IFI has to make sure that they're clean, healthy, and they keep repopulating. Colette agrees but says that it's less about food and more about environmental protection. [21:23] Colette says some species have been reduced a huge amount in the last number of years because of things like pollution, habitat destruction, etc. It's really about environmental protection, restoring that stock, and bringing it back to where it should be for a natural balance. [21:42] Colette says her CRO role is new at IFI. That's what made it even more exciting for her. She says, when she came in, it was basically a blank sheet. IFI had dealt with risk by using a third party to give them a risk management model and some training. [22:10] Colette says the IFI was trying to work with that in-house, without any risk management expertise. It brought in a bit of a risk mindset, but essentially, Colette had a clean sheet to start with. She came in in March, and now she's building out the risk register. [22:36] Colette's first task was to design the risk framework. Colette loves risk management and has done lots of various elements of it, but she's never had complete autonomy, where she was driving change in the organization. [22:55] By full autonomy, Colette means she owns everything. Anything that happens to do with risk comes to her. [23:01] Up until now, Colette's role has been designing the framework: establishing how the organization is going to manage risk, building that out, getting people on board with that framework. It's split into six departments within the organization. [23:29] Each head of that department, or ELT member, will own their risk register, or their list of risks. Colette is working closely with them to ensure they have all their risks listed within that register and that they fully understand them. [23:48] Colette is looking at their controls and helping them devise new controls, looking at how the risk matches the risk appetite of the organization, and working with the next level of management beneath them to help them develop their risk registers to report up to the ELT. [24:40] Colette says IFI had been trying to recruit a CRO for some time. She wishes she had known! She would have applied last year. She just happened to see it. The existing model wasn't working. There was a real need. [25:00] The audit committee and board were saying they weren't happy. They said they needed to see risk management alive in the organization. Colette had to dive straight in, hit the ground running, and start building it out straightaway. It was exactly the challenge she was looking for. [25:18] Colette says it's so good to have that autonomy and responsibility, but also accountability. She is completely accountable for everything that happens with risk. Colette gets each member of the ELT to develop their risk register and report that up to the audit committee. [25:45] If anybody is doing anything where they want to think about risk, they talk to Colette. It's not complicated. They don't go to somebody else. Everybody knows, if it's got the word "risk," they come to Colette. Colette says the full visibility of everything is great. [26:19] Colette says she's starting with a very simplistic model to build the registers. She says it's drawn more from ISO, but it's a very simplistic model to get the organization started. Colette moved from a private-sector global IT company to the public sector. [26:56] The one thing that is challenging is that things move much slower in government. It moves much slower, and that's probably even more so in Ireland than in Europe and maybe than in the U.S. [27:16] You could come in and see this is the change that is needed, and think you could go ahead and effect that change within a couple of weeks? Oh, no you don't! You need to take everything slowly and get the right approvals and authorizations, etc.  [27:29] Colette says she is starting with a really simplistic model: set out your risks, set out your controls, set out your mitigating actions, and then, we're going to get the organization working on that with that framework. [27:43] Colette hopes to do it within six months, but knowing the public sector, it could be a year. Then start building in other elements to it to make it a more mature and sophisticated framework. [28:19] Every change has to be approved by the Audit and Risk Committee (ARC). If Colette wants to make a small tweak in the existing framework, it goes back to the Audit and Risk Committee, which meets every three months. [28:51] Colette presented to the ARC in June. She presented how she wanted to move forward. There was no question. She knew they were going to approve it. She couldn't just go ahead and put the framework in place. [29:08] It needs to go through the protocols and have the conversation with the ARC and just take it nice and slow to effect any change. That is one challenge that's different for Colette. But otherwise, she can bring all of her experience from different areas and use every bit of it. [29:37] One More Quick Break! RIMS has launched RIMS, The Foundation for Risk ManagementTM. The Foundation is dedicated to shaping the future of the profession. Contribute to strengthen the global risk management community and invest in the future of the industry. [29:57] The Foundation also supports the Spencer Educational Foundation but has a different mission. The Foundation focuses on providing opportunities for those professionals who have already decided to enter risk management and are just getting started. [30:11] You can learn more about the Foundation by visiting RIMS.org/FRM.  While you're there, be sure to check out information about the Susan Meltzer Scholarship Fund, which was established to honor Ms. Meltzer, who was RIMS President in 1999 and 2000. [30:30] Susan Meltzer was a cherished RIMS President and contributed so much to RIMS and the greater risk community. Learn more at RIMS.org/FRM.  [30:39] Let's Return to Our Interview with Colette Cummins!  [30:53] Colette Cummins is speaking with us today from County Kildare, about 30 miles outside Dublin, Ireland. The IFI offices are on the edge of Dublin, the capital of Ireland. Colette says the land is actually greener and more beautiful than the travel brochures could describe. [31:30] Colette says Ireland is full of rich waterways, which keeps her in a job. She lives near Dublin but is originally from the Southwest of Ireland, which is by far the most beautiful. The coastline is stunning. It's where most Irish go on holidays. It's gorgeous. [32:00] Colette says the accent in the Southwest of Ireland is different. Colette's husband from the middle of Ireland requests subtitles when he visits her family in the Southwest. Colette describes the difference between the accents in the South and North of Ireland. [33:05] Colette says the IFI Corporate Risk Register has generic risks around AI, cyber, training, and resources. [33:33] One of their biggest risks is health and safety. Staff are going out and patrolling rivers. They will sometimes come across fishermen who are happily overfishing and not keen to meet a patrolling officer who tells them they shouldn't be taking all this fish and depleting the stocks. [34:08] There is a health and safety risk with the patrolling officer being out on a river on boats. There is a health and safety risk in meeting an acrimonious and adversarial fisherman. [34:28] Because IFI does research, they have staff in labs, using high-tech equipment, with a health and safety risk. They have engineers looking at the rivers and habitats and maybe some constructions in the rivers that need to be removed. They have a health and safety risk. [34:37] These are new risks and things for Colette to get her head around. How do we do this? How do we manage that? And the other side is regulation. There are a lot of different regulations that impact IFI. [35:22] Colette says, In the public sector, your reputation is critically important, because you're the face of the state. Reputation is an impact factor you need to build into every risk. If IFI does something wrong, it could end up in the national media the day after. IFI uses taxpayers' money. [36:15] Colette says another huge category of risk for IFI is procurement, ensuring they are using taxpayers' money in the right way and not misusing it. [36:50] Colette says that prioritizing risks comes back to the goals. In procurement, there is the risk of spending money in a way that's not compliant. There is also the risk that there are too many procurement controls and the business can't move fast enough or do what it needs to do. [37:24] Colette says it comes to the organizational goals. What is the impact on the organizational goals? Which risk is going to have a greater detrimental impact on the organization's mission? One caveat: the health and well-being of the staff override everything. [37:55] Health and safety risk trumps everything. IFI would be completely averse to any risk that will impact the health and safety of the staff. Health and safety trumps every other risk. [38:16] Justin says he and Colette met recently for the RIMS-CRMP series where everyone can see her on September 24th. Justin says Colette is very positive and upbeat and speaks about her role with a lot of enthusiasm and joviality. [38:39] Colette says there are 330 people in IFI. It's not commercially driven, so a lot of people are at IFI because they love the work. For some people Colette works with, it's a vocation. They would nearly do the same job without being paid because they have such passion for it. [39:11] Colette met with the research team on site at the rivers to get a better understanding and just to see the passion they have for the job. Using her risk knowledge to help them do their jobs better and to help them protect themselves from risks was rewarding and enjoyable to Colette. [39:45] Colette says being able to use her experience across the organization is just fantastic. Colette has a lot of different experience, and to bring it all together and use it every day when she is challenged with a new task is fantastic and very rewarding. [40:27] Colette says this is the field staff's very busy time because this is when all the fishing is happening, this is when pollution is more likely to happen, and when the temperatures go up, the fish are under pressure, so you have to try and protect the waters. [40:42] Colette says the research staff was delighted to hear that someone was coming down from the head office to go out and make the time to really understand the organization. They were very anxious to show her everything. There is such pride in the organization. [41:!5] Justin says a lot of the risk professionals listening are in the private sector, and he asks Colette what would most surprise them about risk management in a public environmental organization. [41:40] Colette says a lot of the differences in the public sector are what you would expect: things move slower, and the protocols. [41:49] What surprised Colette the most is what a strong risk mindset they have. There's a good understanding of risk already, even through the layers of management. They can look at what's going on, the processes, and the activities and ask, "What are the risks here?" [42:16] There is also a commitment to risk that Colette was not expecting. She was expecting to meet a research manager who wanted to research and leave risks to Colette. She hasn't had that anywhere. They all ask her to talk with them about their risks. "Am I managing them right?" [42:39] Colette says there is knowledge and commitment, and that has been the biggest surprise for her. It obviously makes her job a lot easier. [42:48] Justin says this is excellent. It has been such a pleasure to meet you these last couple of days. We're going to see you during RIMS Certification week on September 24th. [42:57] Justin says, You will be co-hosting the informational session, "A Conversation with RIMS-CRMP Commissioners Who Hold the Credential." You're such a breath of fresh air. We really appreciate your contributions, and I learned a lot speaking with you today and yesterday. [41:12] Justin says, You have a fascinating job, and I hope that you have a chance to attend a RIMS event, maybe lead a session, and connect with our live audiences, as well. Colette says she would love to at some stage in the future. [43:32] Special thanks again to Colette Cummins of Inland Fisheries Ireland for joining us here on RIMScast. [43:38] You can hear Colette again on September 24th during RIMS Certification Week for the special informational session, "A Conversation with RIMS-CRMP Commissioners Who Hold the Credential." [43:49] That session will be held at 10:00 a.m. Eastern. Visit RIMS.org/CertificationWeek. The link is also in this episode's show notes. We've got sessions on the 22nd, 23rd, and 24th of September. We look forward to seeing you there. [44:05] Plug Time! Become a RIMS member and get access to the tools, thought leadership, and network you need to succeed. Visit RIMS.org/membership or email membershipdept@RIMS.org for more information. [44:22] Risk Knowledge is the RIMS searchable content library that provides relevant information for today's risk professionals. Materials include RIMS executive reports, survey findings, contributed articles, industry research, benchmarking data, and more. [44:39] For the best reporting on the profession of risk management, read Risk Management Magazine at RMMagazine.com. It is written and published by the best minds in risk management. [44:52] Justin Smulison is the Business Content Manager at RIMS. Please remember to subscribe to RIMScast on your favorite podcasting app. You can email us at Content@RIMS.org. [43:05] Practice good risk management, stay safe, and thank you again for your continued support!   Links: RIMS Certification Week: Sept. 21‒24 | Complimentary For All RIMS Texas Regional Conference 2026 | Aug. 10‒12 in San Antonio | Register Now! Spencer Educational Foundation's 2026 Funding Their Future Gala | Sept. 17, 2026 RISKWORLD 2027 Registration | RIMS members can lock in 2026 rates now through Sept. 4 | Education Content Submission ChicagoLand Risk Forum | Sept. 24, 2026 RIMS Western Regional Conference — Oct. 4‒7, 2026 | Seattle, WA | Register Today. RIMS Canada Conference — Oct. 18‒21, 2026 | Quebec City | www.rimscanadaconference.ca | Advance Registration Open | Sponsorship Opportunities Available RIMS ERM Conference 2026 | November 19‒20 in Columbus, Ohio | Registration Now Open! | www.rims.org/ERM2026 RIMS, the Foundation for Risk Management Spencer Educational Foundation — Scholarships and Grants | Open Calls and Timelines. RIMS Now RIMS-Certified Risk Management Professional (RIMS-CRMP) | Insights Video Series Featuring Joe Milan! The Strategic and Enterprise Risk Center RIMS Diversity Equity Inclusion Council RIMS-CRMP Stories RIMScast Canada — Episodes Now Live RISK PAC | RIMS Advocacy RIMScast on YouTube! RIMS Risk Management Magazine | Contribute | Q2 2026 Issue Now Available Sponsor RIMScast — Sales@RIMS.org Fisheriesireland.ie/ Upcoming RIMS-CRMP Virtual Workshops: RIMS-CRMP Exam Prep Workshop — Live In NY — Aug 27‒28! RIMS-CRMP Exam Prep with PARIMA | Sept 1‒2 Full RIMS-CRMP Prep Course Schedule See the full calendar of RIMS Virtual Workshops   Upcoming RIMS Webinars: RIMS.org/Webinars "RIMS Student Series: Classroom to Career Part 1" | Sept 1 "RIMS Student Series: Classroom to Career Part 2" | Sept 9   Related RIMScast Episodes: "Reputation and Defense with Jeff McKissack" "Choosing the Challenge with Johnell Holly" "Supply Chain Integrity and Sustainability with Nicole Sherwin of EcoVadis"   Sponsored RIMScast Episodes: "48 Hours From a Storm: What to Do Before A Hurricane Strikes" | Sponsored by Global Risk Consultants, a TÜV SÜD Company (New!) "AI-Scale, Risk Ready: Engineering Controls for the New Data Center Boom" | Sponsored by Global Risk Consultants, a TÜV SÜD Company "Facing Into Risk: Navigating the New Risk Landscape" (New!) | Sponsored by AXA XL "Secondary Perils, Major Risks: The New Face of Weather-Related Challenge" | Sponsored by AXA XL "The ART of Risk: Rethinking Risk Through Insight, Design, and Innovation" | Sponsored by Alliant "Mastering ERM: Leveraging Internal and External Risk Factors" | Sponsored by Diligent "Cyberrisk: Preparing Beyond 2025" | Sponsored by Alliant "The New Reality of Risk Engineering: From Code Compliance to Resilience" | Sponsored by AXA XL "Change Management: AI's Role in Loss Control and Property Insurance" | Sponsored by Global Risk Consultants, a TÜV SÜD Company "Demystifying Multinational Fronting Insurance Programs" | Sponsored by Zurich "Understanding Third-Party Litigation Funding" | Sponsored by Zurich "What Risk Managers Can Learn From School Shootings" | Sponsored by Merrill Herzog "Simplifying the Challenges of OSHA Recordkeeping" | Sponsored by Medcor "How Insurance Builds Resilience Against an Active Assailant Attack" | Sponsored by Merrill Herzog "Third-Party and Cyber Risk Management Tips" | Sponsored by Alliant   RIMS Publications, Content, and Links: RIMS Membership — Whether you are a new member or need to transition, be a part of the global risk management community! RIMS Virtual Workshops On-Demand Webinars RIMS-Certified Risk Management Professional (RIMS-CRMP) RISK PAC | RIMS Advocacy RIMS Strategic & Enterprise Risk Center RIMS-CRMP Stories — Featuring RIMS President Manny Padilla!   RIMS Publications, Content, and Links: RIMS Membership — Whether you are a new member or need to transition, be a part of the global risk management community! RIMS Virtual Workshops On-Demand Webinars RIMS-Certified Risk Management Professional (RIMS-CRMP) RISK PAC | RIMS Advocacy RIMS Strategic & Enterprise Risk Center RIMS-CRMP Stories — Featuring RIMS President Manny Padilla!   RIMS Events, Education, and Services: RIMS Risk Maturity Model®   Sponsor RIMScast: Contact sales@rims.org or pd@rims.org for more information.   Want to Learn More? Keep up with the podcast on RIMS.org, and listen on Spotify and Apple Podcasts.   Have a question or suggestion? Email: Content@rims.org.   Join the Conversation! Follow @RIMSorg on Facebook, Twitter, and LinkedIn.   About our guest: Colette Cummins, Chief Risk Officer, Inland Fisheries Ireland RIMS-CRMP Commissioner   Production and engineering provided by Podfly.

Links: Tom McLeod's post   Be sure to follow us on our social media accounts on: LinkedIn: https://www.linkedin.com/company/the-audit-podcast Instagram: https://www.instagram.com/theauditpodcast TikTok: https://www.tiktok.com/@theauditpodcast?lang=en   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, we're getting into the daily realities of modern internal auditing — the messy, practical, and sometimes uncomfortable challenges that don't always make it onto conference agendas. Jas Gill sits down with Asim Fareeduddin to talk through what's shaping internal audit. Fareeduddin shares why business acumen is the hardest skill to hire for, how to think about AI beyond the basics, and why understanding how your company makes, and could lose, money is the foundation of every valuable audit. HOST: Jasdeep Gill, CIA, CISA, CISM, CFE Senior Manager, Internal Audit and Assurance, RELX  GUEST: Asim Fareeduddin, CISA, CPA, CISM, CIPP, CISSP Head of Internal Audit and Assurance, RELX KEY POINTS: Introduction [00:00:02-00:00:50] Geopolitical Instability and Flexible Audit Planning [00:00:50-00:02:43] Cyber Risk, Upskilling, and Second-Line Collaboration [00:02:43-00:05:31] Auditing Culture and Behavior [00:05:31-00:07:05] Measuring Internal Audit Impact [00:07:05-00:10:04] Business Acumen and the Future Audit Talent Profile [00:10:04-00:12:36] Upskilling Through AI, Training, and Practical Exposure [00:12:36-00:14:45] Competing for Top Talent [00:14:45-00:17:29] Skills for the Modern Internal Auditor [00:17:29-00:21:31] Building Professional Courage and Trust [00:21:31-00:24:50] Commercial Curiosity and Understanding Revenue Risk [00:24:50-00:27:44] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Vision 2035 Cybersecurity Topical Requirement Knowledge Center: Artificial Intelligence Communicating with the Board: Turning Audit Insights   Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

In this episode, host Anji reconnects with Kara McClanahan, executive business consultant at Aesthetic Practice Partners and VP of Operations at Genesis Lifestyle Medicine, to break down why most aesthetic practices aren't struggling because of marketing or device mix. They're struggling because owners have never learned to audit their own operations honestly. Kara argues that chasing revenue and vanity metrics misses the point entirely; the real answers live in the processes behind those numbers. Kara walks through her three-part "Uncovering Excellence" audit: process-mapping every patient touchpoint from first lead to post-treatment follow-up, knowing your true financial numbers beyond a sales report, and identifying which services are actually driving patient demand and profit. She also confronts the audit's hardest truth: that most team performance problems trace back to hiring, training, and leadership support gaps that owners are reluctant to own. The episode closes with Kara's framework for turning audit findings into action: clearly articulate the problem, build a realistic 30/60/90-day plan, assign ownership, and prioritize fixes instead of tackling everything at once. She leaves listeners with a single starting question for their own audit, one that, she says, will surface the exact obstacle keeping their practice from its next level of growth.

This week on The Audit Podcast, Martin, Head of Internal Audit at Reddit, joins the show to discuss why the opportunity for internal audit is bigger now than ever and how auditors can move from backseat drivers to helpful copilots.   Martin shares how he learned Reddit's complex digital advertising business by being a humble "sponge". He explains his unique hiring strategy—hiring for a "major" in deep technical craft (like data science or engineering) and teaching the "minor" of audit later. He also breaks down his approach to navigating tough risk conversations and reveals how his team uses generative AI to automate 70% of their recurring SOX testing.   02:32 How Martin Uses AI in His Personal Life 03:45 The One Thing Every Auditor Should Do 06:06 How to Learn a New Business Quickly 07:30 Why Internal Audit Has Its Biggest Opportunity Yet 10:13 Rethinking Audit Hiring: Specialists Over Traditional Auditors 14:12 Teaching Audit Skills to Technical Experts 16:12 How to Have Tough Conversations About Risk 18:04 AI Use Cases Inside Reddit's Internal Audit Team 21:24 Final Thoughts   Be sure to connect with Martin on LinkedIn.   Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.    Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule.

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Charles King sits down with Becky Mann to discuss what it takes to build and evolve an internal audit function inside a global firm. They share lessons from leading internal audit through disruption, how to structure teams around the business, and why auditors must move beyond rigid audit plans to deliver real value.  HOST: Charles King, CIA, CRMA, CISSP, CISA AI and Internal Audit Leader, KPMG  GUEST: Becky Mann, CIA Chief Audit Executive, KPMG   KEY POINTS: Introduction [00:00:00-00:00:44] Becky Mann's Internal Audit Background [00:00:44-00:02:06] Leading Internal Audit Through COVID-19 [00:02:06-00:03:18] KPMG's Internal Audit Function and Scope [00:03:18-00:05:35] Building Teams Around the Business [00:05:35-00:07:49] Learning to Pivot From the Audit Plan [00:07:49-00:09:21] Structuring Audit Portfolios [00:09:21-00:10:41] Rotations and Guest Auditor Programs [00:10:41-00:11:16] Onboarding Guest Auditors [00:11:16-00:13:55] Engaging the Board and Executive Stakeholders [00:13:55-00:16:36] Aligning Expectations and Avoiding Surprises [00:16:36-00:16:59] Why Internal Audit Still Matters [00:16:59-00:19:27] Choosing the Right Risk Response [00:19:27-00:20:31] Final Thoughts [00:20:31-00:20:54] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Vision 2035 Communicating with the Board: Turning Audit Insights into Impact Three Lines Model   Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

What does it take to build a credible internal audit function when you're working with a small team?In this episode I sit down with Sandeep Das, Head of Internal Audit at Elysium Healthcare, and John Johnson, Partner at Core Audit Partners, for a panel discussion on the unique challenges small audit shops face:- Establishing influence without an implicit mandate- Winning hearts and minds, and- Knowing the difference between output and assurance.

This week on The Audit Podcast, Casey Atwater, former Head of Audit at ZoomInfo and founder of Internal Audit Collective, joins the show to talk about how AI is changing SOX, internal controls, and the way internal audit work gets done.   We focus on what's actually changing in practice. Casey shares why SOX is no longer just a testing exercise, but a design and architecture problem. As systems change faster and AI gets embedded into day-to-day work, the way controls are built and maintained has to change with it.   He explains why controls need to live inside workflows instead of being tracked in spreadsheets, and why management will increasingly take ownership of control design and execution. Internal audit still plays a role, but it shifts more toward advising, reviewing change, and focusing on higher-risk areas outside routine SOX testing.   We also talk about the gap between automation and complexity. Even though more systems are being added, many organizations are not seeing meaningful efficiency gains in controls. Casey walks through why that mismatch exists and what it means for audit teams.   The conversation ends with practical ways audit teams can start adapting now—by reducing redundant controls, looking harder at which systems actually need to be in scope, and working more directly with control owners to fix issues instead of just documenting them. He also makes the point that while tools and AI will change a lot of the technical work, relationships and communication inside the business still matter just as much.   1:42 — ControlBridge AI & the future of SOX 16:16 — Continuous monitoring 09:13 — Getting management to own controls 20:18 — AI beyond testing automation 22:24 — Practical actions for audit leaders 25:17 — Final Thoughts   Be sure to connect with Casey on LinkedIn.     Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.    Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule.

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Christina Brune sits down with Randolph Sergent, executive vice president and general counsel at CareFirst BlueCross BlueShield, to discuss why he decided to pursue the Certified Internal Auditor (CIA) designation despite spending his career in the legal profession. Sergent shares how earning the CIA helped him better understand audit planning, enterprise risk management, and the role of internal audit within an organization. The conversation also explores leadership, continuous learning, professional development, and why executives should invest in understanding the functions they support. HOST: Christina Brune Director of Certifications Outreach and Engagement, Institute of Internal Auditors GUEST: Randolph Sergent, CIA Executive Vice President and General Counsel, CareFirst BlueCross BlueShield   KEY POINTS: Introduction and Career Journey [00:00:42-00:01:15] Why a General Counsel Pursued the CIA [00:01:16-00:03:00] What He Learned About Internal Audit and Standards [00:03:01-00:05:00] How the CIA Improved Conversations With the CAE [00:05:01-00:07:25] Balancing Executive Leadership and CIA Studies [00:07:26-00:10:00] Customer Service and Communication in Internal Audit [00:10:01-00:11:04] Study Strategy and Preparing for the Exams [00:11:05-00:12:14] Enterprise Risk Management and Audit Planning [00:12:15-00:13:59] How Audit Knowledge Changed Leadership Conversations [00:14:00-00:14:51] Creating a Culture of Continuous Learning [00:14:52-00:17:01] Leading by Example as an Executive [00:17:02-00:18:14] Why Leaders Should Invest in Understanding Their Teams [00:18:15-00:21:16] Advice for Executives Considering the CIA [00:21:17-00:22:49] Thoughts on the CIA Challenge Exam [00:22:50-00:24:34] Final Thoughts on Career Growth and Lifelong Learning [00:24:35-00:25:30 IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: CIA Challenge Exam Global Internal Audit Standards Vision 2035 Become a Certified Internal Auditor (CIA) IAP (Internal Audit Practitioner) Certification Candidate Handbook Certificate Programs Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

This week on The Audit Podcast, Angelo Poulikakos, Global Leader of Internal Audit and Financial Advisory Capabilities at Protiviti, joins the show for a wide-ranging conversation on AI, innovation, and what it means to stay relevant in a rapidly changing profession.   Drawing from his experience helping organizations navigate AI adoption, Angelo shares how his own use of AI has evolved, why context matters more than prompts, and how audit leaders can move beyond simply becoming faster and cheaper to delivering deeper insights and greater value. He also discusses Protiviti's internal strategy for embracing AI, building future-ready talent, and transforming how audit work gets done.   The conversation explores the balance between human creativity and AI, the importance of critical thinking in an AI-driven world, and why staying hungry to learn, experiment, and innovate is essential for the future of internal audit.   2:05 - Creativity, Critical Thinking & Technology 8:13 - From Prompt Engineering to Context Engineering 16:58 = What's Next for AI 19:06 - The EAT Framework for Internal Audit Transformation 29:25 - Final thoughts   Be sure to connect with Angelo on LinkedIn.     Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.    Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule.

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Deborah Poulalion and Andy Cook break down key findings from the 2026 North American Pulse of Internal Audit report. They discuss tightening budgets, staffing pressures, the growing importance of strategic alignment, and how audit teams are balancing assurance work with increasing technology and compliance demands. The conversation also highlights industry trends and what audit leaders should prioritize moving forward. HOST: Deborah Poulalion, IAP Senior Manager, Research & Insights, The IIA GUEST: Andy Cook, CIA Director of Professional Guidance, Financial Services, The IIA     KEY POINTS: Introduction and Survey Overview [00:00:34-00:02:08] 2026 Budget Trends and Funding Pressures [00:02:09-00:04:24] Financial Services as the Budget Outlier [00:04:25-00:05:31] Staffing Challenges and Hiring Constraints [00:05:32-00:07:59] The Link Between Strategic Alignment and Funding [00:08:00-00:11:26] Operational Auditing Remains a Core Priority [00:11:27-00:12:24] Compliance Demands and Sarbanes-Oxley Commitments [00:12:25-00:13:23] Technology, Cybersecurity, and IT Audit Focus [00:13:24-00:14:36] Balancing Assurance and Advisory Work [00:14:37-00:16:10] Final Takeaways from the 2026 Pulse Report [00:16:11-00:16:36] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: 2026 North American Pulse of Internal Audit Global Internal Audit Standards Standards Knowledge Center IIA Research & Reports Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

This week on The Audit Podcast, Danielle Ritter, VP and Head of Internal Audit at GitLab and former CAE at Instacart, joins the show to share lessons from her leadership journey and practical advice for audit professionals at every stage of their careers.   Drawing from her experience leading audit functions across multiple organizations, Danielle discusses what matters most during a CAE's first 100 days, how to build credibility with stakeholders, and why strong relationships are essential to an effective audit function. She also shares how her team is embracing AI, developing new skills, and preparing for the future of the profession.   2:06 – Using AI in work and everyday life 5:16 – Where CAEs should focus: insights vs. efficiency 6:46 – Day One: listening and learning 10:11 – Navigating the CAE interview process 13:09 – How to define and demonstrate value 16:40 – What information belongs in the boardroom 19:00 – A practical approach to building strong relationships 22:45 – AI and the future of job security 27:55 – Making time for self-directed learning 30:07 – Final thoughts: your career does not define you   Be sure to connect with Danielle on LinkedIn.   Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.    Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule.

The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this companion episode to Internal Auditor magazine's "Better Together" article, Paula Michaels talks with Ashwathama Rajendran about how AI can support more connected, continuous, and coordinated assurance across the three lines. They discuss why combined assurance can be difficult to achieve in practice, how AI can act as a connecting layer across risk, compliance, operations, and internal audit, and why human judgment, independence, and data privacy remain critical. HOST: Paula Michaels Senior Director of Creative and Content Services, The IIA GUESTS: Ashwathama Rajendran Data Analytics Lead, Stripe All opinions are Ashwathama Rajendran's own and do not represent his employer, and all scenarios discussed are hypothetical and based on broad industry experience rather than any specific organization.   KEY POINTS: Introduction and Ash's Background [00:00:30 - 00:02:05] Why Combined Assurance Struggles in Practice [00:02:17 - 00:04:21] AI as a Connecting Layer Across the Three Lines [00:04:33 - 00:06:29] Creating Real-Time Combined Assurance Maps [00:05:37 - 00:06:09] Continuous Monitoring Integration and AI [00:06:30 - 00:09:07] Using AI to Detect Cross-Functional Risks Earlier [00:09:07 - 00:11:20] Translating Risk Taxonomies Across Functions [00:11:29 - 00:13:35] Maintaining Auditor Independence and AI Governance [00:13:35 - 00:16:52] Roles of the Three Lines in AI Oversight [00:16:52 - 00:18:01] Where Organizations Should Start with AI-Enabled Combined Assurance [00:18:01 - 00:20:31] Internal Audit as a Catalyst for AI Adoption [00:20:31 - 00:22:35] How AI Will Change Internal Auditing Over the Next Five Years [00:22:35 - 00:25:17] Final Thoughts [00:25:17 - 00:25:49 Visit The IIA's website or YouTube channel for related topics and more.   IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Better Together — Internal Auditor Magazine (June Issue) Pulse Check: Combined Assurance Knowledge Center: Artificial Intelligence The Three Lines Model Vison 2035 Global Internal Audit Standards Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

This week on The Audit Podcast, Aadesh Gandhre, CAE at DTCC, steps in as guest host for a conversation with his colleague, Idania Orengo, Chief of Staff, Internal Audit at DTCC, about the human side of audit transformation.   Drawing from their experiences at DTCC, they discuss how culture, communication, and leadership help build high-performing audit teams. They explain that innovation is not always driven by technology. Sometimes it comes from simplifying processes, building trust, and creating an environment where people feel comfortable sharing ideas.   The conversation also highlights the importance of mentorship, collaboration, and strong relationships in driving successful transformation within internal audit.   6:15 - Early Days at Goldman 7:45 - What Makes a Great Leader 9:55 - Feedback, EQ & Confidence 13:55 - The Human Side of Transformation 16:08 - Building DTCC's Audit Culture 18:58 - Leadership Behind the Scenes 23:27 - Strong Teams & Communication 25:36 - ERGs, Identity & Inclusion 27:48 - AI vs Human Connection 30:00 - Innovation That Actually Works 34:10 - Changing the View of Internal Audit 39:50 - Finding Your Voice 41:30 - Final Thoughts   Be sure to connect with Aadesh and Idania on LinkedIn.    Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.    Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule.

The Institute of Internal Auditors Presents: All Things Internal Audit  In this Internal Audit Awareness Month special, internal audit leaders share the human side of the profession. Through stories of resistance, difficult findings, stakeholder trust, courage, and career-defining moments, the episode highlights how internal auditors add value by building relationships, asking better questions, and helping organizations see what they might otherwise miss.    HOST: Catie Brown Associate Manager & Producer, Content Development, The IIA  GUESTS   Asim Fareeduddin, CPA, CISA, CISM, CIPP, CISSP Head of Internal Audit & Assurance, RELX Ashanti Clark, CIA Executive Advisor, FedEx Express Corporation Jasdeep Gill, CIA, CISA, CISM, CFE Senior Manager, Internal Audit & Assurance, RELX Aadesh Gandhre, CIA, CISA  Chief Audit Executive, DTCC Chad Bourque, CIA  Global Director of Enterprise Risk Management, Gallagher Benefits Services Nam Phong Ho, CIA, CISA, CFE, CRMA, QILM, MBA Former Chief Audit Executive, Glencore / Independent Advisor   KEY POINTS: Introduction [00:00:02-00:01:42] Navigating Internal Audit Resistance [00:01:42-00:05:34] Preparing for Difficult Conversations [00:05:34-00:08:05] Emotional Intelligence and Cultural Awareness [00:08:05-00:09:53] Delivering Difficult Audit Findings [00:09:53-00:14:28] Leadership During Challenging Audit Moments [00:14:28-00:16:38] Communicating the "So What" [00:16:38-00:19:42] Active Listening and Stakeholder Trust [00:19:42-00:22:53] Building Real Relationships [00:22:53-00:24:21] Demonstrating Internal Audit's Business Value [00:24:21-00:27:48] Courage and Career Growth in Internal Audit [00:27:48-00:29:51] Internal Audit as a Mission [00:29:51-00:31:52] Reflecting on Value After Every Audit [00:31:52-00:32:48] Sharing Internal Audit Successes [00:32:48-00:33:41] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Discover Internal Audit Certifications May Sale Internal Audit Month Global Awareness Global Internal Audit Standards Vision 2035 Career Center   Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer  

В этом выпуске гостья - Татьяна Пугачева, Internal Audit Program Manager в Tesla, которая переехала в США из Беларуси, прошла путь от работы в мотеле и баре до карьеры в одной из самых известных технологических компаний мира.Мы обсудили, как Татьяна оказалась в США после отчисления из университета в Беларуси, почему решила полностью поменять карьерный путь и как выбрала аудит как одну из самых стабильных и востребованных профессий в Америке. Разобрали, как устроено американское образование, зачем многие студенты начинают с community college, как можно сократить стоимость обучения со $180,000 до долга в $26,000 и почему связи университетов с работодателями иногда важнее самого диплома. Поговорили о разнице между accounting и bookkeeping, внутренним и внешним аудитом, карьерном росте в Big Four и зарплатах аудиторов в США. Отдельно затронули работу в Tesla: как проходят интервью, как компания оценивает корпоративные риски, почему аудиторы анализируют даже политические связи Илона Маска и как AI меняет профессию аудитора, не уничтожая ее полностью. Также обсудили, почему фундаментальные профессии остаются устойчивыми несмотря на технологические изменения, как стратегически выбирать карьеру в США и почему образование может стать самым надежным активом в жизни.Татьяна Пугачева (Tatsiana Puhachova) - менеджер программ внутреннего аудита (Program Manager, Internal Audit) в Tesla.LinkedIn: https://www.linkedin.com/in/tpuhachovaСтажировки в США. Диплом в американском вузе - это еще не гарантия получения работы! Дарья Скалицкиhttps://youtu.be/p5t9LPFA5W0***Записаться на карьерную консультацию (резюме, LinkedIn, карьерная стратегия, поиск работы в США)https://annanaumova.comКоучинг (синдром самозванца, прокрастинация, неуверенность в себе, страхи, лень)https://annanaumova.notion.site/3f6ea5ce89694c93afb1156df3c903abТелеграм https://t.me/prodcastUSAИнстаграм https://www.instagram.com/prodcast.usТикТок https://www.tiktok.com/@us.job⏰ Timecodes ⏰00:00 - Начало00:45 - Гость выпуска: Татьяна Пугачева из Tesla01:00 - Переезд из Беларуси и учеба в США01:18 - DePaul vs University of Chicago03:20 - Первые впечатления от Америки05:09 - Сложности адаптации после переезда07:35 - Визовые проблемы и поступление10:09 - Эмиграция, стресс и внутренние перемены15:14 - Финансовые трудности и жизнь студентки20:01 - Почему выбрала DePaul University25:01 - Как устроен accounting и аудит в США29:49 - Разница между accountant и bookkeeper30:03 - Как работодатели смотрят на опыт кандидатов35:03 - Стоимость образования и курсов40:03 - Возраст, учеба и ощущение среди студентов45:00 - Работа в крупных компаниях и McKinsey50:01 - Карьера, рост и корпоративная среда55:02 - Переходы между компаниями и развитие карьеры01:00:00 - Работа в Tesla и внутренняя структура01:05:03 - Что значит уровень директора в США01:10:03 - Судебные процессы и корпоративные риски01:15:08 - Масштаб Tesla и количество сотрудников01:20:01 - Культура компании и личные наблюдения01:25:03 - AI, бизнес и будущее профессий01:30:08 - Советы тем, кто хочет переехать в США

In deze aflevering: • Waarom internal audit veel meer is dan controleren achteraf • Governance, cultuur en menselijk gedrag • De nieuwe Verklaring Omtrent Risicobeheersing (VOR) • De spanning tussen onafhankelijkheid en business partnership • AI en de toekomst van internal audit • ESG en risicobeheersing • Internationale ontwikkelingen via IFAC • Diversiteit en verschillende perspectieven binnen teams • Adviezen voor jonge accountants en auditors Gast: Esther Bosch Chief audit executive en riskmanager Actief binnen IFAC en voormalig voorzitter van de NBA-ledengroep voor intern en overheidsaccountants (LIO) Links: NBA-brochure over de Verklaring omtrent Risicobeheersing (VOR)

The Institute of Internal Auditors Presents: All Things Internal Audit  In this episode, Mike Levy sits down with Reebu George to get practical about one of the most significant shifts underway in internal audit right now: the automation of IT controls. They talk through where this shift is happening, what use cases are proving their value, and how internal audit can lead the conversation rather than wait for the business to figure it out first.      HOST: Mike Levy, CIA, CRMA, CISSP CEO, Cherry Hill Advisory GUEST: Reebu George, CISSP, CISA, PMP Audit & Assurance Managing Director, IT Internal Audit Leader, Deloitte & Touche LLP   KEY POINTS: Introduction [00:00:02-00:00:47] The Shift Toward Continuous Auditing [00:00:47-00:02:26] How Automation Is Changing IT Controls [00:02:26-00:04:54] Building an Internal Audit Digital Strategy [00:05:39-00:07:09] Where Internal Audit Teams Should Start [00:07:09-00:09:33] Using AI and Automation in Audit Workflows [00:09:33-00:10:04] Earning a Seat at the Table [00:10:04-00:11:35] Developing Talent for Advisory Conversations [00:11:35-00:12:23] Rule-Based Controls and Automation Opportunities [00:12:23-00:13:45] Governance Risks in Automated Controls [00:13:45-00:15:39] Selling the Value of Automation [00:15:39-00:18:37] The Future of Continuous Assurance [00:18:37-00:19:49] Closing [00:19:52-00:20:23] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: IT General Controls Certificate Program Knowledge Centers: Artificial Intelligence Global Internal Audit Standards Vision 2035   Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer  

The Institute of Internal Auditors Presents: All Things Internal Audit  In this episode, Ahmed Sharif Hawky and Emmanuel Pascal discuss why greenwashing is no longer just a reputational risk, but also a governance and assurance challenge. Together they break down how greenwashing qualifies as legal misrepresentation, why most control environments are far weaker than leadership realizes, and what a practical audit approach looks like — from mapping sustainability claims across  channels to using data analytics and intensity ratios to test what companies report and what they don't.     HOST: Ahmed Sharif Shawky, CIA, CPA CEO, SustainGRC GUESTS: Emmanuel Pascal, CIA, CRMA, CFE CEO, Condor Strike  Member, Committee of Research and Education Advisors, Internal Audit Foundation   KEY POINTS: Introduction [00:00-00:00:50] Defining Greenwashing [00:00:50-00:02:14] Political Backlash vs. Regulatory Reality [00:02:16-00:03:21] Greenwashing as Misrepresentation [00:03:24-00:06:13] Global Greenwashing Regulations [00:06:13-00:07:16] Greenwashing as Value Fraud [00:07:22-00:11:07] Assessing Greenwashing Risk [00:11:14-00:13:49] Green Strategy and Red Flags [00:13:50-00:14:48] Using Data Analytics to Test Sustainability Claims [00:14:48-00:18:10] Building a Strong Control Framework [00:18:13-00:19:27] Internal Audit's Approach to Greenwashing Risk [00:19:27-00:20:58] Training Auditors on Sustainability [00:20:58-00:21:52] DWS Greenwashing Case [00:21:52-00:23:42] 2026 International Conference Promo [00:23:47-00:24:18] Closing [00:24:25-00:24:34] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: 2026 IIA International Conference Knowledge Centers: Environmental, Social, and Governance Global Internal Audit Standards Vision 2035 Global Perspectives & Insights: Sustainability All Things Internal Audit: Unmasking Greenwashing On the Frontlines: Greenwashing and Closing the Authenticity Gap Five Questions: Preventing Greenwashing   Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer  

Join hosts John Salling and Sherri Kropp as they delve into the world of internal audits. Discover the essential role of internal auditing in maintaining compliance, preventing fraud, and ensuring accountability within the City of Fayetteville.

Most internal audit functions are still operating like it's 2010. In the first episode of Embark's new GRC series, Adam Olsen is joined by Allison Bradshaw, Principal and head of Embark's GRC and Internal Audit Services practice, to make the case for a fundamentally different model. The conversation covers what modern IA looks like, how to build the right delivery structure, and how CFOs can measure real return on investment.In this episode:Why compliance-checkbox IA is leaving significant value on the table, and what a risk-based, consultative function looks like insteadCo-sourcing vs. outsourcing: a practical framework for deciding which model fits your organization's size, complexity, and risk profileHow data analytics and AI are shifting IA from sampling transactions to testing entire populations in near-real timeThe emerging demand for IT audit, cybersecurity, and AI governance capabilities, and why most teams can't hire for all of itA framework for measuring IA ROI: prevented costs, recovered value, process improvements, and stakeholder confidenceA real-world co-sourced engagement example where a single year yielded over $1.6M in identified losses and fraud

Welcome to RIMScast. Your host is Justin Smulison, Business Content Manager at RIMS, the Risk and Insurance Management Society.   In this episode, Justin interviews the RIMS 2026 Risk Manager of the Year, Jeff Bray, about his award and his career at AMB, which merged with Prologis early in his career. Justin and Jeff discuss how risk management earns a strategic seat at the table, how Jeff revived the ERM Program at Prologis, tying it to the business model, and how cross-functional risk management works at Prologis today. Jeff speaks of resilience in the face of polycrisis and climate risk, and working on what he has control over while being aware of the rest. Jeff shares his excitement for developing the next generation of risk professionals and about the amazing opportunity the risk profession holds for them today. Listen for insight on ERM, resilience, and building relationships.   Key Takeaways: [:01] About RIMS and RIMScast. [:14] We hope you are listening to this episode of RIMScast while at RISKWORLD 2026, and we are gently reminding you to download the RIMS Events App to navigate the show successfully! [:29] About this episode of RIMScast. This is our annual Risk Manager of the Year episode. We are delighted to be joined by this year's honoree, Jeff Bray of Prologis. If you are listening to this on its release day of May 4th, you might see him onstage at RISKWORLD. But first… [:59] RIMS Virtual Workshops. The next RIMS-CRMP-FED Exam Prep Course will be on May 13th and 14th. The popular CBCP and RIMS-CRMP Exam Prep Bootcamp will be held from May 18th through the 21st. The next RIMS-CRMP Exam Prep Course will be held on June 9th and 10th. [1:19] Links to registration are in this episode's notes. [1:22] Webinars. On May 14th, Origami Risk will return with a new session, "Future-Proofing Your Risk Program: Keeping Pace with Scale, Complexity, and Visibility." [1:34] On May 21st, GRC returns to present "Is Your Fire Protection Strategy Outdated? Emerging Risks Are Changing the Rules." [1:43] On May 28th, Zurich returns with "From Underwriting To Risk Management: What To Expect From The Growing Demand For Data Center Construction." Register for webinars at RIMS.org/Webinars or through the links in this episode's show notes. [1:58] Folks, RIMS is back on YouTube. Our handle is @RIMSOfficialChannel. We've got plenty of videos there, including RIMScast, RIMScast Canada video podcasts, and other informative and entertaining content from RIMS. Subscribe to the channel today! [2:16] RISKWORLD 2026 is underway in Philadelphia, Pennsylvania! If you are here or on your way, be sure to download the RIMS Events App. It is free and publicly available. This will help you set your agenda and provide ample navigation through the Philadelphia Convention Center. [2:36] RIMS has also released its RISKWORLD Playlist, available through Apple Music and Spotify. Whether you want to get in the zone before RISKWORLD or relive the energy after it, these official RISKWORLD Playlists are available to keep the energy going. [2:53] Links are in this episode's show notes. [2:57] On with the Show! This is our special Risk Manager of the Year episode of RIMScast! This year's honoree is Jeff Bray. [3:08] Jeff is the Senior Vice President and Head of Global Risk Management at Prologis, a global leader in logistics real estate, with 1.3 billion square feet across 20 countries on four continents, and more than 6,500 customers focused on moving goods around the globe. [3:24] That is a lot of responsibility for one person, but don't worry, he's got a mighty team who shoulder it with him. [3:31] We're going to learn all about his work, the leaps and bounds he's made over the last 20 years, his involvement with the Spencer Educational Foundation, and what it takes to succeed in an increasingly uncertain world. We're going to have a lot of fun! Let's get to it! [3:46] Interview! RIMS 2026 Risk Manager of the Year, Jeff Bray, welcome to RIMScast! [4:07] Justin and Jeff met recently for his profile in RIMS Risk Management Magazine. [4:14] This episode is released on Day 1 of RISKWORLD. When people are listening to this, they might be seeing Jeff onstage accepting his award. Jeff says, first and foremost, he is looking forward to RISKWORLD; the award is a nice cherry on top. [4:37] Jeff is 20 years into his career, and he has only missed a few RISKWORLDs. [4:45] Jeff joined AMB Property Corporation in 2005, not knowing anything about risk management and knowing only environmental insurance, a few weeks before Hurricane Katrina. It was trial by fire. Then, Hurricane Rita and Hurricane Wilma hit. It was a transformational year. [5:34] There were two years in a row of serious hurricanes affecting the property insurance market. The challenges AMB had experienced transformed the way the insurance and risk management program has been run ever since. [6:02] AMB merged with Prologis a few years later, following a great financial crisis that occurred in June 2011. [6:32] Jeff says Prologis is an owner of logistics real estate. They don't operate any of the buildings. Jeff's purview is the 1.3 billion square feet of real estate in 20 countries, with around 60,000 assets. [6:47] Prologis has a couple of billion dollars a year of development activity. They have a renewable energy business and a digital infrastructure. [7:32] Jeff says it's critical to see properties first-hand. Warehouses are different in different countries, and seeing them helps solve problems when they arrive. Early on, he attended a captive owners conference in Bermuda, and meeting many peers accelerated his learning. [9:03] Through serving the business, Jeff built trust with senior leaders and the board. Jeff started by figuring out what people wanted or needed and helped them achieve it. He built strong relationships with every group; he's in lockstep with legal, finance, and business teams. [10:33] Jeff's risk team has seven members. He also has two members of the corporate security team. He has worked hard to grow the team as needed. He sees an opportunity with technology to scale the team's capabilities to focus on critical tasks. He's grateful for the team's efforts. [11:49] Risk management is centralized at Prologis. They operate as a consistent global program. Jeff is in San Francisco, with team members in the Bay Area, Denver, and one in Dallas. [12:45] Jeff says he takes advantage of every crisis and pays close attention to every near-miss. It's a reminder that this is why what we do is important. Sometimes it's all hands on deck. What can we do differently next time? [13:35] One big near-miss was a fire that arose from customer operations in a building, which didn't amount to much because the sprinklers operated properly. Jeff participates in Prologis's global safety board. They pay close attention to anything like a contractor injury. [14:06] June is National Safety Month. The Head of Safety of Prologis's Development Team plans Safety Month activities. Every project and team member will be involved. It sends a good message. They make it very clear to every contractor they hire that safety is paramount. [14:49] Justin says the leader of the ASSP will soon be a guest on RIMScast. Safety should be observed every month. Jeff says in the past, safety was something they focused more on when something happened, but now it's ingrained in the way they operate. It's not treated separately. [15:44] Jeff reestablished Prologis's ERM program. His ERM Committee is a sounding board with seven or eight global leads. The members are the Head of Internal Audit, the Head of Info Security, and others, who work closely across the risk register to ask, "What are we missing?" [17:14] The challenge in reactivating the ERM committee was getting the relevance right. For the first meeting or so, they brainstormed. Now it's operating at the right frequency with the right dynamic input. It will continue to evolve in every meeting. [17:55] They meet annually with the Audit Committee, and some years they meet with the Board of Directors. It evolves from the day-to-day Risk Register, working with the business teams. The Audit Committee and the Board are very invested in what the ERM Committee does. [18:34] ERM at Prologis is tied to what's relevant to the CFO, the Chief Legal Officer, and other stakeholders. With the CFO, it's tied to earnings per share and net operating income impact. Jeff is always looking at what the business is looking to accomplish and how ERM can support it. [19:17] A Quick Break! The 2026 Florida RIMS Educational Conference will be held from July 28th through August 1st at the lovely Ritz-Carlton in Naples, Florida. A link to the event is in this episode's show notes. [19:40] Register now for the Second Annual RIMS Texas Regional Conference, to be held from August 10th through 12th at the Grand Hyatt on the San Antonio River Walk. Advance rates are available through June 5th. [19:55] The 11th Annual Chicagoland Risk Forum will return to the Old Post Office on Thursday, September 24th, 2026, in Chicago. Visit ChicagolandRiskForum.org for more information. [20:08] The RIMS Western Regional Conference will be held from October 4th through the 7th in Seattle, Washington. Registration is open, and you can also submit a session. Visit RIMSWesternRegional.com and the link in this episode's show notes for more information. [20:26] Save the dates October 18th through the 21st. That is when the 50th Annual RIMS Canada Conference will be held in Quebec City. Booth sales are already open. The call for educational sessions is open through May 8th. Early-bird registration will open in June. [20:44] Visit RIMSCanadaConference.ca for more information. Also, remember to check out RIMS.org/Canada for our spinoff show, RIMScast Canada, hosted by National Conference Committee Chair, Aaron Lukoni. [20:59] Check RIMS.org for an announcement about the RIMS ERM Conference 2026. It will be up soon! [21:07] Let's Return to Our Interview with RIMS 2026 Risk Manager of the Year, Jeff Bray! [21:24] Justin asks what Jeff loves about RISKWORLD. Jeff loves the people, the interactions in the hallways, even when racing from session to session, and meeting to meeting. There's no better place to meet people and build meaningful relationships over the years. [21:45] Jeff says there's no better place to get apprised of what's coming up in the risk industry and reconnect with our most important relationships. [22:17] Jeff says RISKWORLD is a connection point where a group of risk professionals from around the country can get together. [22:31] Jeff's team members, the Head of Risk and the Head of Claims, have attended RISKWORLD for the last few years. [23:07] Justin asks about cross-functional risk management. Jeff says that he can't imagine a problem crossing their desk that Risk Management can solve solely by themselves, figure out, and move on. Generally, they will engage Legal, HR, and the Business Teams. [23:28] Jeff says that's hugely important to be able to solve problems effectively, and in a way that enables the business. [23:55] Jeff thinks the perspective on risk has changed over time. The needs have changed over time. At the beginning of his time at AMB and Prologis, there was a focus on insurance because they were expanding to new countries and standing up a global program. [24:17] Within 90 days, Hurricanes Katrina, Rita, and Wilma hit, and Jeff was learning about disaster recovery and response. He saw the teams in action and how it can be a competitive advantage if they can get their properties up and running quicker than someone else. [24:37] That's absolutely a competitive advantage to Prologis, and that's been in their DNA ever since. [24:53] Justin asks about Jeff's dashboard. It's a Claims dashboard, created by the Claims team, so Jeff can look at the Claims activity every day. [25:16] Jeff says Prologis retains a bunch of risk itself. It's Prologis's money. It concerns not only Jeff, but also the Finance Team and others. None of them likes surprises. Jeff manages it like a business, managing actual claims against the forecast. [25:53] Jeff says it's been phenomenal. He's asking for more dashboards! [26:08] Jeff discusses the impacts of technological innovation on his role. One of the biggest pieces was onboarding Archipelago, a tool to intake Statement of Value information and other property characteristics and deliver it to an insurance company in a reliable and verifiable way. [26:33] Jeff says during that period, they went through $40 to $50 billion of acquisitions, so Archipelago was a game-changer in a way that insurance companies couldn't believe. [26:48] Prologis would bring on a portfolio in September and was ready for its December renewals with the full Schedule of Values. Jeff says it was about, "What questions am I asking myself, and how do we solve for that?" [27:03] Jeff was looking beyond the Cap Modeling results to what other information he could get out of the data, from the newness of the assets, different specifications, and different protections in place, and quantifying that in a way that was meaningful for the insurers. [27:25] When Prologis onboarded Archipelago, there weren't any other systems available to do what was needed. They were developing something that hadn't been in place yet. Prologis was part of the development team. [27:43] Jeff says the Claims dashboard is driven by Origami, which has been an important partner of Prologis. [27:55] Prologis has always been focused on the combination of good data and leveraging technologies to interpret that data. That's been very important to Prologis. [28:15] Another Quick Break! The Spencer Educational Foundation's Risk Manager on Campus application period is now open, and it will close on June 30th. Grant awardees, colleges, and universities are typically notified in September. [28:42] The Course Development Grant application deadline for Interval Number 2 will be on June 15th, 2026. Award notifications will be sent out in late July. [28:57] General Grant applications will open on May 1st, 2026, and the application deadline is July 30th. Internship Grant applications open on August 15th and close on October 15th. [20:08] Links to each of these grants are in this episode's show notes. Visit SpencerEd.org for more information. [29:17] Let's Conclude Our Interview with RIMS 2026 Risk Manager of the Year, Jeff Bray! [29:43] Jeff says the younger risk professionals are absolutely more well-versed in technology. The challenge is not to let technology become more important than understanding the basics of the business. [30:00] Jeff says you still need to understand what that policy says and what the submission process looks like, so you can get the right outcomes out of the technology. Most of the folks Jeff works with are younger than he is. [30:21] Jeff says what they're doing with AI, dashboards, and other insights is super impressive. They balance that with learning the fundamentals. [30:47] In a new risk professional, Jeff looks first for curiosity and questions. When Jeff hit stagnant parts of his career, he had stopped asking questions, so today, he asks a lot of questions. Curiosity is key to investigating what's happening in the company to solve problems. [31:18] Jeff says connecting the dots is something he still works on today. We live in a complex world. There's generally not one threat or risk that operates in a silo. Risks are connected. Someone who can understand how different risks might be interconnected will be critical. [31:43] Jeff says that being hungry, learning, and striving to do more than the person who started next to you is more important than ever. [32:06] Jeff says polycrisis is an interesting term, and he fully believes in it. He spends a fair amount of time thinking about what he has control over and what he doesn't have control over. Jeff says Prologis doesn't let the polycrisis drive its strategy on a day-to-day basis. [32:45] Jeff says awareness is key, and knowing how you can respond as an organization. [33:02] On mitigation and navigation, Jeff says, it's like being on defense versus offense. Risk mitigation works if it's a very simple solution. Putting a floodwall in a building to prevent flooding is a great mitigation.  [33:15] Most risks are not that simple, and they require navigation. They require keeping options open and multiple solutions. Navigation lends itself to how risks evolve and how we respond to those risks. [33:40] Jeff says Prologis is an owner of 1.3 billion square feet of real estate, with two to three percent of the world's GDP flowing through its buildings. Supply chain resilience is key. Prologis focuses on climate risk, but Jeff wants to look at it from more of a resilience perspective. [34:04] Jeff's perspective is about what Prologis should be worrying about, and how that affects how they build a building and how they operate an asset. Climate risk is front-of-mind to this day for many of Prologis's investors. [34:17] Investors want to know what Porlogis is doing about things and how they are looking at exposures. So Prologis has always tried to be on the front end of that discussion with investors. The decisions Prologis makes just need to make good business sense. [34:41] As long as Prologis can communicate, this is a concern, and this is how it translates into a business impact or impacts performance. That remains key, and we are in an environment that is evolving in frequency and severity. It's something Prologis pays close attention to. [35:16] Solar panels are part of Prologis's sustainability goals. Thicker rooftops are needed. Solar panels affect how air conditioning is used and the temperature levels within a building. It affects how Prologis might construct the building to have a better working environment. [35:51] Jeff says it all ties together, which comes back to a more resilient and better-performing portfolio. [36:00] Justin asks about earthquake resilience for new construction. Prologis has a lot of property on the California coast and has been focused on earthquake risk for the life of the company, doing voluntary retro-fittings and seismic upgrades. [36:33] That's not to get reduced insurance premiums but to take steps to reduce interruptions that may occur for Prologis's customers' activities when an earthquake does arise. It's about taking Prologis's objectives and aligning them with the business, not to save premiums. [37:16] Jeff is very excited by the level of abilities he sees in college students. He was recently at Old Dominion for Risk Manager on Campus. This industry has an amazing amount of opportunity. Risk is at the crossroads of finance, operations, legal issues, and HR. [38:27] Jeff's words to students and aspiring risk professionals: "There's an incredible amount of opportunity. What risk strategy means today is very different than what it meant 15 years ago. It's a hidden gem of an industry, still today." [38:44] Justin congratulates Jeff on being named RIMS Risk Manager of the Year 2026. Nobody accomplishes anything by themselves. Is there anyone you want to thank? Jeff says thanking a whole host of folks might take its own podcast. [38:59] Jeff thanks his team across Risk, Resilience, and Claims, and the deep bench of external risk advisors, from broker placement to consulting, technology partnerships, and the insurers. He couldn't do this without all of those team members. He's very grateful for it all. [39:49] Justin says, I look forward to meeting you and seeing you up onstage and cheering you on. I hope we can continue to stay in touch because you've got so much knowledge to share with the global risk community, here through RIMScast. Thank you so much for your time! [40:16] Special thanks again to Jeff Bray, the 2026 RIMS Risk Leader of the Year. We are delighted for him and congratulate him once again. Be sure to check out last week's episode, featuring RIMS Rising Risk Professional, Tyler Vaughan. [40:32] In May, we intend to have Honor Roll Awardee, Emily Buckley, back on RIMScast. Check RIMS Risk Management Magazine for the Awards Digital Edition, which also features profiles on the Chapters of the Year and other special awards. More winners will be on RIMScast in 2026. [40:55] I hope everyone who's listening in Philadelphia at RISKWORLD is having a blast! Next week's episode will feature interviews recorded live while in Philadelphia. Let's relive the magic! [41:08] Plug Time! You can sponsor a RIMScast episode for this, our weekly show, or a dedicated episode. Links to sponsored episodes are in the show notes. [41:37] RIMScast has a global audience of risk and insurance professionals, legal professionals, students, business leaders, C-Suite executives, and more. Let's collaborate and help you reach them! Contact pd@rims.org for more information. [41:55] Become a RIMS member and get access to the tools, thought leadership, and network you need to succeed. Visit RIMS.org/membership or email membershipdept@RIMS.org for more information. [42:13] Risk Knowledge is the RIMS searchable content library that provides relevant information for today's risk professionals. Materials include RIMS executive reports, survey findings, contributed articles, industry research, benchmarking data, and more. [42:29] For the best reporting on the profession of risk management, read Risk Management Magazine at RMMagazine.com. It is written and published by the best minds in risk management. [42:43] Justin Smulison is the Business Content Manager at RIMS. Please remember to subscribe to RIMScast on your favorite podcasting app. You can email us at Content@RIMS.org. [42:55] Practice good risk management, stay safe, and thank you again for your continued support!   Links: RISKWORLD Playlists:

Guest Bio: Michelle Wagner is Vice President and Head of Internal Audit at DocuSign, where she leads global audit strategy and helps the organization strengthen governance, risk management, and internal controls while supporting a culture of integrity and accountability. With more than 25 years of experience across consulting and industry, Michelle has held leadership roles at Deloitte, Costco, and SAP, where she led large audit portfolios, built high-performing teams, and drove governance and risk transformation initiatives across complex global organizations. Michelle is known for her practical, people-centered approach to risk leadership and for translating complex risk insights into clear, actionable guidance. She is passionate about mentoring emerging leaders and helping organizations move from reactive risk management to proactive, insight-driven decision-making. Show Notes: Risk is often framed as technical work, but at its core, it is deeply human. In this episode of Great Women in Compliance, Dr. Hemma Lomax sits down with Michelle Wagner, Head of Internal Audit at DocuSign, to explore how curiosity, empathy, and partnership help organizations manage risk more effectively and build stronger ethical cultures. Michelle shares insights from a career spanning consulting and global leadership roles, reflecting on the moments that shaped her leadership philosophy and the lessons she has learned about influencing without authority, building trust, and helping teams see risks as opportunities to improve rather than problems to avoid. Together, they discuss the evolving role of internal audit, the importance of collaboration across risk functions, and how emerging technologies such as AI can help leaders identify patterns and generate insights while reinforcing the need for human judgment. This conversation is a reminder that great risk leaders don't just protect organizations — they help them succeed. Episode highlights: Why risk management is fundamentally a leadership discipline Lessons from moving from consulting to executive leadership roles What makes an internal audit function truly valuable How audit, compliance, and business teams can partner effectively The role of curiosity and psychological safety in surfacing risks Michelle's perspective on AI and the future of risk management Leadership lessons from mentoring and building teams

The Institute of Internal Auditors Presents: All Things Internal Audit Tech  In this episode, Adam Ross speaks with Vipul Patel about how organizations can better prepare for ransomware attacks. They talk through what goes wrong in the first hours of an attack, what smart preparation looks like, and where traditional audit approaches fall short when a business is in crisis mode.   HOST: Adam Ross, CIA, CISA Partner and Internal Audit Services Leader, Grant Thornton   GUEST: Vipul Patel, CISA Audit and Assurance Managing Director, IT Internal Audit Leader, Deloitte & Touche LLP   KEY POINTS: Introduction [00:00:02-00:00:27] Common Mistakes in Ransomware Response [00:00:27-00:02:14] Building Crisis Communication Plans [00:02:20-00:03:03] A Simple Incident Response Runbook [00:03:03-00:05:03] Internal Audit's Role Before an Incident [00:05:03-00:07:05] Stress Testing and "What If" Scenarios [00:07:05-00:08:01] Tabletop Exercises and Cross-Functional Readiness [00:08:02-00:10:03] Partnering With the CISO and Management [00:10:03-00:11:15] Lessons Learned After Ransomware Incidents [00:11:15-00:14:05] Governance Changes After an Attack [00:14:55-00:16:55] Cyber Risk as a Business Issue [00:16:55-00:17:16] Traits of Organizations That Respond Well [00:17:20-00:19:44] Final Advice for Internal Auditors [00:19:44-00:20:56] Visit The IIA's website or YouTube channel for related topics and more.   IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Cybersecurity Topical Requirement Course: Detecting, Mitigating and Responding to Global Ransomware Attacks Articles: A Ransomware Playbook IIA Certificates: IT General Controls Certificate Knowledge Centers: Artificial Intelligence Vison 2035 IIA Courses: Fundamentals of IT Auditing Become a Certified Internal Auditor (CIA) CIA Challenge Exam   Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

This week, internal audit leader and tax expert Michelle V. joins the show.   Michelle brings a unique perspective, coming from a tax background into internal audit leadership—an area where tax expertise isn't always front and center. She shares insights into her transition from leading tax to stepping into a broader internal audit role, and how that experience shapes the way she approaches emerging topics today.   The conversation centers on upcoming guidance around effective tax rate requirements set to take effect in 2026. Michelle breaks down why this topic matters, what audit teams should be paying attention to, and how even those without a tax background can better understand and communicate the implications—whether within their organizations or at the board level.   This is a quick, practical episode packed with insights that can help auditors stay ahead of an important, and often overlooked, area.   Be sure to connect with Michelle on LinkedIn.   6:34 - Utilizing LLMs for report research 11:06 – ASC guidance effective tax rate 2026 15:33 – Prioritizing Tax Data Accuracy in the Audit Plan 17:43 – What's Driving ASC guidance 19:18 – Map Your Current Footnote to New Requirements 23:27 – Final Thoughts   Be sure to connect with Mark on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.    Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.

The Institute of Internal Auditors Presents: All Things Internal Audit  What does it take to move an internal audit function from being risk traditionalists to risk strategists, and what's quietly holding most teams back?   In this companion episode to Internal Auditor magazine's "Becoming a Risk Strategist" article, host Erin Banet sits down with Jess Rodgers to examine why the traditional audit model no longer fits the world we're operating in, and what leaders need to unlearn before they can change it. You'll hear three assumptions most audit teams are still running on, a real-world example of transformation done right, and one concrete action CAEs can take in the next six months to start shifting their function's standing with leadership.     HOST: Erin Banet, CPA   Chief Audit and Risk Officer, Humana GUEST: Jess Rodgers, CIA, CPA    Global Internal Audit Leader, EY   Vice Chair, Finance, IIA North American Board   KEY POINTS: Introduction [00:00:02 - 00:00:25] What Defines a Risk Traditionalist Function [00:00:51 - 00:02:31] Why the Traditional Model No Longer Works [00:02:37 - 00:04:22] Assumptions Internal Audit Must Unlearn [00:04:28 - 00:06:39] The Mindset Shift Required for Transformation [00:06:44 - 00:08:44] A Real-World Transformation Example [00:08:44 - 00:11:10] Where Traditional Approaches Fall Short [00:11:10 - 00:13:36] Measuring Success as a Risk Strategist [00:13:36 - 00:15:27] Decision Velocity in Practice [00:15:27 - 00:17:25] Common Barriers to Transformation [00:17:25 - 00:19:23] One Action Leaders Can Take Now [00:19:23 - 00:21:03] Advice for CAEs Navigating the Transition [00:21:22 - 00:23:06] Driving Change Within Audit Teams [00:23:06 - 00:24:36] Closing Thoughts [00:24:36 - 00:25:05]   Visit The IIA's website or YouTube channel for related topics and more. RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Becoming a Risk Strategist — Internal Auditor Magazine (April Issue) Global Internal Audit Standards Vison 2035 GTAG: Continuous Auditing and Monitoring Learning Solutions: Agile Auditing Global Guidance: Developing a Risk-Based Internal Audit Plan, 2nd Edition Learning Solutions: Fundamentals of Risk-based Auditing Become a Certified Internal Auditor (CIA) Risk in Focus 2026 EY Global Risk Transformation Study Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

Leeann Kennedy, Director of Internal Audit at Irish Revenue

The Institute of Internal Auditors Presents: All Things Internal Audit  Five women. Five careers. Decades of experience across some of the world's largest organizations. They didn't just find their way into this profession. They helped shape it.  In this companion episode to Internal Auditor magazine's "Leading the Way" article, five internal audit leaders sit for a conversation that's long overdue: Erin Banet, Doris Myles, Chrysti Ziegler, Dominique Vincenti, and Beili Wong. Together, they cover the careers they built, the rooms they walked into alone, and what they'd tell every woman in this profession today. You'll hear why preparing thoroughly is not the same as having permission to speak. You'll learn what it looks like to walk into a high-stakes conversation as a professional first, not as a woman managing a narrative. You'll hear the bad advice one of them ignored, and what happened when she did. And you'll discover what sponsorship really means when it's the difference between being mentored and having someone actively advocate on your behalf.     HOST: Catie Brown Associate Manager & Producer, Content Development, The IIA GUESTS: Erin Banet, CPA Chief Audit and Risk Officer, Humana Chrysti Ziegler, CIA, CRMA, CFE Chief Auditor, Citgo Petroleum Corporation Dominique Vincenti, CIA, CRMA Immediate Past CAE, Uber Board Member, Loft Orbital Beili Wong, CIA, CISA, CPAComptroller General, Ontario Treasury Board SecretariatDirector, Global Guidance, IIA Global Board of Directors Doris Myles, CIA, CPA Director of Internal Audit, St. Jude Children's Research Hospital     KEY POINTS: Introduction: Women's Voices in Internal Audit [00:00:02 – 00:01:33] Career Journeys Into Internal Audit [00:02:12 – 00:09:01] Finding Your Voice in High-Stakes Conversations [00:09:01 – 00:12:14] Confidence vs. Permission [00:12:21 – 00:15:23] Owning Expertise and Leading the Narrative [00:15:23 – 00:18:23] Early Career Challenges and Speaking Up [00:18:23 – 00:20:07] Progress of Women in Internal Audit Leadership [00:20:07 – 00:21:24] Redefining Leadership Through Empathy and Relationships [00:21:24 – 00:23:51] Women as Strategic Leaders, Not Just Technicians [00:23:51 – 00:24:57] The Value of Sponsorship vs. Mentorship [00:26:25 – 00:29:21] Creating Opportunities and Building Networks [00:29:21 – 00:31:51] Balancing Career and Personal Life [00:31:51 – 00:33:57] Final Reflections: Passion, Risk, and Owning Your Space [00:34:03 – 00:36:02] Closing Remarks [00:36:02 – 00:36:45]   Visit The IIA's website or YouTube channel for related topics and more.   IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Leading the Way — Internal Auditor Magazine (April Issue) How Personal Branding Benefits Female Leaders Building a Better Auditor: Celebrating Women Who Paved the Way Internal Auditing Competency Framework Vison 2035 Become a Certified Internal Auditor (CIA) Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

The Institute of Internal Auditors Presents: All Things Internal Audit  In this companion episode to the Global Best Practices' Elevating Internal Audit Communication With the Board, Rob Clark Jr. and Fábio Pimpão discuss how internal auditors can communicate more effectively with boards and executive leaders. They explore how to simplify complex risks, use storytelling to drive impact, and align messaging with what boards care about, from financial and reputational risk to strategic priorities. The conversation also covers practical tips for preparing for board presentations, leveraging AI, and building trusted relationships across the organization.     HOST: Rob Clark Jr., CIA, CCEP, CBM Chief Audit Executive, City of Hope GUEST: Fábio Pimpão, CIA, CRMA, CCSA Director, Internal Audit, Whirlpool Corporation Director, Professional Certifications, IIA Global Board of Directors   KEY POINTS: Introduction [00:00:40 - 00:01:46] How Board Expectations Have Evolved [00:01:46 - 00:03:32] Simplifying Complex Risks for the Board [00:04:19 - 00:06:00] Why Communication Is a Critical Audit Skill [00:06:00 - 00:07:55] Using AI to Improve Clarity and Messaging [00:07:17 - 00:08:13] Storytelling as a Tool for Impact [00:13:15 - 00:16:05] Preparing for Board Presentations [00:16:05 - 00:18:59] Translating Technical Issues into Business Impact [00:21:26 - 00:25:30] Focusing on Financial and Reputational Risk [00:25:30 - 00:26:55] Building Trusted Relationships Across the Organization [00:27:00 - 00:31:35] Final Advice: Priorities, Storytelling, and Driving Impact [00:31:35 - 00:32:38]   Visit The IIA's website or YouTube channel for related topics and more.   IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Best Practices: Elevating Internal Audit Communication With the Board Global Internal Audit Standards Course: Using the Standards to Communicate Clearly with the Board Vison 2035 Global Audit Committee Center Become a Certified Internal Auditor (CIA) 2026 Analytics, Automation and AI Virtual Conference Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

The Institute of Internal Auditors Presents: All Things Internal Audit Tech  In this episode, Daniel McCarville speaks with Bill Bensing about shadow IT and why it continues to emerge inside organizations. They explore how shadow IT often signals innovation rather than just risk, and how internal auditors can help organizations balance experimentation, governance, and operational control. The conversation also introduces a practical framework for understanding how ideas move from exploration to validation and ultimately into formal operations.   HOST: Daniel McCarville Associate Vice President of Internal Audit Arch Capital   GUEST: Bill Bensing Chief Technologist and Co-Founder Attestify   KEY POINTS: Introduction [00:00:02-00:00:39] What Is Shadow IT? [00:00:39-00:01:56] Why Shadow IT Exists in Organizations [00:02:13-00:05:08] Shadow IT as a Source of Innovation [00:05:33-00:08:03] Why Small Internal Solutions Can Deliver Big Value [00:06:10-00:07:33] The Role of Shadow IT in Validating Ideas [00:09:14-00:10:56] Why Innovation Often Fails to Take Hold [00:12:41-00:14:00] How Leaders Can Enable Innovation Safely [00:14:00-00:16:54] Building Communities and Internal Flywheels of Innovation [00:17:00-00:18:55] Developing Internal Innovation Teams [00:19:08-00:21:24] Why Experimentation and Imperfection Are Necessary for Innovation [00:21:59-00:22:59] How Auditors Should Rethink Shadow IT Risk [00:23:02-00:24:17] The Exploration-Validation-Operation Model [00:24:17-00:28:07] Internal Audit's Role Across the Innovation Lifecycle [00:28:07-00:31:11] Addressing Shadow IT Risks Without Stifling Innovation [00:32:29-00:35:32] Why Building Tools Strengthens Career Growth [00:37:11-00:39:04] Learning Principles vs. Learning Tools [00:39:21-00:41:51] How Auditors Can Encourage Innovation While Maintaining Controls [00:41:59-00:46:30] Final Thoughts: Enabling Coordination Across the Three Lines [00:47:39-00:50:14] Visit The IIA's website or YouTube channel for related topics and more.   IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards IIA Certificates: IT General Controls Certificate Knowledge Centers: Artificial Intelligence Vison 2035 Become a Certified Internal Auditor (CIA) IIA Courses: Fundamentals of IT Auditing Combined Assurance 2026 Analytics, Automation and AI Virtual Conference  The Big Idea: Shadow AI Isn't Just a Sign of Control Gaps   Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

In this episode of The Quality Hub, Chatting with ISO Experts, host Xavier Francis is joined by Core Business Solutions consultant Yarelis Rios to explore the ISO 9001 internal audit process and its real purpose within a quality management system. Drawing on over two decades of experience in engineering and quality leadership, Yarelis explains how internal audits should go beyond simple compliance checks to evaluate process effectiveness, identify risks, and uncover opportunities for continual improvement. The discussion covers how auditors can shift from a “policing” mindset to a collaborative, value-adding approach, how leadership and risk-based thinking are evaluated, and the differences between nonconformities, opportunities for improvement, and observations. Listeners will gain practical insights on using internal audit results to strengthen decision-making, support management review, and drive long-term organizational performance.   Helpful Resources: How is ISO 9001 Implemented?:  https://www.thecoresolution.com/how-is-iso-9001-implemented For All Things ISO 9001:2015: https://www.thecoresolution.com/iso-9001-2015 Contact us at 866.354.0300 or email us at info@thecoresolution.com A Plethora of Articles: https://www.thecoresolution.com/free-learning-resources ISO 9001 Consulting: https://www.thecoresolution.com/iso-consulting

This week, our guest is Anthony Pugliese, President and CEO of the Institute of Internal Auditors.   Anthony joins the show as he approaches his five-year anniversary leading the IIA, reflecting on the major milestones and progress the organization has made during that time. He shares a look back at key initiatives from the past five years and discusses what the next phase could look like for the profession.   We also talk about several recent research efforts, including the 2026 Risk in Focus survey and the joint report with AuditBoard on AI driven fraud. Anthony highlights a few key trends auditors should be watching, particularly as organizations navigate emerging technology risks and evolving expectations around governance and oversight.   Finally, Anthony explains two initiatives aimed at strengthening the future of the profession: the Global Audit Committee Center, which supports stronger engagement with audit committees, and VisionU, a development program designed for new and aspiring chief audit executives.   Be sure to connect with Anthony on LinkedIn. 6:02 - AI Tips 11:03 - 5 Years as IIA President 14:32 - Strategy and the New Internal Audit Standards 14:32 - Why "Simple" Implementations Rarely Actually Simple 17:40 - Key Insights from Risk in Focus 2026 and the AI Fraud Report 21:50 - AI Literacy and Training in Internal Audit 24:26 - The Audit Committee Center 27:54 - How to Join the Audit Committee center 33:25 - Experienced CAE resources 35:35 – Final Thoughts 38:26 - Best advice for CAEs from Anthony Pugliese   Be sure to connect with Mark on LinkedIn. Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.    Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.

The Institute of Internal Auditors Presents: All Things Internal Audit Tech    In this episode, Antonio Cacciapuoti and Alessandro Casarotti unpack the ethical challenges of artificial intelligence in internal audit and anti-financial crime. They discuss AI hallucinations as a risk to be governed, not eliminated, and examine why governance, accountability, and human judgment are central to ethical AI.    HOST: Antonio Cacciapuoti, CIA, CAMS Head of Internal Audit, Eurizon Capital Vice President, IIA Luxembourg   GUEST: Alessandro Casarotti Director, Forensic & Anti-Financial Crime, PwC Luxembourg   KEY POINTS: AI Hallucinations as a Governance Risk (00:00:28 – 00:02:46) How AI Developers Build Ethical Safeguards (00:02:50 – 00:06:10) Human Judgment and Ethical Decision-Making in AI (00:06:14 – 00:09:26) Automation, Accountability, and Ethical Responsibility (00:09:26 – 00:10:49) Global Approaches to AI Regulation (00:10:49 – 00:14:52) Why "Human in the Loop" Is Necessary but Not Sufficient (00:14:52 – 00:19:10) Strengthening Governance and Risk Controls for AI (00:19:10 – 00:21:01) Using AI in Anti-Financial Crime Investigations (00:21:01 – 00:24:12) How Fraudsters Attempt to Bypass AI Safeguards (00:24:12 – 00:27:44) The Future Relationship Between Internal Auditors and AI (00:27:44 – 00:31:17)   Visit The IIA's website or YouTube channel for related topics and more.   IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Domain II: Ethics and Professionalism Knowledge Centers: Artificial Intelligence Vison 2035 Become a Certified Internal Auditor (CIA) 2026 Analytics, Automation and AI Virtual Conference   Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

The Institute of Internal Auditors Presents: All Things Internal Audit    In this episode, Mike Jacka and Tshepo Mofokeng tackle one of the most common questions internal auditors face: Who audits the auditors? They break down how the quality assurance and improvement program (QAIP), professional standards, peer reviews, and self-regulation protect the integrity of the profession. They discuss how quality assurance strengthens credibility with boards, builds trust with stakeholders, and positions internal audit as a strategic advisor.   HOST: Mike Jacka, CIA, CPA, CPCU, CLU Chief Creative Pilot at Flying Pig Audit, Consulting, and Training Solutions   GUEST: Tshepo Mofokeng, CIA, CRMA CAE, Sefako Makgatho Health Sciences University Global Board of Directors, The IIA   KEY POINTS: Introduction: Who Audits the Auditors? [00:00:06–00:01:23] What QAIP Really Means and Why It Matters [00:01:29–00:02:43] The Role of Standards in Professional Legitimacy [00:03:05–00:03:58] Explaining Self-Regulation to the Board vs. Management [00:04:02–00:06:06] Addressing Defensiveness and Educating Peers [00:06:52–00:08:10] Moving from Compliance to Credibility in Quality Reviews [00:08:43–00:11:28] Measuring Impact, Not Just Audit Volume [00:12:01–00:13:39] Marketing Internal Audit's Value Through Quality [00:14:02–00:14:30] Finding Time for Quality Assurance Work [00:14:40–00:15:22] Real-World Example: How Peer Review Strengthened Trust [00:15:24–00:17:48] When Weak Self-Regulation Damages Trust [00:17:52–00:20:48] The Future of QAIP and Vision 2035 [00:21:02–00:23:19] Internal Audit's "Superpower" with the Board [00:23:21–00:25:11]   Visit The IIA's website or YouTube channel for related topics and more.   IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Quality Assurance and Improvement Program Vison 2035 Become a Certified Internal Auditor (CIA) 2026 Analytics, Automation and AI Virtual Conference   Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

According to the OIG, EPA regions underreported improper and unknown payments in the SRF program by tens of millions of dollars, driven by documentation gaps and incomplete reporting. The findings point to weaknesses in the agency's largest funding stream and the controls meant to protect it. We walk through the implications with Devon Padula from the EPA Office of Inspector General.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

In Episode 78 of Audit Bites, host Rob Berry dives deep into one of the most common sources of audit frustration: why internal audit strategic plans so often derail.And what you can do to make yours work.Drawing from real-life stories, behavioral psychology, and years of experience, Rob Berry breaks down the seven key reasons audit plans fall apart.We'll talk about:The dangers of self-centered strategic planning and how to align with organizational objectivesWhy "trusted advisor" is more than a buzzwordHow to combat the planning fallacy and keep your plan aliveThe trap of overengineering your frameworks and keeping objectives simple and actionableThe importance of forward-looking audits over reactive, backward-focused onesCritical communication techniques to inspire, engage, and involve your audit team and stakeholdersEnsuring your strategy is resourced for reality, not just wishful thinkingWhether you're a Chief Audit Executive, audit manager, or aspiring professional, this episode is full of bite-sized insights you can immediately apply to your strategic planning process.Ready to level up your internal audit function?Listen now, share with your team, and use this episode as a discussion guide at your next planning meeting.For more resources, more courses, or to connect with Rob for training and speaking, visit www.thatauditguy.com.Don't forget to subscribe, leave a review, and tell your fellow auditors about the show.

The Institute of Internal Auditors Presents: All Things Internal Audit    In this episode, Scott Madenburg and Sanjay Vadlamani talk trust; and why it's the defining currency of internal audit. From hyper-growth environments to large, mature organizations, they discuss how audit teams can build credibility, and deliver value without slowing the business down. Through real-world use cases; including AI-assisted code reviews, ERP implementations, and building an internal audit function from scratch, they share practical examples of how trust enables earlier insights, stronger controls, and a true seat at the table.   HOST: Scott Madenburg, CIA, CISA, CRMA Founder and President, ARC Hybrid Corporation   GUEST: Sanjay Vadlamani, CIA, CISA, CISM, CRISC Senior Manager, Internal Controls, PayJoy   KEY POINTS: Defining Trust in Internal Audit [00:01:27 – 00:03:17] Holistic Risk and Connected Controls [00:03:55 – 00:07:01] Bridging the Gap Between Audit and Leadership [00:07:15 – 00:10:18] Small vs. Large Organization Trust Challenges [00:11:45 – 00:13:56] High-Growth Tension: Will Audit Slow Us Down? [00:14:14 – 00:16:51] AI-Assisted Code and "Slow Down to Speed Up" [00:17:01 – 00:18:53] Building Trust from Scratch in a Developing Organization [00:19:09 – 00:23:19] Early Insight Through ERP Implementation [00:23:49 – 00:26:02] Rolling Up Sleeves: Creating SOPs and Process Improvements [00:26:25 – 00:28:35] Where Audit Can Undermine Trust [00:29:28 – 00:33:16] Audit Committee Alignment and Expectation Management [00:33:16 – 00:36:44] The Next 6–12 Months: AI Literacy and Critical Thinking [00:37:00 – 00:40:52]   Visit The IIA's website or YouTube channel for related topics and more.   IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Resources: Governance Course: Building Stakeholder Relationships Course: Effective Communication and Conflict Resolution for Internal Auditors GAM 2026   Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

This week on The Audit Podcast, our guest is Aadesh Gandhre, Chief Audit Executive at DTCC. Aadesh shares his perspective on reshaping the perception of internal audit, both inside organizations and across the profession. Drawing on his background in technology and innovation, he explains why internal audit must move away from being seen as a spotlight that hunts for findings and instead become a lighthouse that helps organizations navigate risk and change. We talk about servant leadership and how small cultural shifts, such as celebrating wins, encouraging experimentation, and reframing failure as learning, can unlock innovation within audit teams. Aadesh also walks through how his team is using gamification, internal recognition, and creative engagement to build a stronger audit brand and a more motivated global workforce. Be sure to connect with Aadesh on LinkedIn.   Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   Timecodes:   3:00 – Practical AI use cases 10:30 – The servant leadership mindset 14:55 – Scaling this approach based on team size 16:30 – Building the internal audit brand 26:40 – Bringing innovation into internal audit 33:12 – Making innovation a priority in the office 40:00 – Staying current with tools and resources 44:32 – The freeze–unfreeze–refreeze change management model 49:32 – Final thoughts   *   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.  Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.

Your first 100 days in Internal Audit can define your entire career.In this episode, internal audit storyteller Benjamin Moulder explains why early perception is everything, how “GPA starts at zero,” and what new auditors must do to build credibility and trust.Work ethic, communication, networking, and certifications, we covered it all.

Key emerging risks include cybersecurity (41%) and Generative AI (Gen AI) (35%), both of which present challenges in skill development and retention. The growing reliance on external providers reflects these gaps. In two years, strategic risk has fallen 10% as technological advancements have shifted auditors' attention away from strategy. So what are the top concerns? Tim Lietz, National Practice Leader Internal Audit Risk & Compliance at Jefferson Wells, joins Business Security Weekly to discuss the shifting priorities for internal audit leaders, with technology, business transformation and digitization remaining central amid rising economic uncertainty. This reflects the broader economic challenges and uncertainties that organizations are facing in the current environment. Tim will discuss the need for enhanced skills inAI, cybersecurity and digital transformation and why Internal Audit is increasingly seen as a strategic partner in navigating transformation within their organizations. Segment Resources: - https://www.jeffersonwells.com/en/internal-audit-report-2025 In the leadership and communications segment, Conventional Cybersecurity Won't Protect Your AI, Will Cybersecurity Budgets Increase in 2026?, To Execute a Unified Strategy, Leaders Need to Shadow Each Other, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-431

Key emerging risks include cybersecurity (41%) and Generative AI (Gen AI) (35%), both of which present challenges in skill development and retention. The growing reliance on external providers reflects these gaps. In two years, strategic risk has fallen 10% as technological advancements have shifted auditors' attention away from strategy. So what are the top concerns? Tim Lietz, National Practice Leader Internal Audit Risk & Compliance at Jefferson Wells, joins Business Security Weekly to discuss the shifting priorities for internal audit leaders, with technology, business transformation and digitization remaining central amid rising economic uncertainty. This reflects the broader economic challenges and uncertainties that organizations are facing in the current environment. Tim will discuss the need for enhanced skills inAI, cybersecurity and digital transformation and why Internal Audit is increasingly seen as a strategic partner in navigating transformation within their organizations. Segment Resources: - https://www.jeffersonwells.com/en/internal-audit-report-2025 In the leadership and communications segment, Conventional Cybersecurity Won't Protect Your AI, Will Cybersecurity Budgets Increase in 2026?, To Execute a Unified Strategy, Leaders Need to Shadow Each Other, and more! Show Notes: https://securityweekly.com/bsw-431

Key emerging risks include cybersecurity (41%) and Generative AI (Gen AI) (35%), both of which present challenges in skill development and retention. The growing reliance on external providers reflects these gaps. In two years, strategic risk has fallen 10% as technological advancements have shifted auditors' attention away from strategy. So what are the top concerns? Tim Lietz, National Practice Leader Internal Audit Risk & Compliance at Jefferson Wells, joins Business Security Weekly to discuss the shifting priorities for internal audit leaders, with technology, business transformation and digitization remaining central amid rising economic uncertainty. This reflects the broader economic challenges and uncertainties that organizations are facing in the current environment. Tim will discuss the need for enhanced skills inAI, cybersecurity and digital transformation and why Internal Audit is increasingly seen as a strategic partner in navigating transformation within their organizations. Segment Resources: - https://www.jeffersonwells.com/en/internal-audit-report-2025 In the leadership and communications segment, Conventional Cybersecurity Won't Protect Your AI, Will Cybersecurity Budgets Increase in 2026?, To Execute a Unified Strategy, Leaders Need to Shadow Each Other, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-431

Is your audit department too focused on compliance and missing out on business strategy? In Episode 72 of Audit Bites, host Rob Berry examines why internal auditors often find themselves trapped in the world of checklists and regulatory paperwork—while overlooking opportunities to truly impact business growth.Drawing from three decades of experience, Rob Berry shares real-life stories and actionable strategies auditors can use to break free from the “compliance bubble.” Learn the crucial difference between being a compliance cop and a strategic advisor, why business acumen is key, and how your team can add tangible value to the organization.Key topics covered:Why compliance is comfortable but business strategy is riskierMoving from rule enforcer to valued business partnerHow asking “why” leads to better audit outcomesThe importance of business acumen for auditorsHow reframing audit findings can foster real improvementsYou'll also hear insights on balancing compliance with strategic input, involving internal audit in decision-making, and ways to measure audit success beyond just findings. Plus, Rob Berry introduces Audit Leverage, his new AI-powered tool for internal auditors, and answers listener questions about audit reporting and stakeholder value.Ready to evolve your audit role?Listen now, subscribe, and visit Audit Leverage for next-level AI tools for auditors. For more resources, training, and merch, check out www.thatauditguy.com.

In corporate finance, we often focus on balance sheets, cash flow, and NPV. However, there is an "invisible factor" that dictates whether those numbers hold up: Corporate Culture. While it doesn't have a line item, culture acts as either a precision tool for financial discipline or a toxic liability that destroys enterprise value.In this episode of Corporate Finance Explained, hear how to move culture from the HR office to finance, exploring how trust, psychological safety, and accountability translate into hard dollars and cents.The 4 Financial Levers of CultureA strong culture isn't just about "feeling good" it's a performance multiplier that impacts the bottom line through four direct channels:Productivity & Execution: High-trust cultures move with incredible velocity. By cutting through bureaucratic "sign-off" layers and blame-avoidance, high-trust teams can reduce decision cycle times by up to 40%, accelerating time-to-market.Decision-Making Quality: Healthy cultures encourage "robust debate." When employees feel safe to voice concerns (Psychological Safety), leadership avoids the catastrophic blind spots that lead to failed mergers or flawed product launches.Cost of Human Capital: Employee turnover is a massive recurring expense. Replacing an employee can cost 50% to 150% of their salary, but the hidden costs—lost institutional knowledge and training dips—are even higher.Risk Management & Compliance: Fear-based cultures suppress bad news. A culture that encourages surfacing risks early lowers the company's risk profile, directly reducing the Cost of Capital (the interest rates you pay) demanded by lenders.Culture in Strategy: Accuracy, Discipline, and InnovationCulture fundamentally changes how a company executes its financial planning and growth:Forecast Accuracy: Transparent cultures provide cleaner, earlier data. Surfacing a risk is rewarded, leading to fewer "end-of-quarter" surprises.Cost Discipline: Cultures of high accountability drive Zero-Based Budgeting (ZBB), moving away from "entitlement spending."Innovation: Real innovation requires the safety to fail. If failure is punished, employees only pursue safe, incremental ideas, stifling disruptive growth.Resilience: During market shocks, trust enables rapid cost-cutting and resource reallocation that low-trust competitors cannot match.Case Studies: Triumphs and TragediesNetflix (Success): Their "Freedom & Responsibility" model enabled massive capital shifts from DVDs to streaming via extreme strategic agility.Google (Success): Psychological safety powers an R&D engine that prunes failing projects early, saving billions in "sunk costs."WeWork (Failure): A culture of unchecked exuberance ignored financial controls, erasing tens of billions in paper value.Theranos (Failure): Suppression of dissent led to massive misstatements and total corporate obliteration.The Finance Professional's Cultural DashboardFinance teams should track cultural health using these granular data indicators:Turnover by Function: High churn in Internal Audit or Compliance is a massive red flag. Forecasting Behavior: Are teams "padding" budgets to create easy beats? This is a symptom of low trust. Project Delivery Metrics: Consistent delays in cross-functional handoffs often signal a collaboration problem, not a funding one. Ethical Indicators: Spikes in whistleblower reports or audit findings are leading indicators of catastrophic financial risk.

Head Of Internal Audit at KMRC, Olive Gitau On Capital In The Morning. by Capital FM

This week on The Audit Podcast, there's a new host in town… and it's not me. Eric Wilson steps in and leads a reverse interview where I finally take a turn as the guest.   Be sure to connect with Eric on LinkedIn.   Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   Timecodes: 0:39 – What Made Trent Start The Audit Podcast 4:09 – The Origins of IA on AI 6:09 – Understanding the "How" 10:34 – Trent's Most Memorable Podcast Episodes 13:11 – Where to Listen to The Audit Podcast 14:13 – Skill Sets New Auditors Should Focus On 15:36 – The Biggest Shift in Internal Audit 16:25 – What Keeps Trent Motivated 17:04 – Trent's Green Thumb Challenges 18:56 – Final Thoughts   *   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.  Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.

This week on The Audit Podcast, we're joined by three members of Snowflake's internal audit team: Amrita, Pooja, and Ajay.   Amrita Kapoor, Head of Internal Audit at Snowflake, walks us through how their team is using Snowflake's native tools to build practical analytics and AI solutions. She shares several real use cases their internal audit function has deployed—many of which Snowflake customers can replicate with the tools they already have.   We're also joined by Pooja K., who takes us inside the AI tool she built for the audit team. And here's the part that might surprise you: Pooja has no technical background—no analytics, no IT, no engineering—and yet she built her AI solution in a single evening. She breaks down exactly how she approached it, what she created, and why auditors without a tech background should feel empowered to start experimenting.   Finally, Ajay R., Internal Audit Manager at Snowflake, walks through additional AI and data analytics use cases their team has implemented, highlighting what's possible when internal audit fully leverages Snowflake's capabilities.   Also, be sure to follow us on our social media accounts on LinkedIn, Instagram, and TikTok.   Also be sure to sign up for The Audit Podcast newsletter and to check the full video interview on The Audit Podcast YouTube channel.   Timecodes:   4:38 - Snowflake: Team Introductions 14:08 - Leveraging Data Analytics for ITGCs 20:07 - Testing Termination Controls 24:16 - Strengthening Collaboration Between Internal and External Audit 27:46 - How AI Is Shaping Resources and Hiring 30:17 - Final Thoughts   *   This podcast is brought to you by Greenskies Analytics, the services firm that helps auditors leap-frog up the analytics maturity model. Their approach for launching audit analytics programs with a series of proven quick-win analytics will guarantee the results worthy of the analytics hype.  Whether your audit team needs a data strategy, methodology, governance, literacy, or anything else related to audit and analytics, schedule time with Greenskies Analytics.