Today

normanmarks.wordpress.com · Jul 13, 2026

The Evolving Role of Risk Management in the IIA's Updated Three Lines Model

The IIA's latest update to the Three Lines Model redefines the second line, prompting a critical re-evaluation of where risk management functions truly fit. This article challenges whether the new definition clarifies or further muddies the waters for internal audit professionals seeking to understand organizational risk oversight structures and their own assurance responsibilities.

News & Blogs · Global Read more

elementalaimatters.substack.com · Jul 13, 2026

AI Governance Washing & Silent AI: Board Oversight Risks

This article highlights the critical risks of "Silent AI" and "Governance Washing" for internal audit and assurance professionals. Silent AI refers to AI-driven risks that are embedded in ordinary operational claims (e.g., copyright, product liability) and only surface as AI risks during a crisis, often leading to board-level liability. Governance washing describes the misrepresentation of AI governance structures as mature and effective when they lack real authority or have not been stress-tested, ultimately exposing boards to significant legal and reputational damage. Internal auditors must assess the true effectiveness of AI governance frameworks, moving beyond mere documentation to evaluate actual impact and decision-making authority.

News & Blogs · Global Read more

Yesterday

ontiveros.me · Curated yesterday

The Prompt Is Not a Security Boundary: Building Robust AI Privacy with Code, Not Just Instructions

This article argues that AI prompts are not sufficient as security boundaries for sensitive data. It details TeachMetrics' approach, which treats the AI model as an untrusted SQL author and implements a multi-layered defense in code to protect PII, even against successful prompt injection attacks. The core principle is that the security boundary must be in the code, not in the AI's instructions.

News & Blogs · Global Read more

richardchambers.com · Jul 12, 2026

From Historians to Navigators: Internal Audit's Essential Leap in the AI Era

This article argues that internal audit must evolve from a historical, hindsight-focused function to a forward-looking navigation system for organizations. With AI automating traditional audit tasks, internal auditors must redefine their value proposition by focusing on proactive risk intelligence, strategic decision support, and uniquely human capabilities to remain indispensable.

News & Blogs · Global Read more

zhaomichelle.substack.com · Jul 12, 2026

AI Model Validation: Beyond the Easy Cases to Uncover True Risks

This article emphasizes that effective AI model validation must go beyond testing easy, in-distribution data. Internal auditors should ensure testing protocols actively seek out model failures in hard cases, across diverse subgroups to detect bias, and under adversarial conditions to assess robustness. This proactive, skeptical approach is crucial for identifying and mitigating significant AI risks before deployment, aligning closely with core auditing principles.

News & Blogs · Global Read more

This week

zhaomichelle.substack.com · Jul 11, 2026

AI Model Validation: The Critical Role of Independent Oversight and Robust Governance

This article emphasizes that the validation stage of AI models is fundamentally an audit function, requiring strict segregation of duties. Internal audit and assurance professionals must ensure that those validating AI models are independent from their developers, possess the necessary technical competence, and are empowered to challenge findings. The piece highlights the importance of documented evidence and predefined acceptance criteria to prevent validation from becoming a mere rubber stamp, drawing parallels with established financial model risk management frameworks.

News & Blogs · Global Read more

radicalcompliance.com · Jul 10, 2026 · Curated 2 days ago

Compliance and Audit Leadership Shifts: Key Appointments and Departures Across Industries

This week's Compliance Jobs Report highlights significant movements in compliance and internal audit leadership across various sectors, including fintech, manufacturing, retail, and government. Audit and assurance professionals should note the increasing demand for specialized compliance roles, the strategic importance of internal audit in navigating organizational changes, and the evolving landscape of risk management as companies adapt to new regulatory challenges and technological advancements.

News & Blogs · Global Read more

radicalcompliance.com · Jul 9, 2026 · Curated 2 days ago

Navigating AI Governance: Aligning Compliance with Strategic Business Objectives

As AI adoption accelerates, internal audit and assurance professionals must shift their focus from AI security to AI governance. This article highlights the critical need for robust governance frameworks to manage AI agent behavior, emphasizing that misbehavior, rather than security breaches, poses a more significant and often overlooked risk. It underscores the importance of aligning AI governance investments with strategic business priorities to secure necessary resources and ensure effective oversight.

News & Blogs · Global Read more

torontoauditor.ca · Curated 2 days ago

Toronto Auditor General's 2026 Follow-up Report: Status of Outstanding Recommendations for City Divisions, Agencies & Corporations

The Toronto Auditor General's 2026 Consolidated Follow-up Report details the implementation status of audit recommendations across City divisions, agencies, and corporations. The report highlights significant financial benefits from implemented recommendations, totaling an estimated $14 million, while also identifying a substantial number of high-priority recommendations that remain outstanding for over five years. It emphasizes the importance of expediting the implementation of these recommendations to maximize value and improve city operations.

News & Blogs · North America Read more

seattletimes.com · Curated 5 days ago

King County Establishes New Inspector General Office to Combat Fraud

King County, Washington, has created a new Office of Inspector General (OIG) to enhance oversight and combat fraud, waste, and abuse within its government operations. This independent body will investigate allegations, conduct audits, and recommend improvements to ensure accountability and efficient use of public funds.

News & Blogs · North America Read more