June 2026

benluthy.com · Jun 20, 2026

Privacy-First GRC Analysis Tool Launched: Honest Assessment Reveals AI's Current Limitations and Strengths

A new, locally-run GRC analysis tool, Lacunae ControlSense, has been released, offering a privacy-first approach to mapping security controls to frameworks like NIST CSF, CIS, and NIST AI RMF. This article provides a transparent look at its development and, crucially, an honest evaluation of its performance, highlighting both its utility as a decision-support tool and the current accuracy limitations of AI in complex GRC tasks. Internal audit and assurance professionals should note the emphasis on local processing for sensitive data and the candid discussion of model accuracy, which offers valuable insights into integrating AI responsibly into GRC workflows.

Tools & Technology · Global Read more

internationalaccountingbulletin.com · Curated 5 weeks ago

KPMG Retracts AI Report After Fabricated Case Studies Exposed

KPMG has withdrawn a global report on artificial intelligence, "Redefining excellence in the age of agentic AI," after several of its featured case studies were found to be inaccurate and potentially generated by AI hallucinations. The report falsely claimed AI applications at major organizations like UBS, NHS Greater Manchester, Swiss Federal Railways, and Transport for London, leading to its removal for review.

News & Blogs · Global Read more

thehackernews.com · Curated 5 weeks ago

Shadow AI's Real Threat: Access Control, Not Just Data Leakage

The primary concern surrounding enterprise AI has shifted from data leakage to access control, as employees rapidly deploy AI agents that can interact with and modify critical business systems. These agents, often created without proper oversight, pose significant risks due to their ability to take actions, use inherited credentials, and operate outside traditional security controls. Organizations must prioritize continuous discovery, ownership, and lifecycle management of these non-human identities to mitigate the growing threat of shadow AI.

News & Blogs · Global Read more

radicalcompliance.com · Jun 19, 2026

Compliance and Audit Leadership Shifts: Key Appointments and Promotions Across Industries

This report details significant personnel changes in compliance, ethics, and audit roles across various sectors, including biotech, manufacturing, healthcare, and finance. Audit and assurance professionals should note the increasing demand for specialized compliance expertise, the strategic elevation of compliance officers to broader business transformation roles, and the ongoing challenges in financial services compliance, particularly concerning AML failures.

News & Blogs · Global Read more

ontiveros.me · May 30, 2026 · Curated 5 weeks ago

Kanban-md: A File-Based Approach to Project Management for AI-Assisted Development

This article introduces kanban-md, a unique project management tool that leverages markdown files within a local directory for task tracking. For audit and assurance professionals, this approach offers enhanced transparency, version control, and a robust audit trail for development projects, especially those involving AI agents. The integration with the codebase and the ability to document decisions directly within task files can significantly improve the traceability and accountability of software development processes.

Tools & Technology · Global Read more

Blog · May 17, 2026 · Curated 5 weeks ago

Anthropic's Comprehensive Guide to Developing Claude AI Skills Released

Anthropic has published a 33-page PDF guide detailing how to build skills for its AI model, Claude. This resource is crucial for audit and assurance professionals looking to leverage AI for enhanced efficiency and deeper insights, as understanding AI's capabilities and development processes is key to effective AI governance and assurance.

Tools & Technology · Global • 2 min read Read more

ontiveros.me · May 6, 2026 · Curated 5 weeks ago

AI as a Design Collaborator: How impeccable.style Enhanced Assurcast's UI/UX

This article explores how an AI-powered design agent, impeccable.style, transformed the UI/UX development process for Assurcast, a platform for internal audit professionals. It highlights the benefits of using AI as an opinionated design collaborator, leading to faster decision-making, improved design consistency, and a more robust documentation of design rationale. For audit and assurance professionals, this demonstrates how AI tools can be leveraged to enhance operational efficiency and decision-making in various business functions, including product development and design, by providing structured feedback and challenging assumptions.

Tools & Technology · Global Read more

ontiveros.me · May 4, 2026 · Curated 5 weeks ago

Introducing SignalKit and Assurcast: An Auditor's Approach to Decentralized Publishing and Community Building

This article introduces SignalKit, a self-hostable content platform, and Assurcast, a specialized platform for audit and assurance professionals. Developed by an auditor, these tools emphasize data ownership, verifiable content origins, and a community-driven approach, offering a robust alternative to traditional social media silos. Audit professionals should note the underlying principles of trust with verification applied to content management and community engagement, providing a model for secure and transparent information sharing.

Social & Media · Global Read more

ontiveros.me · Jun 19, 2026

Beyond 'Human in the Loop': Embedding Humanity into AI Systems for Enhanced Assurance

This article challenges the conventional 'human in the loop' approach to AI governance, arguing that it often leads to approval fatigue and superficial oversight. Instead, it proposes 'humanity in the loop,' where core human values like truthfulness, accountability, and humility are explicitly encoded into AI systems. For audit and assurance professionals, this reframing offers a powerful new perspective on designing AI controls that foster genuine introspection and self-correction within autonomous systems, moving beyond mere human supervision to a more robust, value-driven assurance model.

News & Blogs · Global Read more

radicalcompliance.com · Jun 18, 2026

Bosch Fined $36M for Export Control Violations, Highlighting Critical Compliance Gaps

Bosch has been penalized $36.1 million for violating U.S. export controls by selling advanced software and micro-electronics to Huawei, a sanctioned entity. This case underscores the critical importance of robust, well-resourced trade compliance programs, especially for multinational corporations navigating complex international regulations like the Foreign Direct Product Rule. Internal audit and assurance professionals should examine their organizations' export control frameworks, staffing, and training to prevent similar costly oversights and ensure compliance with evolving global sanctions.

News & Blogs · Global Read more