May 2026

normanmarks.wordpress.com · May 18, 2026

Gartner Survey Highlights Emerging Risks: AI, Geopolitics, and Data Integrity Top Concerns for ERM Leaders

A recent Gartner survey reveals a shift in top emerging risks, with AI-related concerns, information integrity, and geopolitical instability now at the forefront. Internal audit and assurance professionals should take note of these evolving threats, particularly the implications of AI on data quality, decision-making, and workforce preparedness, as they directly impact organizational resilience and strategic objectives.

News & Blogs · Global Read more

insightcpe.com · May 18, 2026

Beyond Compliance: Advanced IT Auditing for True Business Resilience and Disaster Recovery

This article emphasizes that effective business resilience and disaster recovery auditing goes beyond mere documentation and compliance. Internal auditors must assess whether systems, processes, and people can genuinely restore critical services under adverse conditions, focusing on operational capability rather than just the existence of plans. This shift in perspective is crucial for ensuring an organization's ability to withstand and recover from real-world disruptions.

News & Blogs · Global Read more

Blog · Curated 2 months ago

KPMG's AI Risk and Controls Guide: Building Trustworthy AI

KPMG has released an AI Risk and Controls Guide to help organizations manage the risks associated with Artificial Intelligence. This guide, aligned with KPMG's Trusted AI framework, provides a structured approach to understanding AI risks and offers actionable control considerations. It aims to enable the responsible and ethical deployment of AI initiatives, fostering trust and maximizing AI's potential.

Tools & Technology · North America • 2 min read Read more

normanmarks.wordpress.com · May 15, 2026

Navigating Layoff Risks: A Critical Role for Internal Audit and Risk Management

Mass layoffs, while often seen as a cost-cutting measure, introduce significant and often overlooked risks to an organization's operations, security, and long-term viability. This article highlights the critical need for internal audit and risk management professionals to proactively engage with leadership to ensure a risk-based approach to workforce reductions, rather than reactive damage control after decisions have been made.

News & Blogs · Global Read more

internalaudit360.com · May 13, 2026 · Curated 2 months ago

Information Integrity Risk Tops Emerging Concerns for Risk Leaders Amid AI Proliferation

A recent Gartner survey reveals that information integrity risk, driven by the rapid adoption of AI-enabled decision-making and unclear AI transparency standards, has become the leading emerging risk for organizations. This shift highlights the critical need for internal audit and assurance professionals to assess and mitigate risks related to data veracity, AI governance, and the potential for misinformation, alongside addressing new concerns around AI workforce preparedness and persistent geopolitical uncertainties.

News & Blogs · Global Read more

internalaudit360.com · May 14, 2026 · Curated 2 months ago

Breaking the Cycle: Why Audit Findings Persist and How Internal Audit Can Drive Lasting Change

Recurring audit findings are a persistent challenge for internal audit functions, often stemming from deeper systemic issues rather than isolated control failures. This article delves into the root causes—accountability gaps, cultural resistance, and flawed control design—and offers strategies for internal auditors to move beyond simply documenting symptoms to driving sustainable remediation and enhancing organizational governance. Understanding these underlying problems is crucial for internal audit to deliver greater value and impact.

News & Blogs · Global Read more

linkedin.com · Curated 2 months ago

MCPs: An Auditor's Friend or Foe in the Age of AI?

Model Context Protocols (MCPs) are emerging as a new form of API, enabling AI assistants to interact with various systems. This article explores the dual nature of MCPs for internal auditors, highlighting their potential to enhance audit efficiency while also introducing new control surfaces and risks that demand immediate attention and proactive auditing.

News & Blogs · Global Read more

linkedin.com · Curated 2 months ago

Beyond Compliance: Shifting AI GRC to Drive Business Objectives and Decision-Making

Many current AI governance programs prioritize auditor satisfaction over genuinely aiding leadership decisions, often resulting in 'compliance theater.' This article advocates for a paradigm shift, urging organizations to move from abstract risk documentation to an objective-centric approach that directly supports value creation and preservation. By focusing on what the organization aims to achieve, AI GRC can become a powerful decision-support function, providing clear insights into material uncertainties and effective treatment strategies.

News & Blogs · Global Read more

linkedin.com · Curated 2 months ago

The Hidden Risks of Sampling: Why a 5% Sample Missed AED 7.7 Million in Gaps

This article highlights the critical limitations of traditional sampling in internal audits, demonstrating how a 5% sample can fail to detect significant, concentrated issues. The author recounts a real-world scenario where two years of 'clean' audit reports based on sampling masked AED 7.7 million in financial gaps, which were only uncovered through a shift to population testing. It emphasizes that sampling is ineffective when problems are concentrated rather than broadly distributed, urging auditors to consider the probability of detection for specific risk types.

News & Blogs · Global Read more

linkedin.com · Curated 2 months ago

The Planning Fallacy: Why Audit Plans Are Structurally Optimistic and How to Achieve Realism

Audit plans often fail not during execution, but at their inception due to the planning fallacy, a cognitive bias that leads to underestimating task duration and overestimating available time. This article highlights how audit work, being highly dependent, iterative, and judgment-based, is particularly susceptible to this fallacy. It advocates for a shift from precise, optimistic planning to realistic planning that accounts for real-world friction and interruptions.

News & Blogs · Global Read more