March 2026

erpra.net · Curated 4 months ago

Auditors Overemphasize Segregation of Duties, Neglecting Critical Sensitive Access Risks

Auditors are spending too much time on Segregation of Duties (SoD) conflicts and not enough on sensitive access risks, especially in modern ERP systems. Many traditional SoD conflicts are mitigated by effective workflow designs, making their extensive testing redundant. The article advocates for a shift in focus towards identifying and auditing sensitive access risks, which can lead to significant financial fraud independently.

News & Blogs · Global Read more

internalaudit360.com · Mar 19, 2026 · Curated 4 months ago

AuditBoard Rebrands as Optro, Emphasizing AI-Powered GRC for Proactive Risk Management

AuditBoard, a prominent GRC platform provider, has rebranded as Optro, signaling a strategic shift towards leveraging AI for proactive risk foresight. This move highlights the increasing integration of artificial intelligence in governance, risk, and compliance, urging internal audit and assurance professionals to consider how AI-driven tools can enhance their capabilities in identifying and transforming risk into opportunity. The acquisition of FairNow further underscores Optro's commitment to AI Governance, a critical area for auditors navigating the complexities of AI adoption.

News & Blogs · Global Read more

internalaudit360.com · Mar 19, 2026 · Curated 4 months ago

Auditing IRRBB Models: Six Critical Dimensions for Banking Internal Audit

Interest Rate Risk in the Banking Book (IRRBB) is a significant source of financial and capital volatility for banks, impacting both short-term earnings (Net Interest Income) and long-term capital (Economic Value of Equity). Internal audit, as the third line of defense, plays a crucial role in providing assurance that IRRBB models are accurate, reliable, and compliant with regulatory expectations. This article outlines six critical dimensions for internal auditors to effectively assess IRRBB models, ensuring sound governance and robust risk management.

News & Blogs · Global Read more

internalaudit360.com · Mar 19, 2026 · Curated 4 months ago

Quality Management: The Strategic Imperative for Internal Audit's Value and Trust

Chief Audit Executives (CAEs) are under increasing pressure to deliver strategic value beyond mere assurance. This article emphasizes that a robust quality management program is no longer just a compliance requirement but a critical strategic lever for internal audit to maintain relevance, build trust, and position itself as a trusted advisor. It outlines a framework for achieving this, focusing on risk orientation, stakeholder management, resource optimization, and operational excellence, all supported by continuous feedback and improvement.

News & Blogs · Global Read more

internalaudit360.com · Mar 11, 2026 · Curated 4 months ago

North American Internal Audit Functions Face Budget Cuts and Staffing Constraints Amid Rising Expectations

Internal audit functions in North America are grappling with significant challenges as budgets tighten and staffing levels decline, even as their responsibilities expand and the risk landscape grows more complex. This trend, highlighted by the latest North American Pulse of Internal Audit Survey, underscores the critical need for internal audit to strategically align with organizational priorities and demonstrate clear value to secure necessary resources and maintain effectiveness.

News & Blogs · North America Read more

normanmarks.wordpress.com · Mar 19, 2026 · Curated 4 months ago

SOX Scope: Striking the Right Balance Between Effectiveness and Efficiency

Norman Marks highlights the ongoing challenge for internal audit and assurance professionals in defining an effective and efficient scope for Sarbanes-Oxley (SOX) compliance. This brief article prompts a critical self-assessment: is your current SOX scope optimized, or is it unnecessarily broad and resource-intensive? The call to action for a survey suggests a collective effort to benchmark and refine SOX scoping practices, which is crucial for internal auditors seeking to add value without overburdening their organizations.

News & Blogs · Global Read more

tobyderoche.substack.com · Mar 19, 2026 · Curated 4 months ago

AI's Rapid Integration Threatens SOX Compliance: A Call for Evolved Internal Controls

The swift adoption of AI in financial systems, often through vendor-embedded features, is poised to significantly complicate Sarbanes-Oxley (SOX) compliance. Internal audit and assurance professionals must recognize that AI introduces new risks related to data interpretation, fraud, and traceability, demanding a fundamental shift in how controls are designed, documented, and tested to maintain financial reporting reliability.

News & Blogs · Global Read more

thedatawire.com · Curated 4 months ago

Financial Services Leaders Shift Internal Audit Upstream for Responsible AI Deployment

Xin "Cindy" Tu, an audit executive, advocates for a proactive approach to AI governance, urging internal audit to become a strategic partner rather than a post-deployment reviewer. She emphasizes embedding governance from day one, fostering technical literacy among auditors, and establishing continuous training programs to ensure responsible AI innovation. Tu believes this shift is crucial for audit to remain relevant and add significant value in the rapidly evolving technological landscape.

News & Blogs · North America Read more

morningstar.com · Curated 4 months ago

Quarterly Earnings Reports Likely to Persist Even Without Mandate

Despite discussions about potentially eliminating mandatory quarterly earnings reports, a new study suggests that most companies would continue to issue them voluntarily. The research indicates that the benefits of regular reporting, such as maintaining investor confidence and managing market expectations, outweigh the costs for many firms.

News & Blogs · North America Read more

normanmarks.wordpress.com · Mar 16, 2026 · Curated 4 months ago

The Nuance of Risk Quantification: When to Measure and When to Trust Intuition

This article challenges the common assumption that all risks must be quantitatively measured. For internal audit and assurance professionals, understanding when to apply rigorous quantification versus relying on qualitative assessment or even intuition is crucial for efficient and effective risk management. It emphasizes considering both upside potential and downside risk, and aligning quantification efforts with the decision-making context and available resources.

News & Blogs · Global Read more