May 2026

iapp.org · Curated 2 months ago

California Issues Record $12.75M CCPA Fine to GM for Unlawful Data Sales

California authorities have levied a record $12.75 million fine against General Motors under the California Consumer Privacy Act (CCPA) for unlawfully collecting and selling drivers' geolocation and behavioral data. The settlement, which includes corrective actions, highlights a growing focus by regulators on data minimization and purpose limitation, particularly within the connected vehicle industry. This action signals an escalation in privacy enforcement and a warning to companies regarding their data handling practices.

News & Blogs · North America Read more

richardchambers.com · May 11, 2026

Rethinking Internal Audit Ratings: From Anxiety to Action

Internal audit ratings, while prevalent and often demanded by stakeholders, frequently create friction and delay rather than driving constructive action. This article advocates for a shift from traditional, often adversarial rating schemes to a more modern approach focused on communicating risk exposure and actionable insights. Audit professionals should consider how their rating methodologies can better serve to illuminate risk and encourage timely remediation, fostering collaboration over conflict.

News & Blogs · Global Read more

linkedin.com · Curated 3 months ago

Making the Invisible Visible: How to Detect Audit Breakdowns Before Rework Escalates

This article argues that audit problems stem from a lack of visibility into workflow breakdowns, not insufficient capacity. It highlights that current audit systems track completion but fail to monitor the 'condition' of work, leading to issues surfacing late and becoming costly rework. The author proposes tracking specific leading indicators like First-Pass Yield, Rework Cycle Count, and Decision Latency to proactively identify and address flow disruptions.

News & Blogs · Global Read more

tobyderoche.substack.com · May 7, 2026 · Curated 3 months ago

The End of Quarterly Reporting: A Catalyst for SOX Transformation and Heightened Enforcement

The potential shift from quarterly to semi-annual reporting, coupled with a dedicated SEC SOX enforcement team, could fundamentally alter the landscape of internal controls and assurance. This change, while seemingly reducing reporting frequency, is likely to increase the duration and impact of undetected control failures, pushing organizations towards more robust, technology-driven, and continuously monitored control environments. Internal audit and SOX professionals must prepare for a future where proactive control reliability and forensic-level scrutiny replace traditional procedural compliance.

News & Blogs · Global Read more

normanmarks.wordpress.com · May 6, 2026 · Curated 3 months ago

COSO's New ERM Guidance: Shifting from Documentation to Decision-Making

COSO's latest guidance, "From Guidance to Action: Exploring Practical Enterprise Risk Management (2026)," emphasizes integrating ERM directly into organizational decision-making processes rather than treating it as a separate compliance function. This shift is crucial for internal audit and assurance professionals, as it redefines ERM's value proposition from merely identifying risks to actively influencing strategic choices, resource allocation, and operational effectiveness. The guidance advocates for a "Department of Know, not No" approach, positioning ERM as a strategic partner that helps leaders make better, more informed decisions.

News & Blogs · Global Read more

richardchambers.com · May 6, 2026 · Curated 3 months ago

The Crow's Nest Advantage: Why Internal Audit Offers an Unparalleled Career Launchpad

Internal Audit Month highlights the unique career advantages of the profession, particularly for new entrants. Internal audit provides a "crow's nest" perspective, offering a comprehensive view of an organization's operations, risks, and governance that is unmatched by other entry-level roles. This broad exposure accelerates business acumen, sharpens critical thinking, and positions auditors to navigate and influence the evolving landscape of risk, including the impact of AI.

News & Blogs · Global Read more

linkedin.com · Curated 3 months ago

Stop Relying on Prior Year Workpapers: Leverage AI for Current-Year Audit Documentation

This article advocates for internal auditors to move away from blindly copying prior year (PY) workpapers, arguing that this practice stifles critical thinking and perpetuates errors. It proposes a four-step process leveraging AI to create fresh, current-year audit documentation, ensuring relevance and accuracy while still using PY for context.

News & Blogs · Global Read more

optro.ai · Curated 3 months ago

Optro Acquires Midship to Build Autonomous GRC System

Optro, a leader in AI-driven GRC solutions, has acquired Midship, an AI-native automation pioneer for SOX compliance. This acquisition aims to accelerate Optro's vision of creating the industry's first autonomous system for GRC, moving internal audit beyond manual processes to strategic, AI-powered automation. The integration will enable auditors to automate tedious tasks, analyze unstructured data, and produce audit-ready results efficiently.

News & Blogs · Global Read more

prnewswire.com · Curated 3 months ago

Optro Acquires AI-Native Midship to Revolutionize Audit with Agentic AI

Optro, formerly AuditBoard, has acquired Midship, an AI-native SOX automation solution, to integrate advanced agentic AI capabilities into its GRC platform. This strategic move aims to automate up to 87% of SOX program management, allowing internal auditors to shift focus from manual tasks to strategic risk analysis. The acquisition addresses the growing pressure on audit teams to achieve more with fewer resources by leveraging AI to streamline repetitive processes.

News & Blogs · Global Read more

linkedin.com · Curated 3 months ago

Internal Audit in 2026: From Control Testing to Continuous Assurance

Internal Audit is undergoing a significant transformation driven by the convergence of AI, cybersecurity shifts, and heightened expectations from boards and regulators. The focus is moving beyond traditional control testing to providing continuous assurance and building confidence in a rapidly evolving digital landscape. This evolution necessitates a proactive approach to emerging risks like AI drift and a shift towards data-driven, AI-enabled assurance.

News & Blogs · Global Read more