March 2026

internalauditnext.com · Curated 4 months ago

Regulatory Watchdog's Retreat: Implications for Internal Audit and Corporate Governance

A significant decline in PCAOB and SEC enforcement actions against auditors, coupled with budget cuts to the PCAOB's enforcement division, signals a shift towards deregulation. This trend, alongside other factors like the rise of AI in financial reporting and a dry accounting talent pipeline, creates a "governance vacuum" that internal audit professionals must recognize and address. The article warns that while some deregulation may be justified, the simultaneous weakening of traditional checks on corporate financial integrity could lead to future governance failures.

News & Blogs · North America Read more

tobyderoche.substack.com · Mar 12, 2026

AI Sovereignty Without Guardrails: A Call for Global Governance and Auditability

This article argues that national AI strategies prioritizing rapid deployment and 'AI sovereignty' without robust, coordinated global governance and auditability risk creating systemic fragility akin to nuclear proliferation. For internal audit and assurance professionals, this highlights the critical need to embed independent validation, transparent model governance, and secure supply chain visibility into AI initiatives. The piece emphasizes that fragmented oversight creates vulnerabilities and that true AI sovereignty hinges on resilience, which can only be achieved through effective governance and international cooperation.

News & Blogs · Global Read more

codewall.ai · Curated 5 months ago

Autonomous AI Agent Hacks McKinsey's Internal AI Platform, Exposing Sensitive Data and Prompt Layer Vulnerabilities

An autonomous AI agent from CodeWall.ai successfully breached McKinsey & Company's internal AI platform, Lilli, gaining full read and write access to its production database within two hours. The breach exposed 46.5 million chat messages, 728,000 files, and 57,000 user accounts, highlighting critical vulnerabilities in the platform's security, particularly concerning the prompt layer. This incident underscores the evolving threat landscape where AI agents can autonomously identify and exploit weaknesses, even in systems developed by organizations with significant security investments.

News & Blogs · Global Read more

swissgrc.com · Curated 5 months ago

GRC 2026: Accountability, Resilience, and Constant Pressure

By 2026, Governance, Risk, and Compliance (GRC) has evolved from a mere obligation to a strategic imperative, driven by AI, evolving regulations, and persistent cyber threats. Organizations face increasing pressure to demonstrate adaptive, intelligent, and globally aligned GRC frameworks. The focus is now on real-time execution, continuous monitoring, and embedded resilience to navigate a complex and volatile operational landscape.

News & Blogs · Global Read more

linkedin.com · Curated 5 months ago

The Future of Audit in 2026: Scaling AI, ESG Mandates, and Real-Time Assurance

The audit profession is at a critical juncture, with 2026 poised to be a transformative year driven by the widespread adoption of advanced technologies and evolving regulatory landscapes. This article highlights three key forces shaping the future of audit: the rise of agentic AI, mandatory ESG assurance, and the shift towards continuous, real-time auditing. These changes will redefine the auditor's role, moving it from traditional compliance to strategic advisory.

News & Blogs · Global Read more

iia.mydigitalpublication.com · Curated 5 months ago

Internal Auditor Magazine: AI Unleashed

Corporate AI adoption is rapidly accelerating, but governance frameworks lag behind. Experts warn that risks like bias, security flaws, and lack of oversight threaten trust. Internal audit teams are emerging as key drivers of responsible AI use—mapping regulations to controls, fostering transparency, and ensuring governance evolves alongside innovation.

News & Blogs · Global Read more

insightcpe.com · Aug 31, 2020 · Curated 5 months ago

Internal Audit's Fraud Detection Gap: A Discrepancy in Expectations vs. Reality

A recent survey reveals a significant disconnect between organizational expectations for internal audit's role in fraud detection and the audit department's actual assumption of this responsibility. While most internal auditors believe their organizations expect them to look for fraud, only a third report their departments actively take responsibility for fraud detection. This highlights a critical area for internal audit functions to address, ensuring alignment with management's expectations and proactively integrating fraud awareness into audit processes.

News & Blogs · Global Read more

insightcpe.com · Aug 19, 2020 · Curated 5 months ago

The Wirecard Scandal: A Stark Reminder for Auditors to 'Trust, But Verify' Independently

The Wirecard fraud serves as a critical case study for internal auditors, highlighting the dangers of over-reliance on internal contacts and the necessity of independent verification. This article underscores the constant tension between maintaining objectivity as an internal auditor and the natural inclination to trust colleagues, urging professionals to cultivate a healthy skepticism and question the source of supporting documentation to prevent similar catastrophic failures.

News & Blogs · Global Read more

insightcpe.com · Feb 17, 2020 · Curated 5 months ago

Internal Audit's Imperative: Challenging and Eliminating Useless Controls

This article challenges internal auditors to critically evaluate the controls they are tasked with auditing, rather than blindly testing those that offer no real value. It highlights the significant financial and operational waste associated with poorly designed or obsolete controls, urging auditors to proactively identify and advocate for the removal of such inefficiencies to enhance organizational effectiveness and resource allocation.

News & Blogs · Global Read more

insightcpe.com · Sep 25, 2019 · Curated 5 months ago

Beyond Accounting: Why Diverse Backgrounds are Crucial for Internal Audit Effectiveness

This article challenges the common practice of staffing internal audit departments almost exclusively with accounting and finance professionals. It argues that this narrow approach creates a "knowledge vacuum" and limits the department's ability to provide comprehensive assurance across an organization's diverse risk landscape. Audit and assurance professionals should consider how a broader range of educational and experiential backgrounds can enhance critical thinking, problem-solving, and the overall scope of audit coverage, moving beyond a sole focus on financial reporting.

News & Blogs · Global Read more