The Perils of "Insight Theatre": Why Process is the Evidentiary Floor of Assurance
Internal audit is shifting from "Control Theatre" to "Decision Support," but this risks creating "Insight Theatre" where impact is prioritized over rigorous evidentiary processes. The article warns against Goodhart's Law, where focusing on impact as a target can degrade the quality of audit methodology. It emphasizes that assurance provides verified certainty based on methodology, not just unverified opinions, and advocates for methodological efficiency through technology rather than abandoning procedural rigor.
The Shift from Control Theatre to Insight Theatre
The internal audit profession is currently undergoing a significant transformation, moving away from what is termed "Control Theatre" – a superficial, checkbox-driven approach – towards becoming a source of "Decision Support" for management. While this evolution aims to provide more valuable insights, a dangerous trend is emerging: the substandardization of audit activities in pursuit of perceived impact. This shift can lead to "Insight Theatre," where audit reports resemble consulting decks with compelling narratives, but lack a robust, verified evidentiary foundation.
The Goodhart's Law Trap and Epistemological Requirements
The article highlights Goodhart's Law, explaining that when "impact" becomes the primary metric for an audit team, the incentive structure can inadvertently lead auditors to prioritize high-visibility findings over thorough, "unsexy" work like deep testing and full-population data profiling. This compromises the fundamental epistemological requirement of internal audit in mature markets: providing "Verified Certainty." Unlike consulting firms that sell insights, internal audit's unique value lies in its ability to deliver a statement of probability based on a standardized, repeatable, and independent methodology. Degrading this methodology to chase a more impactful narrative fundamentally alters the product from assurance to unverified opinion.
Assurance vs. Advisory: Maintaining Rigor
To avoid overcorrection, it's crucial to recognize that internal audit operates on a spectrum between advisory and assurance. Advisory focuses on future possibilities and is narrative-led, while assurance is about present reality and is evidence-led. Substandardization occurs when internal audit attempts to deliver advisory-level narratives with assurance-level budgets, leading to shortcuts in testing that undermine its unique value proposition. The article argues that impact should be a byproduct of rigorous audit, not a manufactured target. It suggests leveraging technology like continuous auditing, AI-driven anomaly detection, and process mining to make thorough testing more efficient, ensuring that 100% population testing becomes the norm. This methodological efficiency enables auditors to be more courageous in their insights, as they are built on a data-validated reality, thereby defending the "audit" in internal audit and preserving its objectivity and relevance.
Read more
