Author: Michelle Moodley

Professional Skepticism

Why Professional Skepticism Is Too Important to Leave to Internal Audit Alone

Internal auditors are trained to ask questions. So why do governance failures still occur in organizations with mature internal audit functions, established control frameworks, experienced auditors, risk registers, audit committees, and well-documented assurance processes? The conventional answer is that risks were missed. My research suggests something more uncomfortable. In many Read More

ESG risks are lurking under the surface

Less Hype, More Hazard: The Next Generation of ESG Audits

Environmental, social, and governance issues might have dropped down internal audit’s list of priorities as regulators in the United States have backed away from some of the more ambitious ESG initiatives of recent years. But if the regulatory pressures have eased, and the ESG headlines have faded, the underlying risks Read More

Salo FASB Chair

FAF Selects Next Chair of the Financial Accounting Standards Board

The Financial Accounting Foundation (FAF) today announced the appointment of Hillary H. Salo as the next chair of the Financial Accounting Standards Board (FASB). Her term as chair will begin July 1, 2027, and conclude June 30, 2034. Salo currently serves as vice chair of FASB and chair of the Read More

Internal Audit tech spending to rise

Survey, Internal Audit Use of AI Growing, But Strategic Adoption Lacking

While most of audit leaders report some level of AI use (93 percent), only 38 percent have an AI strategy, according to a survey by Gartner, a business and technology insights company. The poll of 743 audit professionals, taken recently, revealed that generative AI (GenAI) use cases in internal audit Read More

Auditing fairness and bias in AI models

Auditing Fairness and Bias in AI Models

Fairness in artificial intelligence has moved from a technical topic to a governance responsibility. Regulators and investors now expect boards to identify who owns algorithmic risk, to understand how high‑impact models make decisions, and to show that monitoring is continuous. Internal audit is not expected to rebuild models. Its job Read More

The Biggest Mistakes CAEs Make During Internal Audit Planning

Every internal audit function develops an audit plan. The problem is that many planning processes still reflect how internal audit teams operated years ago rather than how leading organizations operate today. Those standouts recognize that risks change and intensify too fast to do audit planning the old way. Yet even Read More

Ending the internship program

Ending an Internship with Purpose: A Guide for Internal Audit Leaders

As summer winds down, so too does the internship season. Over the past several weeks, your team has been enriched by fresh perspectives, eager minds, and renewed energy that has invigorated the internal audit department. For internal audit leaders, the end of a student internship is more than just a Read More

Auditing the incentive plans

Auditing Sales Incentive Programs: Follow the Money—and the Behavior

Few things motivate salespeople like a well-designed incentive plan. Commissions, bonuses, accelerators, sales contests, and President’s Club trips have been driving sales performance for decades. Done well, incentive programs align employee behavior with company strategy, reward high performers, and fuel growth. Done poorly, they can encourage questionable sales practices, create Read More

Three lines of defense update

New Report Finds CCO Compensation on the Rise

BarkerGilmore, a Chief Compliance Officer executive search firm specializing in compliance leadership, has released its 2026 Chief Compliance Officer Compensation Report, providing an in-depth analysis of Chief Compliance Officer compensation, executive mobility, and leadership trends across today’s compliance market. The report examines Chief Compliance Officer compensation data across public, private, Read More

Shadow AI: The Growing Risk Internal Auditors Must Address

Shadow IT has challenged internal auditors for more than a decade. Shadow AI is the same phenomenon, but accelerated, more opaque, and materially riskier. It refers to employees using generative and agentic AI tools without the knowledge or approval of IT, compliance, or risk management. Attorneys pasting contracts into public Read More