Author: Joseph McCafferty

Bizarre true life stories

Bizarre Stories from Real-Life Internal Auditors

Internal auditors spend their days examining risks, testing controls, and investigating anything that doesn’t look quite right. Sometimes they uncover sophisticated fraud. Other times, the details are so strange that the stories stay with them for years. From a $9 improper expense filing that cost someone a job to 150 Read More

Optro Launches Domain-Trained AI Agents for Audit, Compliance, and Risk

Optro, an AI-powered GRC platform, has announced the launch of an expanded set of autonomous agentic AI products to empower risk teams across the enterprise. Unveiled at Optro’s annual user conference, CRX, the announcement marks the formal arrival of it’s GRC Intelligence tool, which the company calls, “the next evolution Read More

Communications governance

Poor Communications Governance: The Major Risk Hiding in Plain Sight

The scope of regulatory attention is expanding and moving well beyond incident response. Auditors, regulators, and investigators are increasingly focused on how organizations govern day-to-day business communication, not just what happened when something went wrong. It is a move that has real implications for legal and compliance teams, and for Read More

When ‘Working Scared’ Breaks Your Risk Assessment

GUEST BLOG POST: Internal audit talks a lot about risk assessment quality, coverage, methodology, data sources, and scoring, but far less about the human conditions that shape what risks even show up on the table. One of those conditions is psychological safety: whether people feel safe enough to say, “Something Read More

Collaborating with finance on AI

How AI Is Reshaping Collaboration Between Finance and Internal Audit

An effective internal financial audit relies on clear communication and collaboration between auditors and finance teams. However, traditional processes, rooted in manual data collection and sampling, risk inconsistencies and retroactive review processes. With governed, reconciled data, finance and audit teams can identify risk signals earlier and support stronger control processes. Read More

Audit management software

Survey: 84 Percent of Audit Functions Have Adopted Audit Management Software

While 84 percent of audit functions have adopted audit management software (AMS), satisfaction varies considerably across key capabilities, according to Gartner, a business and technology insights company. Speaking at the Gartner Enterprise Risk, Audit & Compliance Conference taking place in Grapevine today, James Bourke, Director Analyst, Research, in the Gartner Read More

Workiva Advances Regulatory Work with AI Innovation

Workiva, an audit-ready platform for trust, transparency, and accountability, unveiled dozens of new product and platform innovations at Amplify 2026, the company’s annual conference attended by thousands of finance, accounting, sustainability, risk, and compliance leaders. As part of those innovations, Workiva introduced Agent Studio, a platform capability that allows users Read More

Kyrgyzstan

The IIA Expands to Kyrgyzstan

The Institute of Internal Auditors has announced that Kyrgyz Republic (Kyrgyzstan) has joined its global federation as a national institute, strengthening the profession’s international reach and reinforcing ongoing efforts to advance internal audit worldwide. As an approved national institute, IIA-Kyrgyz Republic gains the legal framework and formal structure to support Read More

Professional Skepticism

Why Professional Skepticism Is Too Important to Leave to Internal Audit Alone

Internal auditors are trained to ask questions. So why do governance failures still occur in organizations with mature internal audit functions, established control frameworks, experienced auditors, risk registers, audit committees, and well-documented assurance processes? The conventional answer is that risks were missed. My research suggests something more uncomfortable. In many Read More

ESG risks are lurking under the surface

Less Hype, More Hazard: The Next Generation of ESG Audits

Environmental, social, and governance issues might have dropped down internal audit’s list of priorities as regulators in the United States have backed away from some of the more ambitious ESG initiatives of recent years. But if the regulatory pressures have eased, and the ESG headlines have faded, the underlying risks Read More