Author: IA360 Staff

Cybersecurity programs

The IIA Releases Cybersecurity ‘Topical Requirement’

The Institute of Internal Auditors has released the Cybersecurity Topical Requirement, the first of several “Topical Requirements” to be published this year. Incorporating feedback from global practitioners and stakeholders, the Cybersecurity Topical Requirement provides a baseline approach to assessing the design and implementation of cybersecurity governance, risk management and control Read More

Crafting Memorable Internal Audit Reports with Storytelling Techniques

One of the most exciting aspects of parenthood is passing down the stories and books that shaped our childhoods. With little effort, we often recall our favorite stories and their memorable plots—like the heartwarming lessons from Charlotte’s Web or the playful risks in The Cat in the Hat. But consider Read More

CAEs face board scrutiny

Chief Audit Execs Will Face Increased Board Scrutiny in 2025

W ith the rise of AI and regulatory uncertainty, Chief Audit Executives (CAEs) are expected to face mounting pressure from the board to address emerging risks and strengthen mitigation efforts. According to Gartner, a technological research and consulting firm, as AI has emerged as both a valuable business asset and Read More

Compliance

The IIA’s New Global Standards Take Effect

The Institute of Internal Auditors’ new Global Internal Audit Standards took effect on January 9, ushering in a new era in the practice of internal auditing. The Standards were first released in January of 2024 as part of the broader International Professional Practices Framework Evolution project. They provide a basis for Read More

Whom should the CAE report to?

Reporting Lines: Whom Should Internal Audit Leaders Call Boss?

GUEST BLOG POST Internal audit plays a unique role in the modern organization. While its leader, the chief audit executive, is usually part of the executive team, it is also expected to play an oversight role in assuring that functions and processes are performing as they should. That oversight role Read More

Internal audit and cloud computing

What Internal Audit Needs to Know About Cloud Computing

Cloud computing, of course, is not a recent development. Organizations have been increasingly putting more and more of their sensitive data in the “cloud” for the last several years. More recently, though, many organizations are relying on it almost exclusively for their computing needs, entrusting the cloud not only with Read More

Determining What Rises to the Level of an Internal Audit Observation

GUEST BLOG POST During a recent audit, I encountered a conflict with a senior internal audit team member regarding the finalization of an audit observation. This team member was keen to incorporate insights from a market survey and customer feedback into our report, specifically calling out concerns over the company’s Read More

Internal Audit tech spending to rise

Report: Internal Audit Could Double Tech Spend by 2027

A new report predicts that assurance and compliance functions could double the amount they spend on new technology by 2027. According to the research, issued by Gartner Inc., generative AI, machine learning, and large language models will fuel a surge in spending by compliance, risk management, and internal audit functions. Read More