All Things Internal Audit

The Institute of Internal Auditors
undefined
Apr 7, 2026 • 25min

From Risk Traditionalist to Risk Strategist: How Internal Audit Must Evolve

The Institute of Internal Auditors Presents: All Things Internal Audit What does it take to move an internal audit function from being risk traditionalists to risk strategists, and what's quietly holding most teams back? In this companion episode to Internal Auditor magazine's "Becoming a Risk Strategist" article, host Erin Banet sits down with Jess Rodgers to examine why the traditional audit model no longer fits the world we're operating in, and what leaders need to unlearn before they can change it. You'll hear three assumptions most audit teams are still running on, a real-world example of transformation done right, and one concrete action CAEs can take in the next six months to start shifting their function's standing with leadership. HOST: Erin Banet, CPA Chief Audit and Risk Officer, Humana GUEST: Jess Rodgers, CIA, CPA Global Internal Audit Leader, EY Vice Chair, Finance, IIA North American Board KEY POINTS: Introduction [00:00:02 - 00:00:25] What Defines a Risk Traditionalist Function [00:00:51 - 00:02:31] Why the Traditional Model No Longer Works [00:02:37 - 00:04:22] Assumptions Internal Audit Must Unlearn [00:04:28 - 00:06:39] The Mindset Shift Required for Transformation [00:06:44 - 00:08:44] A Real-World Transformation Example [00:08:44 - 00:11:10] Where Traditional Approaches Fall Short [00:11:10 - 00:13:36] Measuring Success as a Risk Strategist [00:13:36 - 00:15:27] Decision Velocity in Practice [00:15:27 - 00:17:25] Common Barriers to Transformation [00:17:25 - 00:19:23] One Action Leaders Can Take Now [00:19:23 - 00:21:03] Advice for CAEs Navigating the Transition [00:21:22 - 00:23:06] Driving Change Within Audit Teams [00:23:06 - 00:24:36] Closing Thoughts [00:24:36 - 00:25:05] Visit The IIA's website or YouTube channel for related topics and more. RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Becoming a Risk Strategist — Internal Auditor Magazine (April Issue) Global Internal Audit Standards Vison 2035 GTAG: Continuous Auditing and Monitoring Learning Solutions: Agile Auditing Global Guidance: Developing a Risk-Based Internal Audit Plan, 2nd Edition Learning Solutions: Fundamentals of Risk-based Auditing Become a Certified Internal Auditor (CIA) Risk in Focus 2026 EY Global Risk Transformation Study Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
undefined
Mar 31, 2026 • 37min

Women in Internal Audit: Five Leaders on Voice, Power, and Owning the Room

The Institute of Internal Auditors Presents: All Things Internal Audit Five women. Five careers. Decades of experience across some of the world's largest organizations. They didn't just find their way into this profession. They helped shape it. In this companion episode to Internal Auditor magazine's "Leading the Way" article, five internal audit leaders sit for a conversation that's long overdue: Erin Banet, Doris Myles, Chrysti Ziegler, Dominique Vincenti, and Beili Wong. Together, they cover the careers they built, the rooms they walked into alone, and what they'd tell every woman in this profession today. You'll hear why preparing thoroughly is not the same as having permission to speak. You'll learn what it looks like to walk into a high-stakes conversation as a professional first, not as a woman managing a narrative. You'll hear the bad advice one of them ignored, and what happened when she did. And you'll discover what sponsorship really means when it's the difference between being mentored and having someone actively advocate on your behalf. HOST: Catie Brown Associate Manager & Producer, Content Development, The IIA GUESTS: Erin Banet, CPA Chief Audit and Risk Officer, Humana Chrysti Ziegler, CIA, CRMA, CFE Chief Auditor, Citgo Petroleum Corporation Dominique Vincenti, CIA, CRMA Immediate Past CAE, Uber Board Member, Loft Orbital Beili Wong, CIA, CISA, CPAComptroller General, Ontario Treasury Board SecretariatDirector, Global Guidance, IIA Global Board of Directors Doris Myles, CIA, CPA Director of Internal Audit, St. Jude Children's Research Hospital KEY POINTS: Introduction: Women's Voices in Internal Audit [00:00:02 – 00:01:33] Career Journeys Into Internal Audit [00:02:12 – 00:09:01] Finding Your Voice in High-Stakes Conversations [00:09:01 – 00:12:14] Confidence vs. Permission [00:12:21 – 00:15:23] Owning Expertise and Leading the Narrative [00:15:23 – 00:18:23] Early Career Challenges and Speaking Up [00:18:23 – 00:20:07] Progress of Women in Internal Audit Leadership [00:20:07 – 00:21:24] Redefining Leadership Through Empathy and Relationships [00:21:24 – 00:23:51] Women as Strategic Leaders, Not Just Technicians [00:23:51 – 00:24:57] The Value of Sponsorship vs. Mentorship [00:26:25 – 00:29:21] Creating Opportunities and Building Networks [00:29:21 – 00:31:51] Balancing Career and Personal Life [00:31:51 – 00:33:57] Final Reflections: Passion, Risk, and Owning Your Space [00:34:03 – 00:36:02] Closing Remarks [00:36:02 – 00:36:45] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Leading the Way — Internal Auditor Magazine (April Issue) How Personal Branding Benefits Female Leaders Building a Better Auditor: Celebrating Women Who Paved the Way Internal Auditing Competency Framework Vison 2035 Become a Certified Internal Auditor (CIA) Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
undefined
Mar 24, 2026 • 35min

Communicating with the Board: Turning Audit Insights into Impact

Fábio Pimpão, Director of Internal Audit at Whirlpool and IIA Global Board member with 20+ years in international auditing. He discusses simplifying complex risks into financial, reputational and strategic terms. He shows how storytelling and practice sharpen board presentations. He covers using AI to clarify messaging and tips for building trusted relationships across the organization.
undefined
Mar 17, 2026 • 51min

Why Shadow IT Might Be Your Strongest Control

Bill Bensing, Chief Technologist and co-founder of Attestify, explains how shadow IT often signals experimentation and innovation rather than just risk. He discusses why teams build unofficial solutions, how small experiments validate ideas quickly, and the Exploration‑Validation‑Operation model for moving work into formal operations. The conversation covers safe sandboxes, building innovation communities, and how auditors can support without stifling creativity.
undefined
Mar 10, 2026 • 33min

AI Ethics in Internal Audit

The Institute of Internal Auditors Presents: All Things Internal Audit Tech In this episode, Antonio Cacciapuoti and Alessandro Casarotti unpack the ethical challenges of artificial intelligence in internal audit and anti-financial crime. They discuss AI hallucinations as a risk to be governed, not eliminated, and examine why governance, accountability, and human judgment are central to ethical AI. HOST: Antonio Cacciapuoti, CIA, CAMS Head of Internal Audit, Eurizon Capital Vice President, IIA Luxembourg GUEST: Alessandro Casarotti Director, Forensic & Anti-Financial Crime, PwC Luxembourg KEY POINTS: AI Hallucinations as a Governance Risk (00:00:28 – 00:02:46) How AI Developers Build Ethical Safeguards (00:02:50 – 00:06:10) Human Judgment and Ethical Decision-Making in AI (00:06:14 – 00:09:26) Automation, Accountability, and Ethical Responsibility (00:09:26 – 00:10:49) Global Approaches to AI Regulation (00:10:49 – 00:14:52) Why "Human in the Loop" Is Necessary but Not Sufficient (00:14:52 – 00:19:10) Strengthening Governance and Risk Controls for AI (00:19:10 – 00:21:01) Using AI in Anti-Financial Crime Investigations (00:21:01 – 00:24:12) How Fraudsters Attempt to Bypass AI Safeguards (00:24:12 – 00:27:44) The Future Relationship Between Internal Auditors and AI (00:27:44 – 00:31:17) Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Domain II: Ethics and Professionalism Knowledge Centers: Artificial Intelligence Vison 2035 Become a Certified Internal Auditor (CIA) 2026 Analytics, Automation and AI Virtual Conference Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
undefined
Mar 3, 2026 • 26min

Who Audits the Internal Auditor? Self-Regulation as Internal Audit's Superpower

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Jacka and Tshepo Mofokeng tackle one of the most common questions internal auditors face: Who audits the auditors? They break down how the quality assurance and improvement program (QAIP), professional standards, peer reviews, and self-regulation protect the integrity of the profession. They discuss how quality assurance strengthens credibility with boards, builds trust with stakeholders, and positions internal audit as a strategic advisor. HOST: Mike Jacka, CIA, CPA, CPCU, CLU Chief Creative Pilot at Flying Pig Audit, Consulting, and Training Solutions GUEST: Tshepo Mofokeng, CIA, CRMA CAE, Sefako Makgatho Health Sciences University Global Board of Directors, The IIA KEY POINTS: Introduction: Who Audits the Auditors? [00:00:06–00:01:23] What QAIP Really Means and Why It Matters [00:01:29–00:02:43] The Role of Standards in Professional Legitimacy [00:03:05–00:03:58] Explaining Self-Regulation to the Board vs. Management [00:04:02–00:06:06] Addressing Defensiveness and Educating Peers [00:06:52–00:08:10] Moving from Compliance to Credibility in Quality Reviews [00:08:43–00:11:28] Measuring Impact, Not Just Audit Volume [00:12:01–00:13:39] Marketing Internal Audit's Value Through Quality [00:14:02–00:14:30] Finding Time for Quality Assurance Work [00:14:40–00:15:22] Real-World Example: How Peer Review Strengthened Trust [00:15:24–00:17:48] When Weak Self-Regulation Damages Trust [00:17:52–00:20:48] The Future of QAIP and Vision 2035 [00:21:02–00:23:19] Internal Audit's "Superpower" with the Board [00:23:21–00:25:11] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Quality Assurance and Improvement Program Vison 2035 Become a Certified Internal Auditor (CIA) 2026 Analytics, Automation and AI Virtual Conference Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
undefined
Feb 24, 2026 • 42min

Trust Is the Currency: How Internal Audit Proves Its Value in Fast-Moving Organizations

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Scott Madenburg and Sanjay Vadlamani talk trust; and why it's the defining currency of internal audit. From hyper-growth environments to large, mature organizations, they discuss how audit teams can build credibility, and deliver value without slowing the business down. Through real-world use cases; including AI-assisted code reviews, ERP implementations, and building an internal audit function from scratch, they share practical examples of how trust enables earlier insights, stronger controls, and a true seat at the table. HOST: Scott Madenburg, CIA, CISA, CRMA Founder and President, ARC Hybrid Corporation GUEST: Sanjay Vadlamani, CIA, CISA, CISM, CRISC Senior Manager, Internal Controls, PayJoy KEY POINTS: Defining Trust in Internal Audit [00:01:27 – 00:03:17] Holistic Risk and Connected Controls [00:03:55 – 00:07:01] Bridging the Gap Between Audit and Leadership [00:07:15 – 00:10:18] Small vs. Large Organization Trust Challenges [00:11:45 – 00:13:56] High-Growth Tension: Will Audit Slow Us Down? [00:14:14 – 00:16:51] AI-Assisted Code and "Slow Down to Speed Up" [00:17:01 – 00:18:53] Building Trust from Scratch in a Developing Organization [00:19:09 – 00:23:19] Early Insight Through ERP Implementation [00:23:49 – 00:26:02] Rolling Up Sleeves: Creating SOPs and Process Improvements [00:26:25 – 00:28:35] Where Audit Can Undermine Trust [00:29:28 – 00:33:16] Audit Committee Alignment and Expectation Management [00:33:16 – 00:36:44] The Next 6–12 Months: AI Literacy and Critical Thinking [00:37:00 – 00:40:52] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Resources: Governance Course: Building Stakeholder Relationships Course: Effective Communication and Conflict Resolution for Internal Auditors GAM 2026 Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
undefined
Feb 17, 2026 • 48min

Supply Chain Risk: From Operational Disruptions to Strategic Business Risk

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Adam Ross is joined by Filipe Ribeiro and Julien Perreault to discuss how supply chain risk has evolved into an interconnected, enterprisewide challenge. They discuss where organizations underestimate exposure, how risks quietly accumulate across the value chain, and why internal audit is uniquely positioned to identify blind spots before disruptions escalate. The conversation spans real-world examples from agriculture and highly regulated industries, third-party risk, continuous monitoring, and the growing impact of automation and AI on supply chains. HOST: Adam Ross, CIA, CISA Partner, Grant Thornton Advisors LLC GUEST: Filipe Ribeiro, CIA, CRMA, CFE Group Internal Audit Manager, Aldar Julien Perreault, CPIM, MBA Experienced Manager, Sourcing and Supply Chain Advisory, Grant Thornton Advisors LLC KEY POINTS: Introduction to Modern Supply Chain Risk [00:00:02–00:01:22] From Operational Inconvenience to Strategic Risk [00:01:22–00:02:24] Why Supply Chain Risk Is Now Systemic and Enterprisewide [00:02:32–00:03:11] Where Organizations Commonly Underestimate Exposure [00:03:22–00:04:33] When "Green Dashboards" Mask Emerging Risk [00:03:33–00:05:08] How Informal Workarounds Quietly Accumulate Enterprise Risk [00:05:08–00:05:47] Agricultural Case Study: How Small Upstream Delays Become Major Downstream Failures [00:05:53–00:07:52] Using Continuous Monitoring to Detect Hidden Timing and Dependency Risks [00:07:57–00:12:26] Supply Chain Risk in Remote, Capital-Intensive, and Highly Regulated Environments [00:12:54–00:15:25] Balancing Regulatory Compliance and Operational Efficiency [00:15:42–00:18:55] Procure-to-Pay Risk and the Rise of Operational "Noise" [00:19:14–00:21:01] When Exceptions Become the Normal Operating Model [00:21:01–00:23:15] Third-Party Risk as a Business Resilience Issue [00:25:15–00:27:12] Governance, Speed of Business, and Supplier Ecosystems [00:27:12–00:30:25] Managing Supplier Concentration Risk Without Sacrificing Resilience [00:31:20–00:35:04] Geographic and Cultural Complexity as an Underestimated Risk Driver [00:35:36–00:37:27] How Internal Audit Can Add Value Without Compromising Independence [00:38:35–00:41:29] Emerging Risks: Automation, AI, Data Quality, and Governance Lag [00:41:47–00:46:18] Final Thoughts on the Future of Supply Chain Risk [00:46:29–00:47:05] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Internal Audit Standards Third-Party Topical Requirement Continuous Auditing and Monitoring, 3rd Edition Boardroom: Breaks in the Chain GAM 2026 Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer
undefined
Feb 10, 2026 • 8min

Fraud Podcast: The Fall of the Trusted Leader

All Things Internal Audit: Fraud Podcast "The Fall of the Trusted Leader" Listen to The IIA's Fraud Podcast, brought to you by All Things Internal Audit. The Fraud Podcast provides fictionalized accounts of real-world frauds featured in Internal Auditor magazine's Fraud department. In this episode, a small-town bank built on trust begins to unravel when a persistent internal auditor notices patterns that don't quite add up. What starts as a routine review of commercial lending reveals missing records, suspicious payment activity, and mounting resistance from leadership. As regulators step in, the true scope of the scheme comes into focus, exposing how unchecked authority and weakened controls can bring down even the most trusted institutions. Access the full article here. Read the February issue here. Interested in more fraud-related topics? Earn CPEs by registering for The IIA's Fraud Analytics for Internal Auditors Certificate, available online and in-person. Chapters: Introduction to the Case (00:00:00) Part 1: The Bank Everyone Trusted (00:00:23) Part 2: Patterns Don't Lie (00:01:55) Part 3: Pressure Builds (00:03:07) Part 4: What the Files Revealed (00:04:30) Part 5: The Cost of Trust (00:06:06) Follow All Things Internal Audit: Apple PodcastsSpotify Youtube LibsynDeezer
undefined
Feb 3, 2026 • 42min

Five Years In: Anthony Pugliese on Leading a Global Profession Through Change

The Institute of Internal Auditors Presents: All Things Internal Audit In this special milestone episode, Terry Grafenstine sits down with Anthony Pugliese to reflect on five years of leadership at The IIA. He shares what it's meant to lead a global profession during a period of unprecedented change, from modernizing the Standards and advancing advocacy to strengthening the talent pipeline and navigating cultural complexity across more than 100 countries. The conversation discusses leadership through influence, professional judgment, integrity, and what it truly means to represent an entire profession on the world stage. HOST: Terry Grafenstine, CIA, CPA, CGAP, CISSP, CISA Former Global Chair, The Institute of Internal Auditors GUEST: Anthony Pugliese, CIA, CPA, CGMA, CITP President & CEO, The Institute of Internal Auditors KEY POINTS: Introduction and Five Years of Leadership [00:00:02–00:02:47] What Makes Leading a Global Professional Association Unique [00:03:03–00:06:16] Leading Through Influence, Buy-In, and Indirect Authority [00:06:27–00:08:08] The Weight of Representing an Entire Profession [00:08:15–00:10:17] Building a Truly Global Culture at The IIA [00:10:39–00:13:53] Balancing Legacy With the Changing Needs of the Profession [00:14:01–00:16:10] Advice for New and Emerging Internal Audit Leaders [00:17:01–00:19:11] What Strong Internal Audit Leadership Looks Like Today [00:19:44–00:23:13] What the CEO Role Looks Like Behind the Scenes [00:24:00–00:27:40] Managing Diverse Perspectives Across a Global Profession [00:27:48–00:29:27] How the Pace of Change Has Redefined the Role [00:30:10–00:32:16] Staying Grounded Amid Travel, Pressure, and Responsibility [00:32:23–00:34:06] What Anthony Hopes Members Feel From This Chapter of Leadership [00:34:19–00:36:35] The Most Meaningful Part of Leading The IIA [00:37:26–00:39:47] Final Reflections on the Future of the Profession [00:39:56–00:41:35] Visit The IIA's website or YouTube channel for related topics and more. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Vision 2035 Global Internal Audit Standards About Us: Anthony J. Pugliese Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app