Laura Ann St. Louis

Dear Auditor, Here goes your Thursday tip. Stay adaptable or risk becoming irrelevant. Let’s face it: the days of rigid, check-the-box auditing are gone. Risks are evolving faster than ever. Regulations change overnight. Tech disruptions are rewriting controls mid-audit. And let’s not forget those delightful “scope creep” surprises 😊 As auditors, adaptability is no longer optional—it’s a survival skill and here are few reasons why you must stay adaptable: 1. Audit plans WILL shift—and that’s okay. 2. Clients’ needs evolve—so must your lens. 3. New risks (AI, cyber, ESG, etc.) demand new thinking. 4. Stakeholder expectations now go beyond control testing to real-time insight. 5. Being adaptable builds trust—because you’re seen as a partner, not a roadblock. You must embrace agile auditing, pivot when the risk landscape shifts. Keep learning; that new tech skill, new tools, new frameworks. Stay close to your stakeholders; listen, adjust, and respond. Reflect after each audit, ask what would I do differently next time? The most effective auditors aren’t the ones who stick rigidly to the plan—they’re the ones who know when, why, and how to adapt without losing sight of the mission. #DearAuditor, how have YOU stayed adaptable; please share your favorite “pivot moment” in your audit journey. Let’s learn from each other. #AuditTip #InternalAudit #Adaptability #AgileAuditing #LifelongLearning #AuditWithImpact #AuditorsThursdayTip #AuditTipsWithFO #FY2025

168

32 Comments

Almost 90 percent of internal audit functions worldwide have a reporting relationship with their audit committees. The vast majority of CAEs also have periodic "private executive sessions" with audit committee members. But a disturbing number report that their sessions aren't always private. In some instances, even their CEOs sit in on the sessions. I explore this unacceptable practice in my latest blog post along with some words of advice on dealing with it. #internalaudit #auditcommittees #executivesessions #corpgov https://lnkd.in/eMmJTmtp

195

23 Comments

As students head back to school, I’m reminded of the critical role The Institute of Internal Auditors Inc. plays in shaping a strong and sustainable talent pipeline for the next generation of internal auditors. The future of our profession depends on the steps we take today to inspire and attract the best and brightest into this rewarding career. In my latest blog post, I highlight new research from the Internal Audit Foundation that explores what students and emerging leaders value in a career—and how they view internal audit. I invite you to take a look and consider how each of us can contribute to building the future of our profession: https://lnkd.in/eti2XQDN #TheIIA #InternalAudit #TalentPipeline #FutureReady #InternalAuditFoundation #FutureOfAudit #HigherEducation

160

8 Comments

🔍 The best Audit Committee meeting I ever attended had… almost no PowerPoint. No 60-page decks. No rattling through findings. Just one crisp page of high-impact issues, a room full of decision-makers, and an open conversation on what really mattered. The focus? 🧠 Strategic risk ⚖️ Tone at the top 🚨 Cultural red flags 💡 Where the committee could actually make a difference The Committee Members were not there to impress — they were there to engage. And the Chair did not just ask “Are we compliant?” He asked: ❓ “Are we asking the right questions — and who is not in this room that should be?” Lesson: - Great Audit Committees do not just review controls. - They shape culture, challenge thinking, and steer behavior. ❓ What do you consider best practice?

429

43 Comments

Who are internal audit’s faces of AI? Editor in Chief Tim McCollum highlights the innovators who are applying artificial intelligence to internal auditing in bold and practical ways. Read “Faces of AI”: https://loom.ly/cBykACY #IaMagIIA #AIinAction

55

2 Comments

Cybersecurity has never been more central to internal audit. In the latest episode of All Things Internal Audit Tech, George Barham, CIA, CISA, CRMA dives into The Institute of Internal Auditors Inc.’s recently released Cybersecurity Topical Requirement—a critical resource for internal auditors navigating evolving cyber risks. With the effective date less than a year away, this episode explores what the requirement means in practice, how to begin preparing now, and why it represents a significant step forward in the profession’s response to cyber threats. I encourage internal audit professionals and leaders to take a few moments to listen. 🔗 https://lnkd.in/eErpjM5n #TheIIA #InternalAudit #Cybersecurity #Assurance #AllThingsInternalAudit

94

5 Comments

Dear Auditor, Here goes your Thursday tip. Ethical Judgment is that inner compass that helps you choose what is right, the internal risk engine guiding decisions when no policy, checklist, or script has the answers. For IT and cybersecurity auditors, it is what helps you say: “This is technically allowed… but is it ethically right?” In a world of data manipulation, shadow IT, insider threats, and AI-driven decisions, auditors are often the last line of defense. Ethical judgment ensures you don’t just audit controls but uphold trust. You can build your ethical judgement & keep it sharp by doing the following and amongst other things: ✅ Understand the impact, because every system you audit affects and impact real people. ✅ Balance tech with integrity, just because it’s encrypted doesn’t mean it’s ethical. ✅ Challenge silence, especially if something smells off, it probably very off. ✅ Stay grounded and keep being knowledgable, your certification is great but your conscience is greater. ✅ Practice situational awareness because ethical lapses often hide in “normal” routines. #DearAuditor, in IT and cybersecurity audit, the toughest bugs aren’t in codes; they’re in human choices and ethical judgment is how you patch them. In uncertain moments, choose the path you’d be proud to defend in a room full of regulators and your mother 😅. #DearAuditor #EthicalJudgement #CybersecurityAudit #ITAudit #DigitalTrust #AuditTip #AuditorsThursdayTip #AuditTipsWithFO #FY2025

92

17 Comments

If you're an audit leader attempting to position yourself for an internal promotion to become CAE, there are two main considerations most CFOs will have when deciding to award you with the position. And these considerations are over and above the technical competence requirements for the role, which are minimum expectations. 1. Does the CFO see you as someone who can carry out the CAE role without them having to resolve disputes and disagreements with you and the business? They want to see that you can raise tough findings, have hard conversations, and still move the business toward resolution, without up-tipping the apple cart. 2. Do they see you as someone who will establish and build relationships with key people within the business? CFOs will form this impression not by observing you, but by what they hear in conversations with other leaders and their direct reports. - "Jeff was a huge help with my team ensuring we addressed this." - "I was going to do that, but Jeff already did it for me." - "Interesting you bring this up, I have chatting with Jeff on how to deal with this as well." If the CFO hears similar endorsements from three, four, or five people over 9–18 months, you’ve positioned yourself as the natural choice for the next CAE. What considerations would you add to this list?

79

21 Comments

Many companies are finding this out too late:   𝑯𝒂𝒗𝒊𝒏𝒈 𝒄𝒐𝒏𝒕𝒓𝒐𝒍𝒔 ≠ 𝒑𝒂𝒔𝒔𝒊𝒏𝒈 𝑰𝑪𝑭𝑹 𝒂𝒖𝒅𝒊𝒕.   The question now is:   ▪️Have your controls been tested for design AND operating effectiveness? ▪️Can they be traced to financial statement risks and COSO domains?   ▪️Is there a documented RCM and evidence of sample-based walkthroughs?   Auditors won’t evaluate intention. They’ll assess execution.   That’s why ICFR reviews — led by cross-functional teams, mapped to materiality, and documented with traceable outputs — are now an essential layer of assurance.   If your internal teams are preparing, but haven’t tested controls beyond narrative mapping — I’d be glad to exchange ideas that might help build confidence before assurance begins.  Yasir Gadit Haziq Neshat Akhtar Saqib Nisar Arshad Gadit - FCA, ACCA Ammar Hussain Kaghdi Kamran Waheed, ACCA Salman Ahmed - ACCA Salman Ahmad Sneha Dantara CA Rutviksinh Darbar Ushna S. Khyati Vora #ICFR #Governance #AuditReadiness #RiskManagement #COSO #PJSC #SCA #FinancialReporting #athGADLANG #Dubai #UAE

53

🚨 New Global Practice Guide Alert! Developing a Risk-Based Internal Audit Plan, 2nd Edition – Updated and aligned with the new Global Internal Audit Standards. Today’s internal auditors must balance strategic foresight with agile responsiveness to keep pace with evolving risks. That’s why The Institute of Internal Auditors Inc. has released an updated edition of its Developing a Risk-Based Internal Audit Plan Global Practice Guide. This refreshed guidance outlines a practical, systematic approach to building and maintaining a risk-based audit plan — from identifying and assessing risks to stakeholder collaboration and strategic prioritization. It’s designed to empower internal auditors to better support decision-making, agility, and long-term resilience. #IIAGuidance #TheIIA #InternalAudit #RiskManagement #GlobalStandards 📥 Download the guide now (members only): https://lnkd.in/e8Fgfse6

804

31 Comments

The dynamic risk radar ________ Most audit leaders are stuck in a comfort trap, the so-called Audit Universe. A static list. A rigid plan. A false sense of control. But in this volatile world, risk doesn’t wait for your calendar. It moves fast. It hides well. It punishes hesitation. The Audit Universe is the illusion of control The Dynamic Risk Radar is control in motion. When risk speeds up, your model must evolve. Throw away the list. Turn on the radar. Stay dangerous. --Mr Strategy.

40

4 Comments

As flexible work becomes the norm, sustaining a strong and ethical corporate culture has never been more challenging — or more essential. The Institute of Internal Auditors Inc.’s latest Tone at the Top examines how shifting workplace dynamics are redefining culture, the questions boards should be asking, and the ways internal audit can provide critical insights to help organizations remain grounded in their values. From deterring fraud to strengthening engagement, culture is far more than an HR concern — it’s a boardroom imperative. And internal audit has a pivotal role in ensuring that culture supports both performance and integrity. Read the full issue at the link below #InternalAudit #Leadership #ToneAtTheTop #TheIIA #Governance

90

4 Comments

New GTAG Released: Auditing Computing Infrastructure & IT Operations The Institute of Internal Auditors (IIA) has published a new Global Technology Audit Guide (GTAG) to support internal auditors in evaluating the IT systems and operations that are critical to organizational performance and data management. This guide provides practical direction to: 1. Understand how IT infrastructure impacts business objectives 2. Identify key components, risks, and controls 3. Reference leading frameworks and industry best practices 4. Plan and deliver effective audit and advisory engagements in this vital area A valuable resource for internal auditors working in today’s complex, technology-driven environments. Read the full guide here: https://lnkd.in/e3ktmz_V Follow Kamran Iqbal CMA, CIA, CISA, CFE, CICA, CC, MBA, FMVA for more insights, updates, and professional resources on internal audit, IT audit, and risk management. #IIA #GTAG #ITAudit #InternalAudit #RiskManagement #TechnologyAudit #TheIIA #Assurance #Governance #CyberRisk

71

1 Comment

Asking a lot of questions when performing an audit doesn't mean you are necessarily a really good internal auditor. But I've never known someone who doesn't ask a lot of questions be really good at internal auditing. Internal Audit Collective #InternalAudit #SOX #ConnectedRisk

75

12 Comments