Episodios

  • Tales from the EQA Trenches

    Tales from the EQA Trenches
    Nov 18 2025
    The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, IIA Quality Services advisors share firsthand experience conducting external quality assessments (EQAs) in alignment with The IIA's Global Internal Audit Standards. From the importance of governance structure and CAE engagement to navigating the Standards, this episode highlights what makes a high-performing audit function and where even seasoned teams can stumble. HOST: Warren Hersh, CIA, CISA, CPA, CFE Director IIA Quality Services GUESTS: Susan Verghese, CIA, CISA Lead Quality Advisor for IIA Quality Services LLC Keith Kahl, CIA, CPA, CFE, CGMA, CRMA Kahl Professional Services LLC Lead Quality Advisor for IIA Quality Services LLC Hania Abrous-McCarthy, CIA, CPA, CRMA, CGMA, CFE Managing Director at Gladclif LLC Lead Advisor for IIA Quality Services LLC KEY POINTS: Introduction [00:00–00:00:56] Welcome to Tales from the EQA Trenches — Introducing The IIA's Quality Services team. Common Challenges When Starting an EQA [00:01:07–00:05:36] Susan Verghese discusses why understanding governance structures is critical, how CAE attitudes impact assessment outcomes, and common improvement areas like charters, manuals, and assurance mapping. Governance and Leadership Support Make or Break Audit Quality [00:05:36–00:07:55] Keith Kahl contrasts two real-world audit functions—one struggling under limited support and another thriving with strong audit committee engagement and trust. Opportunities Under the New Global Standards [00:07:55–00:10:56] Hania Abrous-McCarthy highlights how the new Standards give CAEs a chance to reset their functions, refresh independence, and fine-tune internal audit's value proposition. Advice for Organizations Preparing for EQAs [00:10:56–00:11:59] Warren Hersh encourages teams to use the IIA's Standards Knowledge Center and Quality Services webpage for resources like the Conformance Readiness Tool and insights on QAIPs and topical requirements. Closing and Future Episodes [00:11:59–00:12:16] Warren previews more "Tales from the Trenches" stories coming soon from The IIA's Quality Services team. IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: 2025 RISE Virtual Conference Quality Services Standards Knowledge Center Conformance Readiness Assessment Tool Internal Audit QA Checklist Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
    Más Menos
    13 m
  • Auditing the Hours: When Timekeeping Becomes a Trust Issue

    Auditing the Hours: When Timekeeping Becomes a Trust Issue
    Nov 12 2025

    The Institute of Internal Auditors Presents: All Things Internal Audit

    In the episode, Jami Shine joins Colin May to expose the hidden risks behind payroll and overtime fraud, one of the most underestimated threats to organizational integrity. From toxic workplace cultures to "impossible days" and data-driven red flags, they uncover how emotional intelligence, analytics, and collaboration among internal audit, HR, and leadership can keep timekeeping honest and controls effective.

    HOST: Jami Shine, CIA, CRMA, CISA, CRISC, CC Corporate and IT Audit Manager, QuikTrip GUEST: Colin May, CFE Professor of Forensic Studies and Criminal Justice, Stevenson University

    KEY POINTS:

    • Introduction [00:00–00:00:35]

    • Why Payroll Fraud Is on the Rise [00:00:54–00:03:59]

    • Emotional Intelligence in Auditing [00:04:29–00:07:33]

    • Culture as the Root Cause [00:07:33–00:08:10]

    • Real-World Overtime Fraud Cases [00:08:10–00:11:02]

    • Policy Gaps and Long-Standing Practices [00:11:13–00:13:38]

    • Management Oversight and Data Dashboards [00:13:52–00:16:14]

    • Identifying High-Risk Areas [00:17:21–00:18:35]

    • Technology's Role in Prevention [00:19:17–00:21:30]

    • The Importance of Communication [00:21:01–00:23:30]

    • Behavioral Insights and Control Design [00:25:05–00:27:20]

    • Balancing Trust and Surveillance [00:27:20–00:30:00]

    • Technology, AI, and Future Controls [00:30:00–00:31:18]

    • Final Thoughts [00:31:46–00:32:25]

    THE IIA RELATED CONTENT:
    Interested in this topic? Visit the links below for more resources:

    • 2025 RISE Virtual Conference
    • On the Frontlines: Auditing Overtime Fraud
    • Online Exclusive: Fraud in Transit
    • COSO Enterprise Risk Management Certificate

    Visit The IIA's website or YouTube channel for related topics and more.

    Follow All Things Internal Audit:
    Apple Podcasts
    Spotify
    Libsyn
    Deezer
    Más Menos
    34 m
  • Human Capital Risk: What Every Auditor Should Know

    Human Capital Risk: What Every Auditor Should Know
    Nov 5 2025
    The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Jacka and Yvette Adams talk about one of the most important, and often overlooked, risk areas — human capital management. From talent shortages and upskilling to culture, fraud, and AI, they unpack how people strategy connects directly to organizational success. Hear how auditors can assess workforce risks, build better relationships with HR, and ensure that governance around both people and technology keeps pace with change. HOST: Mike Jacka, CIA, CPA Chief Creative Pilot, Flying Pig Audit, Consulting, and Training Solutions GUEST: Yvette Adams, CIA, CRMA Senior Audit Manager, Zions Bancorporation KEY POINTS: Introduction [00:00–00:00:39] Defining Human Capital Management [00:00:44–00:01:26] Why People Strategy Matters [00:01:26–00:01:50] Top Workforce Risks and Skill Gaps [00:02:36–00:03:37] Upskilling as a Continuous Practice [00:04:16–00:05:51] Talent Retention and Strategy Alignment [00:05:54–00:07:34] Internal Audit's Role in Talent Strategy [00:07:34–00:08:16] Building Trust with HR and Audit Clients [00:08:23–00:09:37] Hybrid Work and Relationship Building [00:10:07–00:11:03] Common HR and Payroll Frauds [00:11:51–00:13:07] AI Governance and Human Oversight [00:14:01–00:14:35] Auditing Culture, Ethics, and Engagement [00:15:04–00:16:44] Using Surveys and Exit Interviews for Insight [00:15:59–00:16:33] Emerging Workforce Risks [00:19:08–00:20:21] Balancing Technology and Humanity [00:21:02–00:21:40] Values, Incentives, and Ethical Governance [00:23:14–00:25:38] Final Thoughts [00:25:38–00:25:49] THE IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: 2025 RISE Virtual Conference Global Perspectives & Insights: Social/Human Capital/Culture Risk in Focus 2026Vision 2035 Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
    Más Menos
    27 m
  • Audit Committees & Internal Audit: Navigating the Age of AI

    Audit Committees & Internal Audit: Navigating the Age of AI
    Oct 29 2025

    The Institute of Internal Auditors Presents: All Things Internal Audit

     Carey Blakeman sits down with Marko Horvat to discuss how audit committees should rethink internal audit's role amid disruption, data proliferation, and rapid technology shifts. From hidden risks and shadow AI to authority versus accountability, they unpack how boards can navigate change, embrace scenario planning, and prepare for the next disruption with confidence.

    HOST:
    Carey Blakeman, CPA, CIA
    Director of Corporate Governance Engagement, The IIA

    GUEST:
    Marko Horvat, CPA
    Senior Vice President of Business Transformation, ELB Learning

    KEY POINTS:

    • Introduction [00:00–00:00:31]

    • How Disruption and New Technologies Reshape Governance [00:00:49–00:02:33]

    • Data Exposure Risks in a Digital-First World [00:02:49–00:05:31]

    • Hidden Internal Risks and Blurred Lines of Authority vs. Accountability [00:06:01–00:08:34]

    • Shadow AI and the Need for Clear Guidelines [00:08:34–00:09:56]

    • Internal Audit's Advisory Role [00:09:57–00:12:14]

    • Reframing Risk Avoidance into Risk Navigation [00:12:19–00:16:34]

    • Scenario Planning for Future Disruption [00:16:39–00:18:42]

    • Final Thoughts [00:18:42–00:19:10]

    THE IIA RELATED CONTENT:
    Interested in this topic? Visit the links below for more resources:

    • 2025 RISE Virtual Conference
    • Audit Committee and Board Member Resource Center
    • Governance Resource Center
    • Artificial Intelligence Knowledge Center
    • Vision 2035

    Visit The IIA's website or YouTube channel for related topics and more.

    Follow All Things Internal Audit:
    Apple Podcasts
    Spotify
    Libsyn
    Deezer
    Más Menos
    20 m
  • The Psychology of Auditing: Human Behavior Behind the Findings

    The Psychology of Auditing: Human Behavior Behind the Findings
    Oct 21 2025

    The Institute of Internal Auditors Presents: All Things Internal Audit

    In this episode, Dillon Caldwell and Eric Wilson uncover the psychology behind internal auditing: trust, emotion, bias, credibility, and even burnout. If you've ever wondered why some audits succeed and others stall, this conversation reveals the human side that makes all the difference.

    HOST:

    Dillon Caldwell, PhD
    Manager of Research & Insights, The IIA GUEST:

     Eric Wilson, CIA
    Director of Internal Audit & Chief Audit Executive, Gulfport Energy Corporation

    KEY POINTS:

    • Introduction [00:00–00:00:26]

    • The Human Side of Internal Auditing [00:00:26–00:02:40]

    • Internal Auditing as an Interpersonal Profession [00:03:08–00:04:44]

    • Emotion and Perception in Auditing [00:04:53–00:06:12]

    • Building Credibility and Managing Defensiveness [00:06:25–00:08:29]

    • Reframing Findings as Opportunities [00:10:11–00:13:34]

    • Balancing Independence with Connection [00:16:48–00:19:41]

    • The Culture Factor [00:21:02–00:21:35]

    • Navigating Identity and Expertise [00:21:38–00:24:42]

    • Challenging Institutional Thinking [00:25:04–00:26:42]

    • Psychological Strain and Burnout in Auditing [00:26:47–00:30:12]

    • Closing Thoughts [00:30:20–00:31:10]

    THE IIA RELATED CONTENT:
    Interested in this topic? Visit the links below for more resources:

    • 2025 Financial Services Exchange Conference
    • Internal Auditor Magazine: "Playing the Long Game" (Eric Wilson's article)
    • Viewpoints: Human Factors
    • Internal Auditor: "From Critic to Collaborator"
    • Webinar: Internal Auditing and Human Personality: Compatibility Mapping
    • Building a Better Auditor: Human-centric Auditing
    • Vision 2035

    Visit The IIA's website or YouTube channel for related topics and more.

    Follow All Things Internal Audit:
    Apple Podcasts
    Spotify
    Libsyn
    Deezer
    Más Menos
    32 m
  • Auditing Privacy in the Age of AI

    Auditing Privacy in the Age of AI
    Oct 16 2025

    The Institute of Internal Auditors Presents: All Things Internal Audit Tech

    Charles King sits down with Kavin Anburaj from Meta to explore how privacy intersects with internal auditing. They discuss why auditors should care about privacy, key data risks, global regulations, and practical steps for auditing privacy programs. From core privacy principles such as transparency, consent, and data minimization, to lessons learned in cross-functional collaboration, this episode provides auditors with a roadmap for tackling privacy audits in an AI-driven world.

    HOST:

    Charles King, CIA, CPA, CFE, CMA
    AI and Internal Audit Leader, KPMG LLP

    GUEST:

    Kavin Anburaj, CISA, CIPP/US
    Internal Audit Director, Meta

    KEY POINTS:

    • Introduction [00:00–00:00:27]

    • Why Privacy Matters for Auditors [00:01:18–00:02:04]

    • Identifying Data with Privacy Implications [00:02:09–00:04:12]

    • Core Privacy Principles [00:05:21–00:09:34]

    • User Rights and Data Traceability [00:09:41–00:12:27]

    • Auditing Privacy Programs [00:13:02–00:16:30]

    • Lessons Learned from Auditing Privacy [00:18:10–00:21:18]

    • Writing with Precision [00:21:22–00:23:18]

    • Learning Resources for Privacy Auditors [00:23:28–00:25:33]

    • Final Thoughts [00:25:42–00:26:40]

    IIA RELATED CONTENT:
    Interested in this topic? Visit the links below for more resources:

    • Auditing the Cybersecurity Program Certificate
    • Global Perspectives and Insights: Cybersecurity
    • Technology Hub
    • Knowledge Centers: Artificial Intelligence
    • Privacy and Data Protection: Part 3
    • 2025 Financial Services Exchange Conference

    Visit The IIA's website or YouTube channel for related topics and more.

    Follow All Things Internal Audit:

    Apple Podcasts
    Spotify
    Libsyn
    Deezer
    Más Menos
    28 m
  • Auditing the Cloud: Risks, Frameworks, and Real Value

    Auditing the Cloud: Risks, Frameworks, and Real Value
    Oct 9 2025
    The Institute of Internal Auditors Presents: All Things Internal Audit Tech Sponsored by Grant Thornton Cloud security has become a top board-level concern and a permanent fixture on audit plans. In this companion episode to the Global Best Practices' A Roadmap to Auditing Cloud Security, Adam Ross talks with Vik Rai and Aadesh Gandhre about the challenges of auditing in multi-cloud environments, regulatory requirements, and the importance of governance and shared responsibility. They explore skill gaps, third-party risk, frameworks, and practical approaches to building a phased cloud security audit program, helping internal auditors strengthen resilience and provide real value. HOST: Adam Ross, CIA, CISA Partner, Grant Thornton Advisors, LLC GUEST:Vik Rai, CISSP, CISA Managing Director, Grant Thornton Advisors, LLC Aadesh Gandhre, CISA, CAMS (Sanctions), ITIL 4, Certified Cryptocurrency Auditor, Certified in Cybersecurity Chief Audit Executive, DTCC KEY POINTS: Introduction [00:00–00:00:47] Why Cloud Security Matters Now [00:00:51–00:03:10] Board-Level Visibility and Audit's Role [00:03:12–00:05:51] Regulatory Expectations and Frameworks [00:05:54–00:10:28] Skills and Governance at the Board Level [00:11:14–00:13:49] Shared Responsibility and Security Models [00:14:05–00:17:51] Resiliency, Outages, and Accountability [00:17:13–00:18:57] Starting a Cloud Security Audit [00:19:08–00:21:46] Upskilling Auditors for Cloud Environments [00:22:14–00:23:05] Cloud Security Posture Management (CSPM) [00:23:15–00:27:54] Phased and Risk-Based Audit Planning [00:29:07–00:35:42] Final Thoughts [00:37:02–00:40:43] Closing [00:41:28–00:41:46] IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources: Global Best Practices: A Roadmap To Auditing Cloud Security Webinar: Hybrid Cloud Security: A Primer for Internal Auditors Tech: Control in the Cloud 2025 Financial Services Exchange Conference Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer
    Más Menos
    42 m
  • Fraud Podcast: A Fraudster's Second Act

    Fraud Podcast: A Fraudster's Second Act
    Oct 1 2025

    All Things Internal Audit: Fraud Podcast
    "A Fraudster's Second Act"

    Listen to The IIA's Fraud Podcast, brought to you by All Things Internal Audit. The Fraud Podcast provides fictionalized accounts of real-world frauds featured in Internal Auditor magazine's Fraud department.

    In this episode, a once-trusted employee reemerges after prison with the same charm that once won over colleagues. But beneath the polished image, new schemes quietly unfold, raising the question: how far can fraud go before strong controls bring it to light?

    Access the full article here.
    Read the October issue here.

    Interested in more fraud-related topics? Earn CPEs by registering for The IIA's Fraud Analytics for Internal Auditors Certificate, available online and in-person.

    Chapters:

    • Introduction to the Case (00:00:00)
    • Part 1: The Generous Colleague (00:00:26)
    • Part 2: A Fresh Start (00:02:22)
    • Part 3: The Payroll Play (00:04:05)
    • Part 4: Caught in the Net (00:05:28)

    Follow All Things Internal Audit:

    Apple Podcasts
    Spotify
    Youtube
    Libsyn
    Deezer
    Más Menos
    7 m