Insights
Model Drift: When Good Models Go Bad
A model can degrade after deployment. What auditors should test around monitoring, thresholds, change triggers, responses, and evidence.
ISO/IEC 42005: AI Impact Assessments Explained
ISO/IEC 42005 turns AI impact assessment into a documented process linking affected people, governance evidence, risk decisions, and audit scope.
NIST AI RMF for Internal Auditors: Turning Four Functions into Assurance Questions
How internal auditors can turn Govern, Map, Measure, and Manage into practical assurance questions, evidence requests, and audit procedures.
Prompt Injection: What Internal Auditors Should Know
Prompt injection can turn untrusted content into instructions. This guide explains direct and indirect attacks, business impact, controls, and audit evidence.
When Not to Automate an Audit Task
Automation does not always improve an audit. Six criteria help decide when to automate, when to augment the auditor, and when to keep work human-led.
The AI Skills Internal Audit Functions Need
A practical model for defining AI literacy, advanced practitioner skills, specialist access, and learning pathways for Internal Audit.