All Things Internal Audit brings you real conversations, practical insights, and expert perspectives from across the profession. Produced by The Institute of Internal Auditors, each episode explores the challenges, innovations, and ideas shaping internal audit today. Views expressed by guests are their own and do not necessarily reflect those of The IIA. Available wherever you get your podcasts. Visit www.theiia.org for more information.
Site
RSS
Apple
Data updated on 10/10/2026
Recent rankings
Latest chart positions across Apple Podcasts and Spotify rankings.
Shared links between episodes and podcasts
Links found in episode descriptions and other podcasts that share them.
The Institute of Internal Auditors Presents: All Things Internal Audit Tech
In this episode, Elizabeth Sullivan talks with Anthony Pugliese and Matt Pearman about Pugliese's experience when he joined a global cybersecurity audit at Barclays. They discuss how the team planned and scoped an audit of a cloud platform used to build and run artificial intelligence, the value of senior leadership involvement, and the importance of balancing structure with flexibility. The conversation also explores cyber resilience, third-party risk, leadership engagement, and translating complex cybersecurity observations into meaningful information for executives and boards.
HOST:
Elizabeth Sullivan, CIA, CRMA, CCSA, Senior Vice President and Chief Risk and Audit Officer, Washington Metropolitan Area Transit Authority
GUESTS:
Anthony Pugliese, CIA, CPA President and CEO, The Institute of Internal Auditors
Matt Pearman, CIA, CISA, CISM, CISSP Chief Internal Auditor for the Chief Operating Officer, Barclays
KEY POINTS:
(00:00) Introduction
(00:37) Goals of the Barclays Cloud AI Platform Audit
(01:34) How a Chapter Event Led to an Invitation
(03:00) Teamwork and Collaboration in Kickoff Sessions
(05:02) Balancing Structure With Flexibility
(07:18) New Hire Development and Hands-On Management
(08:21) Prioritizing Key Controls When Setting Scope
(09:28) Gathering and Challenging Evidence
(10:43) The Value of Curious, Thoughtful Questions
(11:56) Senior Leadership Support Builds Credibility
(13:54) Adding Context Without Impairing Independence
(16:43) Cyber Resilience, Governance, and Third-Party Risk
(19:24) Translating Technical Findings Into Business Implications
(22:05) Showing the Discipline Behind Each Engagement
(24:24) Lessons in Rigor, Relevance, and Common Sense
(27:32) Future IIA Standards, Guidance, and Training
IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources:
The Future of Internal Audit: AI, Automation, and Risk Sensing
Season 4 · Episode 102
Tuesday, September 29, 2026 • Duration 15:38
The Institute of Internal Auditors Presents: All Things Internal Audit
In this episode, Mike Levy talks with Amy Fread about how AI, automation, and business transformation are reshaping internal audit. They discuss how auditors can become involved earlier in organizational change, communicate more effectively with stakeholders, evaluate third-party risk, and identify opportunities for cosourcing. Amy also shares why the profession is moving toward continuous monitoring, risk sensing, and more data-driven assurance.
Quantum Computing Risk: What Internal Auditors Need to Know
Season 4 · Episode 101
Tuesday, September 22, 2026 • Duration 25:59
The Institute of Internal Auditors Presents: All Things Internal Audit
In this episode, Richard Penfil talks with Cory Missimore about how quantum computing could threaten current encryption, why "harvest now, decrypt later" attacks require organizations to prepare today, and how internal auditors can assess quantum readiness. They also discuss cryptographic inventories, third-party exposure, crypto agility, regulatory developments, and practical steps organizations can take to prepare without overreacting.
Three Questions for Assessing Quantum Readiness [09:34–13:11]
Third-Party and Vendor Exposure [13:12–15:01]
Integrating Quantum Risk Into Existing Audits [15:02–17:49]
Warning Signs and Regulatory Developments [17:50–20:27]
How Quantum Computing and AI Could Develop Together [20:28–22:13]
Practical Steps Organizations Can Take Today [22:14–24:42]
Final Thoughts [24:43–25:36]
IIA RELATED CONTENT: Interested in this topic? Visit the links below for more resources:
How Two Students Taught 52 Auditors to Build AI Agents
Season 4 · Episode 100
Tuesday, September 15, 2026 • Duration 25:40
The Institute of Internal Auditors Presents: All Things Internal Audit
In this episode, Alex Rusate talks with Ivan Diaz and Mohamed Maiga, two Utah Valley University students whose curiosity led them to build practical AI tools. They explain how AI agents go beyond chatbots to automate repetitive audit work, why understanding the intended output is essential for validating AI-generated results, and how organizations can begin adopting AI without sacrificing security or human judgment.
HOST:
Alex Rusate, CIA, CISA, CPA, AAIA, CERP, CRMA, CCSA Senior Vice President and Director of Internal Audit, Arrow Financial
GUESTS:
Ivan Diaz Accounting Student, Utah Valley University Mohamed Maiga Cybersecurity Graduate, Utah Valley University
KEY POINTS:
Introduction: Students Teaching Auditors About AI Agents [00:00:00–00:00:35]
Ivan's Introduction to the Internal Audit Conference [00:00:36–00:01:33]
Finding an Audit Process to Automate [00:01:34–00:02:44]
Building an AI Agent Without Technical Experience [00:02:45–00:04:13]
Improving Results Through Iteration and Multiple AI Tools [00:04:14–00:05:47]
The Difference Between Chatbots and AI Agents [00:05:48–00:07:05]
Troubleshooting an Agent and Selecting the Right Model [00:07:06–00:08:20]
Validating AI-Generated Audit Work [00:08:21–00:10:24]
Designing Effective Instructions and Identifying Red Flags [00:10:25–00:11:43]
Protecting Confidential Information When Using AI [00:11:44–00:13:12]
Using Feedback to Strengthen an AI Agent [00:13:13–00:14:54]
Insider Threat Management: Connecting the Dots Before an Incident
Season 3 · Episode 99
Tuesday, September 8, 2026 • Duration 34:04
The Institute of Internal Auditors Presents: All Things Internal Audit
In this episode, Sanjay Vadlamani talks with Yvette Adams about how insider threats extend beyond malicious employees. They discuss negligent, malicious, and compromised insiders, along with the ways AI, remote work, cloud applications, and expanding access have increased organizational risk. The conversation also covers behavior monitoring, employee privacy, access management, offboarding, multidisciplinary risk teams, and the importance of connecting information across organizational silos before a threat becomes an incident.
Yvette Adams, CIA, CRMA Director of Enterprise Risk Management, Zions Bancorporation
KEY POINTS:
Introduction [00:00–00:00:38]
The Three Types of Insider Threats [00:00:39–00:03:19]
How AI, Remote Work, and Cloud Applications Increase Risk [00:03:20–00:06:52]
IIA Membership [00:06:53–00:07:38]
Balancing Employee Monitoring, Privacy, and Trust [00:07:39–00:11:13]
Indicators of Insider Risk [00:11:14–00:15:16]
The FinWise Bank Incident and Offboarding Risk [00:15:17–00:18:48]
Connecting Information Across Organizational Silos [00:18:49–00:22:47]
Five Elements of a Mature Insider Risk Program [00:22:48–00:26:40]
Lessons From the Tesla Insider Threat Case [00:26:41–00:28:56]
Understanding the Insider Threat Life Cycle [00:28:57–00:30:07]
Employee Self-Reporting and Where Organizations Should Start [00:30:08–00:33:40]
Closing [00:33:41–00:33:51]
Interested in this topic? Visit the links below for more resources:
Beyond the Textbook: What Students See in Internal Audit
Season 3 · Episode 98
Tuesday, September 1, 2026 • Duration 26:46
The Institute of Internal Auditors Presents: All Things Internal Audit
In this episode, we hand the mic to seven students from across the US and Canada who are on their way into the internal audit profession, and ask them how they got here, what surprised them, we what they're still figuring out. They talk about what classrooms teach well, what only experience can provide, and why the work carries more weight than they expected.
Ryan Lam — Accounting Student, Southern Alberta Institute of Technology
Moises Gutierrez — Accounting Student, Valdosta State University
Dhvani Shah — Accounting Student, DePaul University
Human Capital Risk in an AI-Driven Workplace
Season 3 · Episode 97
Tuesday, August 25, 2026 • Duration 29:38
The Institute of Internal Auditors Presents: All Things Internal Audit
In this companion episode to Internal Auditor magazine's "Human Capital Risk in an AI World" article, Tom Diamante talks with Manuel London and Richard Chan about how AI can help organizations identify behavioral, cultural, operational, and decision-making risks earlier, while also creating concerns around bias, surveillance, employee trust, and misuse. The conversation also explores internal audit's role in auditing AI, supporting responsible implementation, and helping organizations balance risk mitigation with innovation.
HOST:
Tom Diamante, Ph.D. President and Organizational Psychologist, Diamante Metrics LLC
GUESTS:
Manuel London, Ph.D. Professor of Management, Stony Brook University Richard Chan, Ph.D. Professor, Stony Brook University
KEY POINTS:
Introduction [00:00-00:00:42]
Defining Human Capital Risk and AI's Role [00:00:43-00:04:13]
Bias, Mistrust, and Employee Adoption [00:04:14-00:07:26]
AI Monitoring and Surveillance Concerns [00:07:27-00:10:27]
Internal Audit's Role in AI Governance [00:10:28-00:14:10]
Responsible Deployment, Transparency, and Trust [00:14:11-00:17:32]
AI as a Tool for Positive Risk and Innovation [00:17:33-00:19:24]
ERM as a Secret Weapon: How Internal Audit Can Own the Risk Conversation
Season 3 · Episode 96
Tuesday, August 18, 2026 • Duration 26:08
The Institute of Internal Auditors Presents: All Things Internal Audit
In this episode, Charles King sits down with Shane Negangard to look at enterprise risk management not as a compliance exercise, but as one of the most powerful tools an internal audit leader can have -- if it's built and run the right way. They break down how to establish an ERM program from the ground up, secure executive buy-in, and use ERM as a flywheel for deeper relationships across the organization.
HOST:
Charles King, CIA, CCSA AI and Internal Audit Leader, KPMG
Technology, AI, and Evolving Internal Audit [00:01:26-00:03:46]
Why ERM Is a "Secret Weapon" [00:03:47-00:05:46]
Building Executive Buy-In for ERM [00:05:47-00:07:05]
Making ERM More Than a Compliance Exercise [00:07:06-00:10:08]
Risk Ownership, Trust, and Accountability [00:10:09-00:13:29]
Turning Risk Discussions Into Action [00:13:30-00:15:47]
Using AI to Strengthen ERM [00:15:48-00:18:03]
Scenario Planning and ERM Maturity [00:18:04-00:19:25]
Using ERM to Develop Internal Audit Teams [00:19:26-00:21:10]
Expanding Risk Ownership Across the Organization [00:21:11-00:23:12]
Internal Audit's Role as an ERM Facilitator [00:23:13-00:25:45]
Final Thoughts [00:25:46-00:25:56]
Building an AI Audit Mentor: Lessons from the Front Lines of Agentic AI
Season 3 · Episode 95
Tuesday, August 11, 2026 • Duration 32:32
The Institute of Internal Auditors Presents: All Things Internal Audit
In this companion episode to Internal Auditor magazine's "The NextGen Audit Mentor," Marko Horvat sits down with Sarah Kuhn to explore how she built an AI-powered "audit mentor" to support auditor onboarding, training, and professional development. Kuhn shares how a simple idea to scale knowledge sharing evolved into an agentic AI tool that helps auditors learn, ask better questions, and navigate their careers. The conversation covers practical lessons for implementing AI, managing guardrails, fostering adoption, and ensuring AI enhances rather than replaces auditor judgment.
HOST:
Marko Horvat, CPA, Chief Financial Officer ,ELB Learning
GUEST:
Sarah Kuhn, CIA, CRMA, CCSA Principal Audit Consultant
KEY POINTS:
Introduction [00:00–00:01:30]
Understanding Agentic AI and Identifying the Problem [00:01:31–00:04:27]
Building and Testing the Audit Mentor [00:04:28–00:08:50]
IIA Membership [00:08:51–00:09:27]
Driving Adoption and Building Trust [00:09:28–00:13:02]
Why the Tool Is a Mentor, Not an Answer Bot [00:13:03–00:17:14]
Career Development, Coaching, and Quality Review [00:17:15–00:21:47]
Preserving Auditor Judgment and Preventing Overreliance [00:21:48–00:25:42]
Lessons Learned: Keeping AI Agents Focused [00:25:43–00:28:47]
Prescription for Fraud: The $6 Million Kickback Scheme Hidden in a Job Title
Season 3 · Episode 94
Tuesday, August 4, 2026 • Duration 07:27
All Things Internal Audit: Fraud Podcast "Prescription for Fraud"
Listen to The IIA's Fraud Podcast, brought to you by All Things Internal Audit. The Fraud Podcast provides fictionalized accounts of real-world frauds featured in Internal Auditor magazine's Fraud department.
In this episode, a struggling pharmacy gets an offer that sounds like a lifeline. But behind the paperwork sits a fake employee, a one-letter code, and a scheme that billed federal insurance programs nearly $11 million. Who finally pulled the thread?
Access the full article here. Read the August issue here.
Discover shows related to All Things Internal Audit, based on actual content similarities. Explore podcasts with similar topics, themes, and formats, backed by real data.
