Beyond the Three Lines: How AI Can Finally Make Combined Assurance Work
The discussion centers on using artificial intelligence to turn the theoretical three‑lines model of combined assurance into a practical, continuously coordinated system. Ash Rajendran explains that most firms operate the first, second and third lines in parallel, not together. IIA research shows only 40 % share risk registers with internal audit and just 25 % use a common risk‑management platform, while each function maintains its own taxonomy and reporting cadence. These silos prevent a holistic view of emerging threats. Rajendran proposes an AI “connective tissue” that ingests audit plans, compliance reports, monitoring alerts and operational metrics, normalizes terminology, and produces a living combined‑assurance map. In a billing‑transaction example, the AI layer correlates customer complaints, a recent code change, a six‑month‑old audit finding and a compliance exception into a single cross‑functional alert, potentially averting a large‑scale incident. If implemented with clear ownership—first line for deployment, second line for performance monitoring, internal audit for independent validation—the approach promises real‑time risk visibility, faster remediation, and stronger governance. However, Rajendran stresses human‑in‑the‑loop review, data‑privacy safeguards, and auditability of AI models to preserve audit independence and regulatory compliance.
Auditing Public Sector Procurement: What’s New in The IIA Guide
The Institute of Internal Auditors released the second‑edition Global Practice Guide “Auditing Procurement in the Public Sector” in December 2025. Hosts Pam Strobl Powers and Mark Marasini walk listeners through its purpose, structure, and how it dovetails with the International Professional Practices...
Ransomware Readiness and the Role of Internal Audit
The episode of All Things Internal Audit Tech focuses on how organizations can strengthen ransomware readiness and the unique role internal audit plays in that effort. Host Adam Ross and guest Vipul Patel discuss common missteps in the early hours...
How a Trusted Employee Stole $200K From a Small Business | All Things Internal Audit
The podcast episode recounts how a long‑time office manager at JR Plastics siphoned more than $200,000 from the family‑run manufacturer when the president had to run payroll alone. The investigation revealed that Smalley held sole administrative rights to the company’s online...
From Risk Traditionalist to Risk Strategist: How Internal Audit Must Evolve
The video argues that internal audit functions must evolve from "risk traditionalists"—those clinging to annual, findings‑centric plans—to "risk strategists" who provide real‑time confidence for board‑level decisions. Host Erin Maney and EY’s Jess Rogers explain why the legacy model, built for...
Women in Internal Audit: Five Leaders on Voice, Power, and Owning the Room
The Institute of Internal Auditors produced a special Women’s History Month episode of All Things Internal Audit, bringing together five senior audit leaders—Kristi Ziegler, Doris Miles, Dominique Vincenti, Erin Benet, and Bailey Wang—to discuss how women can find their voice,...