Human Capital Risk: What Every Auditor Should Know

The Institute of Internal Auditors Presents: All Things Internal Audit Extreme weather is no longer a background variable; it's a governance and resilience issue. In this special episode, Christine Janesko shares extended insights from her interviews for Internal Auditor magazine's "Storm Signals" article. Hear expert perspectives on expanding risk lenses, adapting to climate-driven changes, and how internal audit can strengthen preparedness, communication, and continuity in a world of increasingly unpredictable weather. HOSTS: Catie Brown Associate Manager & Producer, Content Development, The IIA Christine Janesko Senior Editor, Internal Auditor Magazine, The IIA GUEST: Rachael Gauthier Meteorologist, Insurance Institute for Business & Home Safety    Hans-Martin Füssel Climate Change Adaptation Expert, European Environment Agency   Paul Morris Retired Public Sector Internal Auditor and U.S. Coast Guard Reserve Officer   Bob Ward Policy and Communications Director, Grantham Research Institute, London School of Economics KEY POINTS: Introduction [00:00–00:00:36] Why Weather Risk Matters for Internal Audit [00:00:36–00:01:01] Severe Storms: The Hidden Driver of Insured Losses [00:01:01–00:02:37] Emerging Hail and Wind Zones Across the U.S. [00:02:37–00:02:59] Extreme Weather as a Governance Issue [00:02:59–00:03:07] Copenhagen as a "Sponge City" Case Study [00:03:07–00:05:35] Communication Failures During Disasters [00:05:35–00:08:31] Correlated Weather Risks and Global Supply Chain Strain [00:08:31–00:10:52] Weather Risk Is Now a Core Resilience Priority [00:10:52–00:11:11] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Storm Signals — Internal Auditor Magazine (December Issue) Knowledge Centers: Environmental, Social, and Governance All Things Internal Audit: Navigating Sustainability Regulations Global Perspectives & Insights: Sustainability Tool: Assessing Sustainability Readiness Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

All Things Internal Audit: Fraud Podcast "Beer Below Deck" Listen to The IIA's Fraud Podcast, brought to you by All Things Internal Audit. The Fraud Podcast provides fictionalized accounts of real-world frauds featured in Internal Auditor magazine's Fraud department.  In this episode, a harmless naval tradition and a single questionable requisition spiral into a costly cover-up. What starts as an attempt to boost morale becomes a lesson in how pressure, rationalization, and weak controls can turn minor misjudgments into major fraud. Access the full article here. Read the December issue here. Interested in more fraud-related topics? Earn CPEs by registering for The IIA's Fraud Analytics for Internal Auditors Certificate, available online and in-person. Chapters: Introduction to the Case (00:00:00) Part 1: The Tradition That Looked Harmless (00:00:24) Part 2: The Cover-Up (00:01:57) Part 3: Reading the Fraud Triangle (00:03:47) Part 4: The Costs (00:05:00) Follow All Things Internal Audit: Apple PodcastsSpotify Youtube LibsynDeezer

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Brad Monterio and Tom McLeod take an unfiltered look at The IIA's future. From transforming learning through AI and simulation to reimagining the Standards and global influence, they discuss what it takes to build a next-generation IIA; one defined by intelligent, integrated assurance, agility, and audacious thinking. HOST: Brad Monterio, Executive Vice President of Learning, Licensing, and Sales, The IIA GUEST: Tom McLeod, Former Chief Audit Executive and Chief Risk Officer; Global Assurance and AI Advisor KEY POINTS: Introduction [00:00–00:00:38] A Pivotal Moment for the Profession [00:00:38–00:03:55] AI's Opportunity and Threat to Internal Audit [00:03:55–00:06:51] Real-Time Assurance and the Death of Sampling [00:08:23–00:10:22] Risk, Trust, and Assurance in a New Era [00:10:22–00:12:02] The Rise of the Algorithm Auditor [00:19:13–00:21:07] Rethinking Pathways Into the Profession [00:21:07–00:23:06] Future of Certifications and Standards [00:23:06–00:26:06] Education Through Simulation [00:26:06–00:30:07] The Three E's: Efficiency, Effectiveness, Education [00:29:54–00:30:35] A Global, Cross-Disciplinary Moment [00:30:35–00:39:57]   Assurance in the Loop [00:41:01–00:43:08] Internal Audit as Ethical Conscience and Risk Educator [00:43:20–00:44:44] Provocation With Purpose [00:48:01–00:49:06] Four Challenges for The IIA [00:49:13–00:53:00] Reimagining The IIA: Intelligent or Integrated Assurance [00:53:11–00:55:15] The Need for Speed, Agility, and Unease [00:56:07–00:59:20] A Call to Personal Curiosity and Courage [01:00:03–01:01:17] Final Reflections: Planting Trees for the Next 100 Years [01:01:17–01:01:53] Closing [01:10:56–01:11:21] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: 2025 RISE Virtual Conference 2026 International Conference – Singapore Internal Auditing Competency Framework™ Knowledge Centers: Artificial Intelligence Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, IIA Quality Services advisors share firsthand experience conducting external quality assessments (EQAs) in alignment with The IIA's Global Internal Audit Standards. From the importance of governance structure and CAE engagement to navigating the Standards, this episode highlights what makes a high-performing audit function and where even seasoned teams can stumble. HOST: Warren Hersh, CIA, CISA, CPA, CFE Director IIA Quality Services   GUESTS: Susan Verghese, CIA, CISA Lead Quality Advisor for IIA Quality Services LLC Keith Kahl, CIA, CPA, CFE, CGMA, CRMA Kahl Professional Services LLC Lead Quality Advisor for IIA Quality Services LLC Hania Abrous-McCarthy, CIA, CPA, CRMA, CGMA, CFE Managing Director at Gladclif LLC Lead Advisor for IIA Quality Services LLC KEY POINTS: Introduction [00:00–00:00:56] Welcome to Tales from the EQA Trenches — Introducing The IIA's Quality Services team.  Common Challenges When Starting an EQA [00:01:07–00:05:36] Susan Verghese discusses why understanding governance structures is critical, how CAE attitudes impact assessment outcomes, and common improvement areas like charters, manuals, and assurance mapping. Governance and Leadership Support Make or Break Audit Quality [00:05:36–00:07:55] Keith Kahl contrasts two real-world audit functions—one struggling under limited support and another thriving with strong audit committee engagement and trust. Opportunities Under the New Global Standards [00:07:55–00:10:56] Hania Abrous-McCarthy highlights how the new Standards give CAEs a chance to reset their functions, refresh independence, and fine-tune internal audit's value proposition. Advice for Organizations Preparing for EQAs [00:10:56–00:11:59] Warren Hersh encourages teams to use the IIA's Standards Knowledge Center and Quality Services webpage for resources like the Conformance Readiness Tool and insights on QAIPs and topical requirements. Closing and Future Episodes [00:11:59–00:12:16] Warren previews more "Tales from the Trenches" stories coming soon from The IIA's Quality Services team. IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: 2025 RISE Virtual Conference Quality Services Standards Knowledge Center Conformance Readiness Assessment Tool Internal Audit QA Checklist Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer

The Institute of Internal Auditors Presents: All Things Internal Audit In the episode, Jami Shine joins Colin May to expose the hidden risks behind payroll and overtime fraud, one of the most underestimated threats to organizational integrity. From toxic workplace cultures to "impossible days" and data-driven red flags, they uncover how emotional intelligence, analytics, and collaboration among internal audit, HR, and leadership can keep timekeeping honest and controls effective. HOST: Jami Shine, CIA, CRMA, CISA, CRISC,  Corporate and IT Audit Manager, QuikTrip    GUEST: Colin May, CFE Professor of Forensic Studies and Criminal Justice, Stevenson University KEY POINTS: Introduction [00:00–00:00:35] Why Payroll Fraud Is on the Rise [00:00:54–00:03:59] Emotional Intelligence in Auditing [00:04:29–00:07:33] Culture as the Root Cause [00:07:33–00:08:10] Real-World Overtime Fraud Cases [00:08:10–00:11:02] Policy Gaps and Long-Standing Practices [00:11:13–00:13:38] Management Oversight and Data Dashboards [00:13:52–00:16:14] Identifying High-Risk Areas [00:17:21–00:18:35] Technology's Role in Prevention [00:19:17–00:21:30] The Importance of Communication [00:21:01–00:23:30] Behavioral Insights and Control Design [00:25:05–00:27:20] Balancing Trust and Surveillance [00:27:20–00:30:00] Technology, AI, and Future Controls [00:30:00–00:31:18] Final Thoughts [00:31:46–00:32:25] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: 2025 RISE Virtual Conference On the Frontlines: Auditing Overtime Fraud Online Exclusive: Fraud in Transit COSO Enterprise Risk Management Certificate Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Jacka and Yvette Adams talk about one of the most important, and often overlooked, risk areas — human capital management. From talent shortages and upskilling to culture, fraud, and AI, they unpack how people strategy connects directly to organizational success. Hear how auditors can assess workforce risks, build better relationships with HR, and ensure that governance around both people and technology keeps pace with change. HOST: Mike Jacka, CIA, CPA Chief Creative Pilot, Flying Pig Audit, Consulting, and Training Solutions    GUEST: Yvette Adams, CIA, CRMA Senior Audit Manager, Zions Bancorporation   KEY POINTS: Introduction [00:00–00:00:39] Defining Human Capital Management [00:00:44–00:01:26] Why People Strategy Matters [00:01:26–00:01:50] Top Workforce Risks and Skill Gaps [00:02:36–00:03:37] Upskilling as a Continuous Practice [00:04:16–00:05:51] Talent Retention and Strategy Alignment [00:05:54–00:07:34] Internal Audit's Role in Talent Strategy [00:07:34–00:08:16] Building Trust with HR and Audit Clients [00:08:23–00:09:37] Hybrid Work and Relationship Building [00:10:07–00:11:03] Common HR and Payroll Frauds [00:11:51–00:13:07] AI Governance and Human Oversight [00:14:01–00:14:35] Auditing Culture, Ethics, and Engagement [00:15:04–00:16:44] Using Surveys and Exit Interviews for Insight [00:15:59–00:16:33] Emerging Workforce Risks [00:19:08–00:20:21] Balancing Technology and Humanity [00:21:02–00:21:40] Values, Incentives, and Ethical Governance [00:23:14–00:25:38] Final Thoughts [00:25:38–00:25:49] THE IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: 2025 RISE Virtual Conference Global Perspectives & Insights: Social/Human Capital/Culture Risk in Focus 2026 Vision 2035 Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer

The Institute of Internal Auditors Presents: All Things Internal Audit Carey Blakeman sits down with Marko Horvat to discuss how audit committees should rethink internal audit's role amid disruption, data proliferation, and rapid technology shifts. From hidden risks and shadow AI to authority versus accountability, they unpack how boards can navigate change, embrace scenario planning, and prepare for the next disruption with confidence. HOST: Carey Blakeman, CPA, CIA Director of Corporate Governance Engagement, The IIA GUEST: Marko Horvat, CPA Senior Vice President of Business Transformation, ELB Learning   KEY POINTS: Introduction [00:00–00:00:31] How Disruption and New Technologies Reshape Governance [00:00:49–00:02:33] Data Exposure Risks in a Digital-First World [00:02:49–00:05:31] Hidden Internal Risks and Blurred Lines of Authority vs. Accountability [00:06:01–00:08:34] Shadow AI and the Need for Clear Guidelines [00:08:34–00:09:56] Internal Audit's Advisory Role [00:09:57–00:12:14] Reframing Risk Avoidance into Risk Navigation [00:12:19–00:16:34] Scenario Planning for Future Disruption [00:16:39–00:18:42] Final Thoughts [00:18:42–00:19:10] THE IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: 2025 RISE Virtual Conference Audit Committee and Board Member Resource Center Governance Resource Center Artificial Intelligence Knowledge Center Vision 2035 Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer

The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Dillon Caldwell and Eric Wilson uncover the psychology behind internal auditing: trust, emotion, bias, credibility, and even burnout. If you've ever wondered why some audits succeed and others stall, this conversation reveals the human side that makes all the difference. HOST: Dillon Caldwell, PhD Manager of Research & Insights, The IIA   GUEST: Eric Wilson, CIA Director of Internal Audit & Chief Audit Executive, Gulfport Energy Corporation KEY POINTS: Introduction [00:00–00:00:26] The Human Side of Internal Auditing [00:00:26–00:02:40] Internal Auditing as an Interpersonal Profession [00:03:08–00:04:44] Emotion and Perception in Auditing [00:04:53–00:06:12] Building Credibility and Managing Defensiveness [00:06:25–00:08:29] Reframing Findings as Opportunities [00:10:11–00:13:34] Balancing Independence with Connection [00:16:48–00:19:41] The Culture Factor [00:21:02–00:21:35] Navigating Identity and Expertise [00:21:38–00:24:42] Challenging Institutional Thinking [00:25:04–00:26:42] Psychological Strain and Burnout in Auditing [00:26:47–00:30:12] Closing Thoughts [00:30:20–00:31:10] THE IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: 2025 Financial Services Exchange Conference Internal Auditor Magazine: "Playing the Long Game" (Eric Wilson's article) Viewpoints: Human Factors Internal Auditor: "From Critic to Collaborator" Webinar: Internal Auditing and Human Personality: Compatibility Mapping Building a Better Auditor: Human-centric Auditing Vision 2035 Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer

The Institute of Internal Auditors Presents: All Things Internal Audit Tech Charles King sits down with Kavin Anburaj from Meta to explore how privacy intersects with internal auditing. They discuss why auditors should care about privacy, key data risks, global regulations, and practical steps for auditing privacy programs. From core privacy principles such as transparency, consent, and data minimization, to lessons learned in cross-functional collaboration, this episode provides auditors with a roadmap for tackling privacy audits in an AI-driven world. HOST: Charles King, CIA, CPA, CFE, CMA AI and Internal Audit Leader, KPMG LLP GUEST: Kavin Anburaj, CISA, CIPP/US Internal Audit Director, Meta  KEY POINTS: Introduction [00:00–00:00:27] Why Privacy Matters for Auditors [00:01:18–00:02:04] Identifying Data with Privacy Implications [00:02:09–00:04:12] Core Privacy Principles [00:05:21–00:09:34] User Rights and Data Traceability [00:09:41–00:12:27] Auditing Privacy Programs [00:13:02–00:16:30] Lessons Learned from Auditing Privacy [00:18:10–00:21:18] Writing with Precision [00:21:22–00:23:18] Learning Resources for Privacy Auditors [00:23:28–00:25:33] Final Thoughts [00:25:42–00:26:40] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Auditing the Cybersecurity Program Certificate Global Perspectives and Insights: Cybersecurity Technology Hub Knowledge Centers: Artificial Intelligence Privacy and Data Protection: Part 3 2025 Financial Services Exchange Conference Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple Podcasts Spotify Libsyn Deezer

The Institute of Internal Auditors Presents: All Things Internal Audit Tech Sponsored by Grant Thornton Cloud security has become a top board-level concern and a permanent fixture on audit plans. In this companion episode to the Global Best Practices' A Roadmap to Auditing Cloud Security, Adam Ross talks with Vik Rai and Aadesh Gandhre about the challenges of auditing in multi-cloud environments, regulatory requirements, and the importance of governance and shared responsibility. They explore skill gaps, third-party risk, frameworks, and practical approaches to building a phased cloud security audit program, helping internal auditors strengthen resilience and provide real value. HOST: Adam Ross, CIA, CISA Partner, Grant Thornton Advisors, LLC GUEST:Vik Rai, CISSP, CISA Managing Director, Grant Thornton Advisors, LLC Aadesh Gandhre, CISA, CAMS (Sanctions), ITIL 4, Certified Cryptocurrency Auditor, Certified in Cybersecurity Chief Audit Executive, DTCC KEY POINTS: Introduction [00:00–00:00:47] Why Cloud Security Matters Now [00:00:51–00:03:10] Board-Level Visibility and Audit's Role [00:03:12–00:05:51] Regulatory Expectations and Frameworks [00:05:54–00:10:28] Skills and Governance at the Board Level [00:11:14–00:13:49] Shared Responsibility and Security Models [00:14:05–00:17:51] Resiliency, Outages, and Accountability [00:17:13–00:18:57] Starting a Cloud Security Audit [00:19:08–00:21:46] Upskilling Auditors for Cloud Environments [00:22:14–00:23:05] Cloud Security Posture Management (CSPM) [00:23:15–00:27:54] Phased and Risk-Based Audit Planning [00:29:07–00:35:42] Final Thoughts [00:37:02–00:40:43] Closing [00:41:28–00:41:46] IIA RELATED CONTENT:  Interested in this topic? Visit the links below for more resources: Global Best Practices: A Roadmap To Auditing Cloud Security Webinar: Hybrid Cloud Security: A Primer for Internal Auditors Tech: Control in the Cloud 2025 Financial Services Exchange Conference   Visit The IIA's website or YouTube channel for related topics and more. Follow All Things Internal Audit: Apple PodcastsSpotify LibsynDeezer