Understanding Domain I of the IIA Global Internal Audit Standards The Institute of Internal Auditors (IIA) fundamentally strengthened the way the profession explains its role with the introduction of the 2024 Global Internal Audit Standards, effective January 9, 2025. At the beginning of these Standards is Domain I: Purpose of Internal Auditing. This domain addresses a question that every Chief Audit Executive (CAE), internal auditor, Audit Committee member, and senior execut

How Auditors Use Statistical Sampling to Estimate Monetary Misstatements and Evaluate Financial Statement Balances Auditors rarely have the resources to examine every transaction in a large financial population. A company may have 100,000 inventory items, 50,000 customer invoices, or millions of dollars in accounts receivable. The auditor must determine how to obtain sufficient appropriate evidence without examining every item. Variables sampling provides a statistical method

Understanding the Five Components and 17 Principles of the COSO Internal Control—Integrated Framework Effective internal control is fundamental to organizational governance, reliable financial reporting, regulatory compliance, and operational performance. However, an effective internal control system involves much more than policies, approval signatures, reconciliations, and segregation of duties. It requires a coordinated framework that establishes accountability, identifies

A Practical Guide to Building Risk-Based Internal Audit Plans and Effective Audit Programs An effective internal audit department does not begin its work by selecting transactions or completing audit checklists. It begins by understanding the organization's objectives, identifying significant risks, and determining where independent assurance can provide the greatest value. The challenge is converting that understanding into a practical audit plan and then into specific audit

Understanding the Quality, Source, Relevance, and Reliability of Audit Evidence Under PCAOB AS 1105 Audit conclusions are only as strong as the evidence supporting them. An auditor may perform extensive testing, complete hundreds of workpapers, and document numerous procedures. However, if the underlying evidence is unreliable, the audit conclusions may still be unsupported. This is one of the most important principles of professional auditing. Under PCAOB AS 1105, Audit Evid

A Practical Guide to Planning, Identifying, Assessing, and Responding to Risks of Material Misstatement Risk assessment is the foundation of an effective financial statement audit performed under Public Company Accounting Oversight Board (PCAOB) standards. Before auditors select transactions, test controls, confirm balances, or evaluate accounting estimates, they must understand the risks that could cause the financial statements to be materially misstated. This is more than

Building a Risk-Based Internal Audit Plan That Focuses on What Matters Most An effective Internal Audit Department cannot audit everything. Organizations face financial, operational, compliance, cybersecurity, fraud, strategic, and governance risks. The number of potential audit subjects will almost always exceed the resources available to examine them. The challenge for the Chief Audit Executive (CAE) is determining where Internal Audit can provide the greatest value. That p

How Auditors Use Attribute Sampling to Test Internal Controls Auditors rarely have the time or resources to examine every transaction, authorization, reconciliation, or control activity performed by an organization. Instead, they frequently use audit sampling to obtain evidence about a larger population by examining a smaller number of selected items. One of the most important techniques for testing internal controls is attribute sampling. Attribute sampling is commonly used

When Does Fraud-Focused Auditing Become a Fraud Investigation? Internal auditors, external auditors, compliance professionals, and fraud examiners all play important roles in protecting organizations from occupational fraud, corruption, and financial misconduct. However, their responsibilities are not identical. One important distinction is the difference between frauditing and fraud investigation. Frauditing combines traditional auditing techniques with fraud-focused risk as

October 13, 2026 | John C. Blackshire, Jr. Corporate Compliance Seminars When a Major Bank Fails to Monitor Trillions of Dollars in Transactions On October 13, 2026, the U.S. Department of the Treasury announced enforcement actions against Bank of America totaling more than $1.21 billion for violations involving the Bank Secrecy Act (BSA), anti-money laundering (AML) requirements, and U.S. economic sanctions. The enforcement actions represent one of the most significant banki

How Artificial Intelligence Can Help Bank Auditors, Compliance Officers, and Executives Strengthen Regulatory Compliance and Internal Controls Introduction: Banking Compliance Failures Are Often Preventable Banking compliance failures rarely begin with a single catastrophic event. More often, they develop through a series of control weaknesses, ignored warning signs, inadequate management oversight, and failures to communicate problems to the appropriate decision-makers. A su

How Artificial Intelligence Can Help Auditors Ask Better Questions, Resolve Conflicts, and Deliver Greater Value Introduction: Internal Auditing Is a People Business Internal auditors spend considerable time evaluating risks, examining internal controls, reviewing transactions, and assessing compliance. However, much of an auditor's effectiveness depends on something that cannot be accomplished through technical knowledge alone: the ability to communicate with people. Auditor

Why Every Organization Needs a Structured Approach to Risk Management Every organization faces uncertainty. Financial risks, cybersecurity threats, regulatory changes, operational failures, fraud, and strategic decisions can all affect an organization's ability to achieve its objectives. The challenge is not eliminating risk. That is rarely possible. The challenge is understanding which risks matter, how they could affect organizational objectives, and what actions management

Understanding the Foundation of a High-Quality PCAOB Audit Audit evidence is the foundation of every audit opinion. An auditor may develop a comprehensive audit plan, identify significant risks, document internal controls, and perform numerous audit procedures. However, the audit cannot support an appropriate opinion unless the auditor obtains sufficient appropriate audit evidence. For registered public accounting firms auditing issuers, the Public Company Accounting Oversigh

Recognizing Suspicious Activity Before It Becomes a Regulatory Problem Banks and other financial institutions face continuing challenges in detecting money laundering, fraud, terrorist financing, and other illicit financial activity. The Bank Secrecy Act (BSA) and related anti-money laundering and countering the financing of terrorism (AML/CFT) requirements establish a framework for identifying and reporting certain financial transactions and suspicious activities. However, r

From Traditional Audit Testing to AI-Assisted Fraud Detection Fraud schemes are becoming more sophisticated, and organizations are generating enormous volumes of financial and operational data. Traditional audit techniques remain essential, but auditors increasingly need better ways to identify suspicious transactions, uncover unusual relationships, and evaluate fraud risks across large populations. Artificial intelligence offers significant opportunities to improve this work

Why Traditional Auditing Alone May Not Identify Fraud Financial statement auditing, internal auditing, and fraud examination share important objectives, but they are not identical disciplines. Traditional auditing evaluates financial information, controls, compliance, and organizational processes according to the objectives of the engagement. Fraud examination focuses more directly on identifying, investigating, and understanding intentional deception. Frauditing combines ele

Why the Audit Committee Is Essential to Internal Audit Independence and Effectiveness An organization may have an Internal Audit Department, a Chief Audit Executive, an approved Internal Audit Charter, and an annual audit plan. But none of these elements guarantees that Internal Audit is independent, adequately resourced, or effective. An essential safeguard is the oversight provided by the Board of Directors, often through its Audit Committee. Under the Institute of Internal

A Practical Guide to Building an Effective Audit Committee Charter An Audit Committee Charter is one of the most important documents in an organization's corporate governance framework. It establishes the committee's purpose, authority, responsibilities, membership requirements, and relationship with the Board of Directors, management, Internal Audit, and external auditors. Yet many organizations treat the Audit Committee Charter as an administrative document rather than a cr

Understanding the Framework for Modern Internal Auditing The Institute of Internal Auditors (IIA) introduced its revised Global Internal Audit Standards in January 2024, with the standards becoming effective on January 9, 2025. These standards establish a comprehensive framework for professional internal auditing and provide guidance for internal audit functions across industries, organizations, and jurisdictions. One of the most important changes is the organization of the s