Name: IT internal audit trends and focus areas
Start: 2025-08-27T17:00:00Z
End: 2025-08-27T17:01:02.000Z
Location: BrightTALK
Rating: 0

AuditBoard’s mission is to be the category-defining global platform for connected risk, elevating our customers through innovation. More than 50% of the Fortune 500 trust AuditBoard to transform their audit, risk, and compliance management. AuditBoard is top-rated by customers on G2, Capterra, and Gartner Peer Insights, and was recently ranked for the sixth year in a row as one of the fastest-growing technology companies in North America by Deloitte.

Explore the comprehensive roadmap for enhancing risk and compliance through content, data, and technology. We’ll provide an industry perspective on integrated risk management (IRM) and demonstrate how to get the most out of your risk management program. Our goal is to enable you to create a confident and integrated risk and control environment that drives business value and supports informed decision-making.

Key learning objectives for this session:
 - Confidence in decision-making: Learn how to manage your business risks confidently and drive informed decision-making.
 - Comprehensive risk management framework: Discover the importance of a comprehensive integrated risk management framework that provides a coordinated approach to identifying, assessing, and managing risks across all levels of an enterprise.
 - Prioritization of IRM investments: Understand how to focus on areas that will yield the most valuable IRM investments, such as enterprise risk management, standard taxonomies and hierarchies, risk and control self-assessments, and key risk indicators for ongoing monitoring.
 - AuditBoard enablement: Unlock the value of AuditBoard tools to enhance consistency, adaptability, and efficiency while gaining a centralized view of risk management.


    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Road map for integrated risk management

As regional banks and insurers grow, they quickly face increasing regulatory demands — but many lack the foundational infrastructure to respond with speed, alignment, and confidence. Risk and compliance programs often evolve in silos, resulting in slow, costly change management and increased exposure to compliance gaps and penalties.
In this panel webinar, a compliance officer and a risk leader will share how to build an integrated, scalable foundation for managing the evolving regulatory landscape and enterprise risk. Learn how aligning these functions from the start creates clarity, improves visibility, and strengthens your organization’s overall risk posture.
We’ll explore common pitfalls, including fragmented systems and manual processes, and share strategies for creating a unified approach powered by connected data, shared workflows, and AI-enabled insights — all within a modern, flexible platform.
Whether you’re just getting started or reevaluating your current program, this session will equip you with practical guidance for what comes next.

Key learning objectives for this session:
 - Recognize the risks of siloed risk and compliance functions and their impact on change management and regulatory exposure.
 - Identify the key components of a strong, integrated risk and compliance program.
 - Compare real-world approaches to scaling compliance and risk alignment from both compliance and risk leader perspectives.
 - Apply practical strategies to connect compliance obligations to enterprise-wide risk frameworks using a unified platform.


    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Scaling compliance: How financial institutions can reduce risk with integrated GRC

The rise of AI usage is driving opportunities and efficiencies, but it also exposes organizations to significant risk if not managed responsibly. In this webinar, AuditBoard and A-LIGN, two leaders in cybersecurity compliance, will come together to talk about how to mitigate these risks with a strategic compliance program that includes ISO 42001. Attendees will learn why ISO 42001 is the preeminent standard for AI compliance and the business value of pursuing this certification.

Key objectives for this session:
 - Describe what ISO 42001 is and how it applies to AI governance. 
 - Explain the business value of ISO 42001 for AI-driven organizations. 
 - Apply strategies for implementing an AI management system (AIMS) effectively. 
 - Discuss the value of a technology-enabled AIMS. 

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Effective AI governance: Confronting AI risks with ISO 42001 compliance

As the digital risk landscape evolves, the audit committee’s role is becoming increasingly demanding and complex in today’s uncertain and dynamic business environment. Organizations in North America remain particularly focused on navigating challenges related to artificial intelligence and other disruptive technologies, cybersecurity threats, and supply chain pressures. Discover how organizations can enhance governance and operational strategies to effectively manage these risks, with a focus on building resilience while retaining the agility to make strategic pivots in 2025.

Learning objectives for this session:
 - Recognize the fastest-growing digital risks (i.e., digital disruption and AI, cybersecurity, and supply chain) and related trends in 2025. 
 - Discuss the potential consequences of these risks and the necessity for organizational adaptation. 
 - Apply best practices to effectively mitigate these key risks. 

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Key priorities for audit committees in 2025

Understanding AI governance isn’t just about risk. It’s about the opportunities AI can provide your organization and how having a proper governance function can allow your organization to more quickly adopt AI and give you a competitive advantage. (There’s also risks, of course, so we’ll hit on those). By attending this session, you'll learn how to advise your organization on strengthening their AI governance through real-world examples and practical takeaways.

Key objectives for this session:
 - Describe various AI governance frameworks and their applications.
 - Discuss key challenges within AI governance to understand their impact.
 - Develop practical strategies for assessing AI governance.


    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Assessing AI Governance: Practical Tips for Success

The collaboration between audit and information security teams is critical to addressing today’s most pressing risks, such as cybersecurity and data privacy. As these risks grow more complex, combined assurance becomes essential to streamline efforts, reduce duplication, and provide a unified view of organizational risks. This session delves into how audit and InfoSec teams can break down silos, align their goals, and leverage each other’s strengths to deliver more impactful assurance. Learn how these partnerships can enhance risk management, ensure compliance with evolving regulations, and build a culture of accountability across the organization.

Insights for this session:
 - Discuss the complementary roles of audit and InfoSec teams in achieving combined assurance and addressing top organizational risks.
 - Explore strategies for fostering collaboration and aligning assurance efforts between audit and InfoSec functions.
 - Apply practical approaches to integrate workflows, share data, and leverage technology for more efficient and effective assurance processes.
 - Discover how collaboration between audit and InfoSec can help teams stay ahead of evolving cybersecurity and data privacy regulations.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

One Team, One Dream: Bridging Audit and InfoSec for Combined Assurance

After much anticipation, the first of a planned suite of Topical Requirements has been published to complement the Global Internal Audit Standards. An innovative component of the International Professional Practices Framework, Topical Requirements are designed to improve the quality and reliability of internal audit services and results. By using a consistent approach to audit methodology, they ensure that internal auditors are empowered to provide insightful, relevant, and targeted assurance and advice.

Topical Requirements are mandatory when performing assurance engagements in specific risk areas tied to the risk assessment process. They will enable internal auditors to address key risks effectively regardless of the internal audit function's size, sector, and maturity.

The IIA’s Vice President of Standards and Guidance will shed light on the development process of Topical Requirements, emphasizing their significance and alignment within the IPPF framework. The session will highlight the relevance of these requirements for addressing pervasive and specialized risk areas, with a particular focus on the Cybersecurity Topical Requirement. Through a detailed exploration of the applicability and key components of the Cybersecurity Topical Requirement, gain valuable insights into how the Requirements and User Guide can support internal auditors in navigating the complexities of cybersecurity audits.

After attending this session, participants will be able to:
 - Describe the importance of Topical Requirements as an important component of the IPPF.
 - Recognize how Topical Requirements address key risk areas facing organizations.
 - Apply the Cybersecurity Topical Requirement within their organizational setting.
 - Prepare for future releases in the suite of Topical Requirements. 

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Enhancing Internal Auditing by Implementing Topical Requirements

In today’s fast-paced and unpredictable risk landscape, internal audit must be prepared to adapt and respond to emerging challenges. This webinar will explore practical insights on strengthening your audit function’s resilience, enabling it to remain dynamic and effective during times of disruption. Learn how to anticipate and address evolving risks, ensure continuity of audit activities, and enhance your organization's overall resilience through strategic audit planning and execution.

After completing this session, participants will be able to:
 - Develop adaptive audit plans that align with dynamic risk landscapes and organizational priorities.
 - Apply resilience-focused audit methodologies to proactively address emerging risks.
 - Identify strategies to maintain audit continuity and effectiveness during crises or disruptions.
 - Implement frameworks to evaluate and enhance both audit function and organizational resilience.


    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Building a Resilient Audit Function: Strategies to Thrive in Uncertain Times

Third-party relationships carry key risks that have significant impact on your business operations — an expanding vendor ecosystem, sensitive data sprawl, savvy threat actors, and increased regulatory scrutiny. In regulated industries, courts of law, and the court of public opinion, an organization cannot escape blame. This includes potentially severe repercussions in terms of reputation or financial penalties if a third-party provider fails to perform as contracted or suffers its own unfortunate event or unethical practices. In this high-stakes environment, running a comprehensive third-party risk management (TPRM) program is more important than ever. In this session, we’ll discuss best practices and the trends we’re seeing across industries to help you stay up to speed on the vendor risk landscape.

At the end of this session, attendees will be able to:
 - Describe the importance of TPRM and recent drivers of increased third-party risk.
 - Outline key components of a comprehensive TPRM program, including how process and technology come together.
 - Define effective program governance through all three lines of defense.
 - Identify common TPRM pitfalls and challenges.
 - Measure their TPRM program’s success.


    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Navigating the Third-Party Risk Landscape: Best Practices for Today's Businesses

Data analytics has gained popularity across various fields as an automation tool driving process efficiencies. This session will explore proven methodologies for integrating data analytics into audit procedures to achieve efficiency gains through AuditBoard Analytics. By leveraging purpose-built analytics solutions, auditors can automate manual audit tests and uncover patterns, trends, and anomalies that traditional testing methods may miss. Additionally, we will delve deeper into the potential of leveraging integrations with other systems such as GRC platforms, ERP systems, and issue management tools, and AuditBoard. This approach helps enhance operational efficiency and expand assurance coverage. 

At the end of this session, attendees will be able to:
 - Identify the right opportunities to leverage data analytics within the audit life cycle. 
 - Examine specific use cases where audit and control tests leverage data analytics to achieve significant efficiency gains.
 - Describe how purpose-built solutions like AuditBoard Analytics can transform any auditor into an audit analyst without a steep learning curve.
 - Implement effective techniques for analyzing large datasets using engaging visualizations such as dashboard solutions to uncover insights that inform strategic decision-making.
 - Gain insights into how integrating data from other GRC platforms, ERP systems, and issue-tracking tools into AuditBoard can provide a more holistic view of organizational risks and performance.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Unlock Continuous Audit Monitoring With AuditBoard Analytics Accelerators

Join us for an insightful webcast as we reflect on the key events, trends, and challenges in third-party risk management throughout 2024. We'll explore how organizations leveraged AuditBoard to navigate these developments, addressing both opportunities and obstacles with agility. Discover the transformative benefits of AuditBoard’s TPRM capabilities, from driving operational efficiency to delivering actionable insights. Learn how the tool empowered organizations to optimize their risk management strategies and seamlessly integrate its functionalities into their broader governance frameworks. Don’t miss this opportunity to gain valuable perspectives on maximizing the potential of AuditBoard for your TPRM program in the year ahead.
Analyze the major events and trends in third-party risk management during 2024 and their impact on organizations.

Key insights from this webinar: 
 - Describe how organizations can utilize AuditBoard to address challenges, capitalize on opportunities, and enhance third-party risk management processes.
 - Discuss the key benefits and efficiencies AuditBoard delivers, including improved risk identification, monitoring, and reporting.
 - Develop actionable takeaways to address emerging third-party risks and improve resilience in the year ahead using AuditBoard.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Building a Resilient TPRM Program With AuditBoard

Join us for an insightful session exploring the current state of AI adoption in audit and the potential transformative impact of AI on the audit profession. Learn about the different flavors of AI technology and how to pick what's right for your audit program. Whether it's leveraging off-the-shelf tools like Microsoft's Copilot and white-label ChatGPT, or investing in audit management solutions like AuditBoard, you'll learn realistic tips for incorporating these into your work in areas such as developing your audit program, walkthrough preparation, and reporting. 

This session is essential for auditors and professionals keen to stay ahead in a rapidly evolving industry.

At the end of this session, attendees will be able to:
 - Describe how the audit industry is adopting AI.
 - Differentiate AI technologies and solutions through examples.
 - Select the right AI technologies with realistic tips for incorporating them into your environment.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

AI for auditing: Get on board or get out of the way

As cyber threats continue to evolve, risk executives outside of the CISO role must stay informed about emerging risks, regulatory expectations, and their organization's cyber resilience. In fact, in the latest EY and Institute of International Finance (IIF) bank survey, cybersecurity emerges as the primary concern long term with 75% of CROs agreeing it is the chief risk over the next 12 months.

This webinar will provide key insights into the latest cyber risk trends, practical strategies for integrating cybersecurity into enterprise risk management, and how to collaborate effectively with the office of the CISO.

Learning objectives for this session:
 - Understand the cybersecurity landscape
 - Learn how the office of the Chief Risk Officer can best coordinate with the office of the CISO
 - Take away best practices for breaking down silos

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

What CISOs Want Risk Executives to Know About Cyber Risk in 2025

With the volatility of today’s business landscape, everyone is running a risky business. In the 2024 Gartner Boards of Directors Survey, nearly one-third of non-executive board members stated risk management is among their top strategic priorities for 2024 and 2025 — up 85% from 2023.**

As technology advances and the risks associated with it rapidly expand, teams must take a proactive approach to bridge the gap between their capabilities and their organization’s risk exposure.

Join AuditBoard’s industry experts as we share learnings and best practices on leveraging our integrated risk solutions to defend and strengthen your business.

In this product walkthrough, we’ll cover how to:
 - Identify key factors contributing to risk exposure gaps.
 - Build and scale an integrated risk management program for your business.
 - Enhance your enterprise risk management to allow for real-time, risk-informed decisions.
 - Extend your operational management from the front lines to the board room, strengthening business resiliency.
 - Include climate-related risks as part of your integrated risk management strategy. 

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.
    **Gartner Reports: Gartner, 5 Ways to Apply Data & Analytics to Your Risk Management Process, Joel Backaler, Devanshu Mehrotra, 13 January 2025.

AuditBoard Live: Integrated Risk Management

Cybersecurity remains one of the most critical risks facing organizations today, with increasing regulatory scrutiny and the potential for significant business disruption. The Institute of Internal Auditors (IIA) has introduced a new topical requirement for cybersecurity audits, further emphasizing the high risk and pervasive nature of this area. This session will explore how your teams can effectively apply this new requirement to assess and strengthen your organization's cybersecurity programs. Our speakers will offer practical insights addressing the implications for conformance and quality assurance assessments. By the end of the session, you will be equipped with the knowledge to navigate cyber risks and contribute to your organization's cybersecurity resilience.

Learning objectives for this session:
 - Discuss the vital role internal audit plays in ensuring a robust cybersecurity framework.
 - Examine what the new cybersecurity topical requirement and other regulatory requirements mean for internal audit. 
 - Explore strategies for internal audit teams to remain connected with information security beyond the audit. 
 - Identify practical techniques for incorporating cybersecurity considerations into broader audit engagements, ensuring alignment with the new requirements and enhancing overall audit value.


    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

IIA Standards Masterclass: Prevent and Defend - The Role of Internal Audit in Strengthening Cybersecurity Resilience

With cyber threats on the rise, EU regulators have released a number of new standards and requirements aimed at boosting cyber resilience and mandating incident disclosure, including the Digital Operational Resilience Act (DORA) and the Network and Information Security Directive 2 (NIS2).

A recent survey report conducted by AuditBoard and Ascend2 Research found that many risk, InfoSec, and IT compliance professionals are worried about the impact conformance efforts will have on their workload. However, this is not just the job of IT — internal audit has an important role to play in providing assurance on these requirements.  

In this session, our speakers will conduct an in-depth exploration of the challenges and opportunities these regulations present. You’ll also learn best practices for assessing and mitigating ICT risk and strengthening digital resilience.

From this session, you'll be able to: 
 - Describe the common challenges companies face with DORA and NIS2 implementation.
 - Discuss the role of internal audit in DORA and NIS2 conformance.
 - Apply best practices for conforming with new regulations.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

The Role of Internal Audit in DORA and NIS2 Compliance

Skilled internal auditors are the backbone of a strong internal audit function, and Standard 10.2 requires a clearly defined approach for developing and retaining auditors who are qualified to support the internal audit strategy and plan. Meeting this new requirement presents real challenges, including a shrinking talent pool, skill gaps in emerging risk areas, and difficulties balancing workloads amid increasing demands and limited resources. 

In this session, explore strategies to tackle these challenges head-on, upskill your team, and optimize resource allocation to enhance performance, improve retention rates, and elevate your audit function.

Learning objectives for this session:
 - Apply the requirements of the Global Internal Audit Standards for developing and retaining internal auditors.
 - Implement tactical, high-impact strategies to attract and retain skilled internal auditors while fostering continuous professional growth.
 - Leverage innovative technology to optimize resource allocation and create a future-ready workforce that supports the evolving needs of internal audit.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

IIA Standards Masterclass: Future-Proofing Your Workforce and Supercharging Resource Efficiency

As IT internal audit teams gear up for the challenges of 2025, it becomes increasingly important for them to understand the organizational IT strategy and align their plans with the strategic direction of the company. With the rapidly evolving cloud landscape, advancements in artificial intelligence (AI), mounting technical debt, and heightened regulatory focus on IT matters, organizations must articulate how their plans align with enterprise risks — including challenging themselves on their role and how they fulfill it.

Join us for this insightful webinar, where internal audit and controls leaders will highlight the latest trends across the marketplace, providing valuable insights to help your IT internal audit team drive value. We will also discuss hot topics for you to consider as you formulate a framework for 2025 and beyond.

Key learning objectives:
 - Align IT internal audit plans with the strategic direction of the company.
 - Navigate the evolving emerging risk landscape and its implications for IT internal audits.
 - Describe IT internal audit’s role in the modernization of IT.
 - Assess the skills that are in demand for IT internal auditors and how internal audit teams are bridging the gaps.
 - Discuss how IT internal audit can add value to the organization.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

IT internal audit trends and focus areas

Internal Audit

Audit

Risk Management

IT Compliance

Information Management

Information Risk

IT Asset Management

Risk Based Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Research and Development

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

IT internal audit trends and focus areas

Presented by

About this talk

AuditBoard