How Artificial Intelligence Can Help Bank Auditors, Compliance Officers, and Executives Strengthen Regulatory Compliance and Internal Controls Introduction: Banking Compliance Failures Are Often Preventable Banking compliance failures rarely begin with a single catastrophic event. More often, they develop through a series of control weaknesses, ignored warning signs, inadequate management oversight, and failures to communicate problems to the appropriate decision-makers. A su

How Artificial Intelligence Can Help Auditors Ask Better Questions, Resolve Conflicts, and Deliver Greater Value Introduction: Internal Auditing Is a People Business Internal auditors spend considerable time evaluating risks, examining internal controls, reviewing transactions, and assessing compliance. However, much of an auditor's effectiveness depends on something that cannot be accomplished through technical knowledge alone: the ability to communicate with people. Auditor

Why Every Organization Needs a Structured Approach to Risk Management Every organization faces uncertainty. Financial risks, cybersecurity threats, regulatory changes, operational failures, fraud, and strategic decisions can all affect an organization's ability to achieve its objectives. The challenge is not eliminating risk. That is rarely possible. The challenge is understanding which risks matter, how they could affect organizational objectives, and what actions management

Understanding the Foundation of a High-Quality PCAOB Audit Audit evidence is the foundation of every audit opinion. An auditor may develop a comprehensive audit plan, identify significant risks, document internal controls, and perform numerous audit procedures. However, the audit cannot support an appropriate opinion unless the auditor obtains sufficient appropriate audit evidence. For registered public accounting firms auditing issuers, the Public Company Accounting Oversigh

Recognizing Suspicious Activity Before It Becomes a Regulatory Problem Banks and other financial institutions face continuing challenges in detecting money laundering, fraud, terrorist financing, and other illicit financial activity. The Bank Secrecy Act (BSA) and related anti-money laundering and countering the financing of terrorism (AML/CFT) requirements establish a framework for identifying and reporting certain financial transactions and suspicious activities. However, r

From Traditional Audit Testing to AI-Assisted Fraud Detection Fraud schemes are becoming more sophisticated, and organizations are generating enormous volumes of financial and operational data. Traditional audit techniques remain essential, but auditors increasingly need better ways to identify suspicious transactions, uncover unusual relationships, and evaluate fraud risks across large populations. Artificial intelligence offers significant opportunities to improve this work

Why Traditional Auditing Alone May Not Identify Fraud Financial statement auditing, internal auditing, and fraud examination share important objectives, but they are not identical disciplines. Traditional auditing evaluates financial information, controls, compliance, and organizational processes according to the objectives of the engagement. Fraud examination focuses more directly on identifying, investigating, and understanding intentional deception. Frauditing combines ele

Why the Audit Committee Is Essential to Internal Audit Independence and Effectiveness An organization may have an Internal Audit Department, a Chief Audit Executive, an approved Internal Audit Charter, and an annual audit plan. But none of these elements guarantees that Internal Audit is independent, adequately resourced, or effective. An essential safeguard is the oversight provided by the Board of Directors, often through its Audit Committee. Under the Institute of Internal

A Practical Guide to Building an Effective Audit Committee Charter An Audit Committee Charter is one of the most important documents in an organization's corporate governance framework. It establishes the committee's purpose, authority, responsibilities, membership requirements, and relationship with the Board of Directors, management, Internal Audit, and external auditors. Yet many organizations treat the Audit Committee Charter as an administrative document rather than a cr

Understanding the Framework for Modern Internal Auditing The Institute of Internal Auditors (IIA) introduced its revised Global Internal Audit Standards in January 2024, with the standards becoming effective on January 9, 2025. These standards establish a comprehensive framework for professional internal auditing and provide guidance for internal audit functions across industries, organizations, and jurisdictions. One of the most important changes is the organization of the s

Why More Audit Evidence Does Not Always Mean Better Audit Evidence One of the most important requirements in external auditing is obtaining sufficient appropriate audit evidence. Under PCAOB AS 1105 — Audit Evidence, auditors must obtain evidence that provides a reasonable basis for their audit opinions. But sufficiency and appropriateness are not interchangeable concepts. An auditor might examine hundreds of transactions and still fail to obtain appropriate evidence. Convers

Why Effective Audit Planning Is the Foundation of Audit Quality A successful financial statement audit begins long before auditors start testing transactions, confirming balances, or examining supporting documentation. It begins with audit planning. Under PCAOB AS 2101 — Audit Planning, auditors are required to establish an overall audit strategy and develop an audit plan that addresses the nature, timing, and extent of planned procedures. But effective planning involves much

An effective Audit Committee is one of the most important components of an organization's governance structure. Its responsibilities extend well beyond reviewing audited financial statements and meeting periodically with external auditors. Today's Audit Committees must provide meaningful oversight of financial reporting, internal controls, risk management, fraud prevention, regulatory compliance, and the effectiveness of internal and external audit activities. Yet one of the

Audit evidence is the foundation of every audit conclusion. Whether an auditor is examining financial statements, evaluating internal controls, investigating fraud, or assessing regulatory compliance, the quality of the conclusion depends on the evidence supporting it. Under PCAOB AS 1105 — Audit Evidence, auditors must obtain sufficient appropriate audit evidence to provide a reasonable basis for their opinions. But what constitutes audit evidence, how much is enough, and ho

Is It Time for the United States to Adopt a Global Accounting Language? The United States has one of the world's largest and most influential capital markets. American companies raise capital internationally, operate across national borders, acquire foreign businesses, and compete for investors around the world. Yet the United States continues to require domestic public companies to prepare financial statements using U.S. Generally Accepted Accounting Principles (U.S. GAAP) r

The Public Company Accounting Oversight Board (PCAOB) establishes auditing and related professional practice standards for registered public accounting firms conducting audits of SEC issuers and registered broker-dealers. For external auditors, understanding how the PCAOB Auditing Standards are organized is essential to performing compliant, efficient, and well-documented audits. The standards are not simply a collection of technical requirements. They provide an integrated f

Before auditors test whether an internal control is operating effectively, they should answer a more fundamental question: Is the control properly designed in the first place? A control can operate exactly as management intended and still fail to address the underlying risk. That is why evaluating control design is an essential part of internal auditing, SOX compliance, and evaluating internal control under the COSO Framework. What Is Control Design? Control design addresses

Risk assessment is at the heart of an effective system of internal control. Under the COSO Internal Control—Integrated Framework, Risk Assessment is one of five integrated components: Risk Assessment Control Environment Control Activities Information and Communication Monitoring Activities The concept sounds straightforward: identify the risks facing the organization and determine how they should be managed. In practice, however, effective risk assessment requires much more t

Auditors rarely examine every transaction in an account or business process. Instead, they frequently rely on audit sampling to obtain sufficient appropriate audit evidence. But how should the sample be selected? Should the auditor use a statistical approach, or can professional judgment be used to develop a nonstatistical sample? Under PCAOB AS 2315: Audit Sampling, both approaches are permitted. The important issue is not simply whether the sample is statistical or nonstati

The COSO Internal Control—Integrated Framework is one of the most widely recognized frameworks for designing, implementing, and evaluating internal control. Originally issued in 1992 and updated in 2013, the Framework provides organizations with a structured approach for achieving objectives related to operations, reporting, and compliance. The COSO Framework is the basis for the current GAO Green Book Standards. At the center of COSO are five integrated components of interna