Technical Skills Get You Into Internal Audit. Soft Skills Make You Effective.

Soft Skills for Auditors — September 14 and November 9, 2026

Internal Auditors spend years developing technical skills.

We learn COSO, risk assessment, internal controls, sampling, fraud, cybersecurity, accounting, regulatory requirements, data analytics and audit documentation.

All of those skills matter.

But consider a different problem.

What happens when the auditor identifies the right issue—but cannot persuade management that it matters?

What happens when the evidence is solid—but the audit report creates defensiveness rather than corrective action?

What happens when an auditor understands the control deficiency—but cannot get the process owner to explain what is really happening?

That is where soft skills become audit skills.

Corporate Compliance Seminars' Soft Skills for Auditors is a focused 2-CPE Auditing webinar addressing communication, relationship building, leadership, time management, adaptability, professional skepticism and influence. The program is designed for Internal Auditors, audit leaders and compliance professionals.

Upcoming sessions are:

• Monday, September 14, 2026

• Monday, November 9, 2026

Auditing Is a People Business

Auditors audit systems, transactions and controls.

But people:

• Design the controls.

• Operate the controls.

• Override the controls.

• Circumvent the controls.

• Explain the controls.

• Provide the evidence.

• Respond to the findings.

• Implement the corrective action.

That means auditors are constantly dealing with human behavior.

The technically strongest auditor in the department can still be ineffective if that auditor cannot communicate, listen, interview, influence and establish productive working relationships.

CCS's program therefore deliberately addresses both verbal and written communication, relationship building, respect for clients as subject-matter experts, transparent communication, adaptability and healthy skepticism.

Soft Skills Are Not “Soft” When the Audit Gets Difficult

Consider what happens during a difficult audit interview.

The auditor asks:

“Why wasn't this control performed?”

The process owner responds:

“It was performed.”

The auditor has evidence suggesting otherwise.

What happens next depends heavily upon the auditor's interpersonal skills.

A poor approach is:

“No, it wasn't. I have the evidence.”

Now the process owner becomes defensive.

A stronger auditor might ask:

“Walk me through exactly what normally happens when this control is performed.”

Then:

“What evidence should we expect to see?”

And finally:

“Help me understand why that evidence isn't present for these transactions.”

Same audit issue.

Different approach.

Potentially very different result.

Auditors Must Overcome Denial

One of the most common human responses auditors encounter is:

“We don't have a problem.”

Management may deny the significance of a condition because acknowledging it threatens competence, reputation, budget or authority.

The auditor cannot simply respond with more force.

The auditor needs to calmly establish:

Condition

→ Evidence

→ Criteria

→ Risk

→ Consequence

→ Corrective Action

The ability to move someone from denial toward an evidence-based discussion is an interpersonal skill.

Auditors Must Recognize Rationalization

Another common response is:

“Yes, but there is a good reason we do it this way.”

Examples include:

“We're understaffed.”

“Everybody does it.”

“The policy isn't realistic.”

“We had to make the deadline.”

“We've never had a problem.”

The auditor needs to distinguish a legitimate root cause from a rationalization for circumventing a control.

That requires listening.

The auditor who is busy preparing the next question may miss the most important statement in the interview.

Auditors Must Manage Defensiveness and Ego

Auditors believe they are evaluating a process.

The process owner may hear:

“You failed.”

That difference is critical.

Once the audit becomes personal, the discussion changes.

Instead of evaluating the control, everyone starts defending themselves.

Strong auditors distinguish among:

• The Person

• The Process

• The Control

• The Evidence

• The Risk

The objective isn't to prove that someone is wrong.

The objective is to understand what happened and determine whether the organization is adequately managing its risk.

Auditors Must Deal With Fear

Sometimes employees know exactly what is wrong.

They simply don't want to tell the auditor.

Why?

They may fear:

• Retaliation

• Embarrassment

• Management

• Disciplinary action

• Career consequences

• Being blamed for the problem

This is particularly important in fraud inquiries.

The auditor who asks:

“Is management overriding controls?”

may receive:

“No.”

A skilled interviewer may instead explore how transactions are actually processed, who can approve exceptions, what happens under deadline pressure and whether employees have ever been asked to bypass normal procedures.

CCS specifically emphasizes honest and transparent communication and treating clients as subject-matter experts.

That approach can produce considerably better audit evidence.

Auditors Must Overcome Resistance to Change

Even when management agrees with the finding, another problem appears:

“We've always done it this way.”

Changing a control may mean:

• More work

• Different responsibilities

• New technology

• Loss of authority

• Additional documentation

• Different performance measures

• Greater accountability

Finding the problem is only half of Internal Audit's job.

The organization ultimately needs sustainable corrective action.

That requires influence.

Communication Is an Audit Control

Think about what happens to a significant finding.

Evidence Gathered

→ Finding Developed

→ Management Discussion

→ Audit Report

→ Audit Committee

→ Corrective Action

Poor communication can break that chain at almost any point.

A technically correct finding that nobody understands has limited value.

A well-supported recommendation that management refuses to implement accomplishes little.

A significant risk buried beneath six pages of audit jargon may never receive appropriate governance attention.

This is why CCS devotes an entire portion of the program to improving audit communication.

Written Communication Matters

An audit report should not require the reader to become an auditor.

Consider:

“Testing identified 7 of 25 samples for which requisite supervisory authorization pursuant to Policy AP-104 was not evidenced.”

Technically correct.

But compare it with:

“Seven of the 25 payments tested—28%—did not contain evidence of the required management approval.”

Now management immediately understands the condition.

Strong audit writing emphasizes:

• What happened?

• What should have happened?

• Why did it happen?

• What is the risk?

• What should management do?

Clarity is not dumbing down an audit report.

Clarity is professional communication.

Auditors Need Leadership Skills Before They Become Audit Directors

Leadership is not a job title.

An auditor demonstrates leadership when coordinating an engagement, resolving disagreement, mentoring another auditor, challenging management or presenting a difficult finding.

CCS's Soft Skills for Auditors program specifically includes audit leadership development as a major part of the agenda.

A strong audit leader needs to know when to:

• Ask

• Listen

• Challenge

• Coach

• Escalate

• Negotiate

• Decide

The auditor who relies solely upon positional authority will eventually encounter someone with more positional authority.

Influence travels considerably farther.

Time Management Is an Audit Skill

Auditors never have unlimited resources.

An audit may have 300 potential areas to investigate and enough budget to thoroughly examine 30.

That makes prioritization essential.

Strong auditors continually distinguish between:

Important

and

Interesting.

An unusual transaction may be interesting.

A systemic control deficiency affecting thousands of transactions may be important.

CCS therefore includes audit time-management techniques in the program.

The objective is not merely getting more work done.

It is directing limited audit resources toward the matters presenting the greatest risk.

Internal Auditors Need to Learn to Sell

The word selling makes some auditors uncomfortable.

It shouldn't.

CCS begins the program with Selling the Value of Internal Audits and concludes with expanding the auditor's influence.

Internal Audit is constantly selling ideas:

This risk deserves attention.

This control needs improvement.

This recommendation is practical.

This audit deserves resources.

Management should implement this corrective action.

The Audit Committee should pay attention to this issue.

That is professional influence.

Internal Audit should not compromise its independence or objectivity.

But independence does not require auditors to be ineffective communicators.

Respect the Process Owner as the Subject-Matter Expert

This is one of the most important ideas in the CCS program.

The Internal Auditor may understand COSO better than the Accounts Payable manager.

The Accounts Payable manager probably understands Accounts Payable better than the auditor.

That distinction matters.

The auditor brings expertise in:

• Risk

• Control

• Evidence

• Testing

• Governance

The process owner brings expertise in: How the business actually operates.

The best audit occurs when those two forms of expertise meet.

Instead of approaching an interview thinking:

“I am here to find out what you're doing wrong,”

approach it thinking:

“You understand this process. Help me understand how it works and where it can fail.”

That simple shift can dramatically improve the quality of audit evidence.

Professional Skepticism Requires Communication Skills

CCS also includes healthy skepticism among the program's core concepts.

Skepticism does not mean assuming everyone is lying.

It means not automatically accepting explanations without sufficient evidence.

Management says:

“That exception never happens.”

The auditor asks:

“What evidence could we examine to determine how frequently it occurs?”

Management says:

“The system won't allow that.”

The auditor asks:

“Can you demonstrate the system control for me?”

Management says:

“We always review those.”

The auditor asks:

“What evidence demonstrates the review?”

That is skepticism without hostility.

It is one of the most valuable combinations an auditor can develop.

AI Makes Soft Skills More Important, Not Less

Artificial intelligence can already help auditors:

• Analyze data

• Develop audit programs

• Research standards

• Draft workpapers

• Summarize interviews

• Draft findings

• Improve audit reports

Those capabilities will continue to improve.

But AI does not eliminate the human side of auditing.

An auditor still has to sit across from a manager and say:

“We believe this represents a significant control deficiency.”

The auditor still needs to understand the reaction.

Challenge the explanation.

Listen for contradictory information.

Determine root cause.

Develop workable corrective action.

And communicate the issue to governance.

As AI automates more technical work, these distinctly human auditing capabilities may become more valuable.

Six Questions to Ask About Your Own Soft Skills

An Internal Auditor should periodically ask:

1. Can I explain a complex audit issue in language management immediately understands?

2. Do people tell me what is really happening—or merely what they think I want to hear?

3. Can I disagree with management without making the disagreement personal?

4. Do my reports cause action?

5. Can I distinguish skepticism from cynicism?

6. Can I influence people when I have no authority over them?

Technical training alone will not solve weaknesses in those areas.

They require deliberate professional development.

Two Opportunities to Attend in 2026

Corporate Compliance Seminars' Soft Skills for Auditors is a live, Group Internet-Based program providing 2 NASBA-approved CPE credits in Auditing. It is a Basic-level program requiring no prerequisites or advance preparation and runs from 1:00 p.m. to 3:00 p.m. Central Time.

Monday, September 14, 2026

Monday, November 9, 2026

The program addresses six major areas: selling the value of Internal Audit, understanding soft versus hard skills, improving audit leadership, improving time management, strengthening audit communications and expanding audit influence.

The Bottom Line: Audit Effectiveness Requires More Than Technical Competence

Technical competence tells the auditor what to look for.

Soft skills help the auditor find out what is really happening.

Technical competence identifies the control deficiency.

Soft skills help determine its root cause.

Technical competence supports the finding.

Soft skills help communicate it.

Technical competence identifies the risk.

Soft skills help persuade management to act.

The complete Internal Auditor needs both:

Technical Competence + Communication + Leadership + Listening + Skepticism + Relationship Building + Influence

That combination transforms an auditor from someone who simply identifies problems into someone who can help an organization understand risk and improve its control environment.

Corporate Compliance Seminars' Soft Skills for Auditors on September 14 and November 9, 2026 provides two focused CPE hours devoted to developing those capabilities.