THE AI-ENABLED INTERNAL AUDITOR — VOLUME I
Foundations, Risk & Governance

Artificial Intelligence is changing more than technology. It is changing how organisations operate, how decisions are made, how controls function and how risk is created. As AI moves into finance, operations, customer service, human resources, risk management and decision-making, Internal Audit faces a fundamental challenge: how can assurance remain credible when intelligence itself is becoming part of the control environment?

The AI-Enabled Internal Auditor — Volume I provides a practical foundation for navigating this transformation.

The book begins by examining how the role of the Internal Auditor is evolving—from reviewing processes and transactions to understanding the decisions, data, models and technologies that increasingly influence organisational outcomes. It explores the transition from Assurance to Intelligence, showing how AI and analytics can help Internal Audit move beyond historical exceptions towards patterns, emerging risks and earlier insight.

The book then examines the changing nature of AI risk and the new internal control environment. It explores AI governance, accountability and the Three Lines model, while emphasising a principle that remains fundamental: AI may change how decisions are produced, but it does not remove the need for accountability, professional judgement, evidence and independent challenge.

The second part provides a structured approach to auditing AI. It addresses how to build an AI audit universe and provides practical perspectives on auditing AI governance, AI data, AI models and Generative AI.

Throughout the book, complex concepts are translated into practical audit questions, risk considerations, control expectations and practitioner-oriented approaches. The emphasis is not on turning every Internal Auditor into a data scientist or AI engineer. It is on helping auditors understand AI sufficiently to ask better questions, obtain better evidence, challenge management effectively and identify emerging risks earlier.

This book is particularly relevant for:

• Internal Auditors and Chief Audit Executives
• Risk and Compliance professionals
• Technology and AI leaders
• Control owners and business executives
• Audit Committee members
• Professionals responsible for AI governance and assurance

At its heart, this book presents a simple but powerful idea:

The AI-enabled Internal Auditor is not merely an auditor who uses AI tools. It is an auditor who understands how AI changes risk, controls, evidence, governance and decision-making—and adapts the assurance approach accordingly.

Volume I provides the foundation for that journey.