Internal Audit & Controls

Redesigning Internal Audit

In this article, Norman Marks reflects on how internal audit must evolve in step with the rapid changes reshaping global businesses. Drawing on his own experience as Chief Audit Executive at Tosco Corporation, Marks argues that internal audit should be designed around the risk universe rather than static frameworks, emphasizing flexibility, agility, and a willingness to rethink traditional models in the face of AI-driven transformation.

What Kind of Internal Auditor Are You?

In Norman Marks’ latest piece, he challenges internal auditors to reflect on their role, their mindset, and their real value to the organization. Drawing from personal experience and professional insight, Marks lays out a series of contrasts that help auditors pinpoint where they stand and where they might want to go.

Talking About Internal Audit Assurance

In this article, Norman Marks breaks down the difference between traditional, retrospective assurance and the kind of forward-looking insight that truly supports decision-making. Drawing on his decades of experience, he challenges internal auditors to shift their focus from the past to the future, and to deliver assurance that helps organizations navigate the risks and opportunities ahead.

AI in Audit Gets a Reality Check with FRC’s New Guidance

The UK’s Financial Reporting Council (FRC) has recently published its first formal guidance on how artificial intelligence should be used, and documented, in audit. The guidance, released today, doesn’t lay down the law. Instead, it offers something arguably more valuable, clarity.

PCAOB Holds Heaton & Co. Accountable for Serious Failures in Audit Practices

The Public Company Accounting Oversight Board (PCAOB) took a strong stand today, holding Heaton & Co. and one of its partners, Kristofer Heaton, accountable for a series of significant violations. These lapses, which spanned audit documentation, quality control, and engagement reviews, have led to penalties, a firm registration revocation, and a professional ban for Heaton.

How Can You Use AI in a SOX Compliance Program?

In his latest article, Norman Marks investigates the evolving role of artificial intelligence (AI) in Sarbanes-Oxley (SOX) compliance, offering valuable insights into how AI can revolutionize internal controls and risk management practices. In this article, he explores the potential of AI to enhance the efficiency and effectiveness of SOX programs, from risk assessment to process documentation, and emphasizes the importance of maintaining a focus on financial statement integrity while navigating the opportunities and challenges AI presents.

What is the Future of Internal Auditing?

In this piece, Norman Marks addresses the evolving role of internal auditing in the face of rapid technological advancements, shifting business dynamics, and emerging risks. He challenges the profession to adapt, offering a pragmatic perspective on what auditors need to focus on today to remain valuable in the future.