All Things Internal Audit

The Institute of Internal Auditors Presents: All Things Internal Audit Tech 
In this episode, Adam Ross speaks with Vipul Patel about how organizations can better prepare for ransomware attacks. They talk through what goes wrong in the first hours of an attack, what smart preparation looks like, and where traditional audit approaches fall short when a business is in crisis mode.
 
HOST: Adam Ross, CIA, CISA

Partner and Internal Audit Services Leader, Grant Thornton




 



GUEST: Vipul Patel, CISA

Audit and Assurance Managing Director, IT Internal Audit Leader, Deloitte & Touche LLP









 
KEY POINTS:

Introduction [00:00:02-00:00:27]
Common Mistakes in Ransomware Response [00:00:27-00:02:14]
Building Crisis Communication Plans [00:02:20-00:03:03]
A Simple Incident Response Runbook [00:03:03-00:05:03]
Internal Audit's Role Before an Incident [00:05:03-00:07:05]
Stress Testing and "What If" Scenarios [00:07:05-00:08:01]
Tabletop Exercises and Cross-Functional Readiness [00:08:02-00:10:03]
Partnering With the CISO and Management [00:10:03-00:11:15]
Lessons Learned After Ransomware Incidents [00:11:15-00:14:05]
Governance Changes After an Attack [00:14:55-00:16:55]
Cyber Risk as a Business Issue [00:16:55-00:17:16]
Traits of Organizations That Respond Well [00:17:20-00:19:44]
Final Advice for Internal Auditors [00:19:44-00:20:56]
Visit The IIA's website or YouTube channel for related topics and more.


 
IIA RELATED CONTENT: 
Interested in this topic? Visit the links below for more resources:

Global Internal Audit Standards
Cybersecurity Topical Requirement
Course: Detecting, Mitigating and Responding to Global Ransomware Attacks
Articles: A Ransomware Playbook
IIA Certificates: IT General Controls Certificate
Knowledge Centers: Artificial Intelligence
Vison 2035
IIA Courses: Fundamentals of IT Auditing
Become a Certified Internal Auditor (CIA)
CIA Challenge Exam
 
Follow All Things Internal Audit:

Apple Podcasts

Spotify

Libsyn

Deezer

The Institute of Internal Auditors Presents: All Things Internal Audit 
 

In this episode, Benito Ybarra speaks with Margaret Pacheco about her experience earning the CIA through the Challenge Exam. They discuss who the exam is designed for, how it differs from the traditional three-part path, why it is not a shortcut, and how the CIA can strengthen credibility for internal audit professionals at every stage of their careers.
 
You can apply for the CIA Challenge Exam now if you meet the eligibility requirements, with multiple testing windows offered throughout the year.
If you're planning to qualify through the 10+ years of internal audit experience pilot, you must apply before September 30, 2026, and test during one of the remaining windows in 2026.

What's covered on the exam? The CIA Challenge Exam syllabus outlines the topics and structure so you know what to expect.

Not sure you're up for the Challenge? The IIA's Challenge Exam practice questions offer a simple way to preview the format and level of difficulty before you commit to the exam.
 


HOST: Benito Ybarra, CIA 

Executive Vice President, Global Standards, Guidance, and Certifications, The IIA







GUEST: Margaret Pacheco, CIA, CPA, PMP

Managing Director, Protiviti
 









 
KEY POINTS:
Introduction and Margaret's Background [00:00:27-00:01:20] 
Why Margaret Pursued the CIA Through the Challenge Exam [00:01:21-00:02:58] 
Is the Challenge Exam a Shortcut? [00:03:06-00:03:33] 
How the Challenge Exam Differs From the Three-Part CIA Exam [00:03:39-00:04:38] 
Who Is Eligible for the Challenge Exam? [00:04:49-00:06:09] 
Why the Challenge Exam Made Sense Later in Her Career [00:06:12-00:06:39] 
Study Strategy and Preparation Tips [00:06:40-00:07:53] 
How Margaret's CPA Background Helped [00:07:57-00:08:28] 
Advice for Candidates Considering the Exam [00:08:30-00:09:01] 
What the CIA Has Meant for Margaret's Career [00:09:03-00:09:54] 
How the CIA Builds Credibility With Employers and Clients [00:09:58-00:11:05] 
Why Accessibility Matters and Final Thoughts [00:11:05-00:11:57] 
Challenge Exam Reminder and Pilot Deadline [00:11:57-00:12:32]
Visit The IIA's website or YouTube channel for related topics and more.


RELATED CONTENT: 
Interested in this topic? Visit the links below for more resources:

CIA Challenge Exam
Global Internal Audit Standards
Vison 2035
Become a Certified Internal Auditor (CIA)
IAP (Internal Audit Practitioner)
Certification Candidate Handbook
Certificate Programs
Follow All Things Internal Audit:

Apple Podcasts

Spotify

Libsyn

Deezer

All Things Internal Audit: Fraud Podcast
"The Heartbreaking Fraud"
Listen to The IIA's Fraud Podcast, brought to you by All Things Internal Audit. The Fraud Podcast provides fictionalized accounts of real-world frauds featured in Internal Auditor magazine's Fraud department. 
In this episode, one ordinary Thursday cracks open a decade of misplaced trust. What starts as a simple payroll question quickly spirals into a trail of inflated salaries, personal charges, and checks written to someone who was practically family. The money is gone, but the real cost runs much deeper.
Access the full article here.
Read the April issue here.
Interested in more fraud-related topics? Earn CPEs by registering for The IIA's Fraud Analytics for Internal Auditors Certificate, available online and in-person.


Chapters:
Introduction to the Case (00:00:00)
Part 1: A Thursday That Changed Everything (00:00:23)
Part 2: Something Doesn't Add Up (00:02:46)
Part 3: Peeling Back the Layers (00:03:56)
Part 4: The Truth (00:05:13)
Part 5: A Hard Lesson (00:06:07)

Follow All Things Internal Audit:
Apple Podcasts
Spotify
Youtube
Libsyn
Deezer

The Institute of Internal Auditors Presents: All Things Internal Audit 
What does it take to move an internal audit function from being risk traditionalists to risk strategists, and what's quietly holding most teams back?
 
In this companion episode to Internal Auditor magazine's "Becoming a Risk Strategist" article, host Erin Banet sits down with Jess Rodgers to examine why the traditional audit model no longer fits the world we're operating in, and what leaders need to unlearn before they can change it. You'll hear three assumptions most audit teams are still running on, a real-world example of transformation done right, and one concrete action CAEs can take in the next six months to start shifting their function's standing with leadership.

 

 
HOST: Erin Banet, CPA
 
Chief Audit and Risk Officer, Humana







GUEST: Jess Rodgers, CIA, CPA 
 
Global Internal Audit Leader, EY
 
Vice Chair, Finance, IIA North American Board











 
KEY POINTS:
Introduction [00:00:02 - 00:00:25]
What Defines a Risk Traditionalist Function [00:00:51 - 00:02:31]
Why the Traditional Model No Longer Works [00:02:37 - 00:04:22]
Assumptions Internal Audit Must Unlearn [00:04:28 - 00:06:39]
The Mindset Shift Required for Transformation [00:06:44 - 00:08:44]
A Real-World Transformation Example [00:08:44 - 00:11:10]
Where Traditional Approaches Fall Short [00:11:10 - 00:13:36]
Measuring Success as a Risk Strategist [00:13:36 - 00:15:27]
Decision Velocity in Practice [00:15:27 - 00:17:25]
Common Barriers to Transformation [00:17:25 - 00:19:23]
One Action Leaders Can Take Now [00:19:23 - 00:21:03]
Advice for CAEs Navigating the Transition [00:21:22 - 00:23:06]
Driving Change Within Audit Teams [00:23:06 - 00:24:36]
Closing Thoughts [00:24:36 - 00:25:05]
 
Visit The IIA's website or YouTube channel for related topics and more.


RELATED CONTENT: 
Interested in this topic? Visit the links below for more resources:

Becoming a Risk Strategist — Internal Auditor Magazine (April Issue)
Global Internal Audit Standards
Vison 2035
GTAG: Continuous Auditing and Monitoring
Learning Solutions: Agile Auditing
Global Guidance: Developing a Risk-Based Internal Audit Plan, 2nd Edition
Learning Solutions: Fundamentals of Risk-based Auditing
Become a Certified Internal Auditor (CIA)
Risk in Focus 2026
EY Global Risk Transformation Study
Follow All Things Internal Audit:

Apple Podcasts

Spotify

Libsyn

Deezer

The Institute of Internal Auditors Presents: All Things Internal Audit 
Five women. Five careers. Decades of experience across some of the world's largest organizations. They didn't just find their way into this profession. They helped shape it. 



In this companion episode to Internal Auditor magazine's "Leading the Way" article, five internal audit leaders sit for a conversation that's long overdue: Erin Banet, Doris Myles, Chrysti Ziegler, Dominique Vincenti, and Beili Wong. Together, they cover the careers they built, the rooms they walked into alone, and what they'd tell every woman in this profession today.


You'll hear why preparing thoroughly is not the same as having permission to speak. You'll learn what it looks like to walk into a high-stakes conversation as a professional first, not as a woman managing a narrative. You'll hear the bad advice one of them ignored, and what happened when she did. And you'll discover what sponsorship really means when it's the difference between being mentored and having someone actively advocate on your behalf.

 

 
HOST: Catie Brown
Associate Manager & Producer, Content Development, The IIA









GUESTS:

Erin Banet, CPA
Chief Audit and Risk Officer, Humana


Chrysti Ziegler, CIA, CRMA, CFE
Chief Auditor, Citgo Petroleum Corporation


Dominique Vincenti, CIA, CRMA
Immediate Past CAE, Uber
Board Member, Loft Orbital


Beili Wong, CIA, CISA, CPA
Comptroller General, Ontario Treasury Board Secretariat
Director, Global Guidance, IIA Global Board of Directors


Doris Myles, CIA, CPA
Director of Internal Audit, St. Jude Children's Research Hospital
 








 
KEY POINTS:
Introduction: Women's Voices in Internal Audit [00:00:02 – 00:01:33]
Career Journeys Into Internal Audit [00:02:12 – 00:09:01]
Finding Your Voice in High-Stakes Conversations [00:09:01 – 00:12:14]
Confidence vs. Permission [00:12:21 – 00:15:23]
Owning Expertise and Leading the Narrative [00:15:23 – 00:18:23]
Early Career Challenges and Speaking Up [00:18:23 – 00:20:07]
Progress of Women in Internal Audit Leadership [00:20:07 – 00:21:24]
Redefining Leadership Through Empathy and Relationships [00:21:24 – 00:23:51]
Women as Strategic Leaders, Not Just Technicians [00:23:51 – 00:24:57]
The Value of Sponsorship vs. Mentorship [00:26:25 – 00:29:21]
Creating Opportunities and Building Networks [00:29:21 – 00:31:51]
Balancing Career and Personal Life [00:31:51 – 00:33:57]
Final Reflections: Passion, Risk, and Owning Your Space [00:34:03 – 00:36:02]
Closing Remarks [00:36:02 – 00:36:45]
 
Visit The IIA's website or YouTube channel for related topics and more.


 
IIA RELATED CONTENT: 
Interested in this topic? Visit the links below for more resources:

Leading the Way — Internal Auditor Magazine (April Issue)
How Personal Branding Benefits Female Leaders
Building a Better Auditor: Celebrating Women Who Paved the Way
Internal Auditing Competency Framework
Vison 2035
Become a Certified Internal Auditor (CIA)


Follow All Things Internal Audit:

Apple Podcasts

Spotify

Libsyn

Deezer