-
Brink’s Modern Internal Auditing by Robert Moeller: Summary and How to Use It
Moeller’s eighth edition of Brink’s reference text, summarised: the eight parts and 34 chapters, the common body of knowledge and its levels, where the 2016 edition predates the…
Updated
·
25–38 minutes -
Agents of Change by Richard Chambers: Summary and Lessons for Internal Auditors
Chambers’s case for internal auditors as catalysts for change, summarised: the 2021 and 2024 editions, the survey of some 600 audit leaders and its perception gap, four traits…
Updated
·
27–41 minutes -
World-Class Internal Audit by Norman Marks: Summary and Lessons for Audit Leaders
Norman Marks’s career stories, summarised for audit leaders: the high risk not worth fixing, the over-cautious policy, the textbook finding, writing and hiring, what world-class meant at Tosco…
Updated
·
32–47 minutes -
The Cuckoo’s Egg by Clifford Stoll: Summary and Lessons for IT Auditors
Clifford Stoll’s hunt for a KGB-linked hacker, summarised for auditors: the 75-cent discrepancy, the case checked against the 1990 verdict, the investigator’s methods, the weaknesses exploited, a vocabulary,…
Updated
·
23–35 minutes -
Corporate Fraud Handbook by Joseph T. Wells: Summary for Internal Auditors
The fifth edition of the ACFE founder’s handbook, summarised for auditors: the three categories, every scheme with a detection test and a control, the 2024 and 2026 ACFE…
Updated
·
24–36 minutes -
Financial Shenanigans by Schilit, Perler and Engelhart: Summary for Auditors
The fourth edition of Schilit’s catalogue of accounting gimmicks, summarised for auditors: the fifteen shenanigans, the cases and what regulators found, the forensic mindset, a vocabulary, an audit…
Updated
·
27–40 minutes -
The Phoenix Project: Summary and What It Means for IT Auditors
Kim, Behr and Spafford’s DevOps novel, summarised for auditors: the story, the Three Ways, the four types of work, the audit scoping sub-plot, a vocabulary, an IT audit…
Updated
·
19–28 minutes -
The Trusted Advisor Path: How Internal Auditors Earn Seats at Decision Tables
“Trusted advisor” hides a mechanism. This guide lays it out: the credibility sequence (reliability, then insight, then invitation), the advisory moments where stature is won or lost, the…
Updated
·
18–27 minutes -
A Day in the Life of an Internal Auditor: Staff, Senior and Manager, Hour by Hour
Job descriptions describe internal audit in nouns. This guide describes Tuesday: the staff auditor’s fieldwork day hour by hour, the senior’s week running an engagement, the manager’s quarter…
Updated
·
18–27 minutes -
Types of Internal Audits: The 15 Kinds Explained, With What Each Tests and When to Use It
Internal audit engagements come in named kinds, and the names decide the criteria, the methods, the evidence and the report. This guide explains fifteen of them: operational, financial,…
Updated
·
18–27 minutes -
Engagement-Level Risk Assessment: From Process Understanding to Test Plan
The annual risk assessment picks what to audit; the engagement-level risk assessment decides what to test once you are there, and it is the step most fieldwork skips…
Updated
·
18–27 minutes -
Control Design Principles: What Makes a Control Actually Work, With Three Redesigns
Most controls are not designed; they accumulate. This guide gives the principles for designing one deliberately: a control objective stated as the error it must catch, precision matched…
Updated
·
19–28 minutes -
Internal Audit vs SOX vs Compliance vs ERM: Who Does What in the Control Ecosystem
New auditors, new control owners and new board members all ask the same question: what is the difference between internal audit, the SOX program, compliance and enterprise risk…
Updated
·
18–27 minutes -
Risk Appetite vs Tolerance vs Capacity vs Limits: The Four Layers, Defined and Cascaded
Boards and risk functions use appetite, tolerance, capacity and limits as if they were interchangeable, and the result is a risk appetite statement nobody can apply. This guide…
Updated
·
18–27 minutes -
What Is a Chief Audit Executive? Role, Reporting Lines and Responsibilities Explained
The chief audit executive is the person accountable for the whole internal audit function: its mandate, independence, plan, people, quality and the assurance it gives the board. This…
Updated
·
18–28 minutes -
The Three Lines Model Explained: Six Principles, the Roles, and What Changed in 2020
The Three Lines Model is the IIA’s 2020 replacement for the Three Lines of Defense, and most organizations still draw the old diagram. This guide reads the position…
Updated
·
27–40 minutes -
SOX for Control Owners: What Testers Ask For, What Each Phase Means and How to Pass Testing
If you own a key control, SOX testing will arrive every year whether or not anyone explains it. This guide is written for the control owner, not the…
Updated
·
21–31 minutes -
What Does an Internal Auditor Do? The Job Description, Level by Level, With Pay and Hours
An internal auditor evaluates whether an organization’s risks are managed and its controls work, and reports what they find to management and the board. This guide answers the…
Updated
·
18–27 minutes -
GIAS Domain I: The Purpose of Internal Auditing, Explained Clause by Clause
Domain I of the Global Internal Audit Standards contains no standards, no principles and no requirements, yet it shapes everything that follows: it defines what internal auditing is…
Updated
·
26–38 minutes -
Audit Fieldwork: What Happens, How to Run It Week by Week, and What Good Looks Like
Fieldwork is the middle of an internal audit engagement: the weeks between the approved work program and the first draft finding, where evidence is gathered and tested. This…
Updated
·
19–28 minutes -
TeamMate vs Workiva: Audit-First Platform Against the SOX and Reporting Suite
TeamMate and Workiva compared for internal audit and SOX: where each vendor’s workflow, pricing model, public-sector standing, and SOX and AI features actually differ, a side-by-side scorecard, fit…
Updated
·
22–33 minutes -
Optro vs Workiva: Which Internal Audit and SOX Platform Fits Your Team?
How Optro (formerly AuditBoard) and Workiva compare for internal audit and SOX: ownership and the same-day March 2026 relaunches, where their workflows, SOX, analytics and AI differ, a…
Updated
·
22–32 minutes -
DataSnipper Review for Internal Audit and SOX: Evidence Linking, Agents and Price
What DataSnipper is and how its Excel-native evidence linking and SOX agents work, the Alwin agent platform launched in September 2026, the scorecard and fit by situation, the…
Updated
·
25–37 minutes -
Workiva Alternatives for Internal Audit and SOX: 9 Options Compared
Nine Workiva alternatives for internal audit and SOX, Optro, TeamMate, Diligent One, Onspring, LogicGate, Hyperproof, DataSnipper, Archer and SAI360, compared on price evidence and rating, plus what Workiva’s…
Updated
·
20–30 minutes -
Workiva Review for Internal Audit and SOX: What the GRC Relaunch Changed
What Workiva is after the March 2026 GRC relaunch, the audit module stage by stage, SOX and controls, the named AI agents and their data-use terms, a 12-area…
Updated
·
23–35 minutes -
Types of Internal Audit Software: Audit Management, GRC, SOX, Compliance and Analytics
This guide sorts the internal audit software market into 10 real categories, from audit management platforms and enterprise GRC suites to SOX tools, compliance automation and audit analytics,…
Updated
·
26–39 minutes -
SOX Compliance Software Compared: Optro, Workiva, TeamMate, Diligent and DataSnipper
This guide covers what SOX 404 software must do beyond general audit management, compares Optro, Workiva, TeamMate, Diligent, DataSnipper, Hyperproof, Archer and ServiceNow IRM on price evidence and…
Updated
·
19–28 minutes -
Independence and Objectivity in Internal Audit: What They Mean, How They Break
The profession’s foundation made concrete: the difference between the function’s independence and the auditor’s objectivity, what the Global Internal Audit Standards require of each, reporting lines and the…
Updated
·
18–28 minutes -
Assurance vs Advisory: Internal Audit’s Two Services Explained
Internal audit’s two services explained with the precision of the Global Internal Audit Standards: definitions, ten differences side by side, examples of each, limited and reasonable assurance, where…
Updated
·
19–28 minutes -
Key vs Non-Key Controls: Rationalizing What You Test
How internal auditors and SOX teams decide which controls are key: what makes a control key under auditing standards and in practice, key controls outside SOX, six criteria…
Updated
·
18–28 minutes