Auditing the Cloud: Risks, Frameworks, and Real Value
Release Date: 10/09/2025
All Things Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Eric Wilson talks with Dr. Kelly Richmond Pope about the psychology behind fraud, why ordinary people commit unethical acts, and how trust, pressure, and culture shape fraud risk. They explore accidental versus intentional perpetrators, cognitive blind spots, whistleblowing challenges, and what auditors can do to better detect and prevent fraud. HOST: , CIA Director of Internal Audit & Chief Audit Executive, Gulfport Energy GUEST: , CPA, PhD Forensic Accounting Professor,...
info_outlineAll Things Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Levy talks with Dan Fornelius about the skills internal auditors need in 2026 and how to deliver real advice, insight, and foresight that leaders value. They discuss earning a seat at the table, balancing advisory work with independence, aligning audit work to strategy, and how AI and analytics are transforming internal audit. The conversation highlights the shift toward strategic, insight-driven auditing and what auditors must do to stay relevant. HOST:, CIA, CRMA, CISSP CEO, Cherry Hill...
info_outlineAll Things Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Pamela Stroebel Powers and James Rose unpack the new , created to support Standard 9.2 in the Global Internal Audit Standards. They discuss why strategy is essential for internal audit functions, how it differs from the audit plan, and the importance of foresight, scenario analysis, and continuous development. They also explore the connection between strategy and performance measurement, and how these tools help internal auditors stay aligned with organizational objectives. HOST:, CIA, CGAP, CRMA,...
info_outlineAll Things Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit Deborah Poulalion and Brian Tremblay unpack the top three risks from the report: geopolitical uncertainty, digital disruption, and cybersecurity. They discuss why these risks are rising, how internal audit can approach “hard-to-audit” areas, and how to use Risk in Focus to drive stronger conversations with leadership. For a global perspective, read insights from audit leaders in the article HOST: Senior Manager, Research & Insights, The IIA GUEST: , CIA, CISA Vice...
info_outlineAll Things Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit Extreme weather is no longer a background variable; it’s a governance and resilience issue. In this special episode, Christine Janesko shares extended insights from her interviews for Internal Auditor magazine’s “” article. Hear expert perspectives on expanding risk lenses, adapting to climate-driven changes, and how internal audit can strengthen preparedness, communication, and continuity in a world of increasingly unpredictable weather. HOSTS: Associate Manager & Producer, Content...
info_outlineAll Things Internal Audit
All Things Internal Audit: Fraud Podcast "Beer Below Deck" Listen to The IIA’s Fraud Podcast, brought to you by The Fraud Podcast provides fictionalized accounts of real-world frauds featured in magazine’s Fraud department. In this episode, a harmless naval tradition and a single questionable requisition spiral into a costly cover-up. What starts as an attempt to boost morale becomes a lesson in how pressure, rationalization, and weak controls can turn minor misjudgments into major fraud. Access the full article Read the December issue Interested in more...
info_outlineAll Things Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Brad Monterio and Tom McLeod take an unfiltered look at The IIA’s future. From transforming learning through AI and simulation to reimagining the Standards and global influence, they discuss what it takes to build a next-generation IIA; one defined by intelligent, integrated assurance, agility, and audacious thinking. HOST: , Executive Vice President of Learning, Licensing, and Sales, The IIA GUEST: , Former Chief Audit Executive and Chief Risk Officer; Global Assurance and AI Advisor KEY POINTS: ...
info_outlineAll Things Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, IIA Quality Services advisors share firsthand experience conducting external quality assessments (EQAs) in alignment with The IIA's Global Internal Audit Standards. From the importance of governance structure and CAE engagement to navigating the Standards, this episode highlights what makes a high-performing audit function and where even seasoned teams can stumble. HOST: , CIA, CISA, CPA, CFE Director IIA Quality Services GUESTS: , CIA, CISA Lead Quality Advisor for IIA...
info_outlineAll Things Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit In the episode, Jami Shine joins Colin May to expose the hidden risks behind payroll and overtime fraud, one of the most underestimated threats to organizational integrity. From toxic workplace cultures to “impossible days” and data-driven red flags, they uncover how emotional intelligence, analytics, and collaboration among internal audit, HR, and leadership can keep timekeeping honest and controls effective. HOST: , CIA, CRMA, CISA, CRISC, Corporate and IT Audit Manager, QuikTrip ...
info_outlineAll Things Internal Audit
The Institute of Internal Auditors Presents: All Things Internal Audit In this episode, Mike Jacka and Yvette Adams talk about one of the most important, and often overlooked, risk areas — human capital management. From talent shortages and upskilling to culture, fraud, and AI, they unpack how people strategy connects directly to organizational success. Hear how auditors can assess workforce risks, build better relationships with HR, and ensure that governance around both people and technology keeps pace with change. HOST: , CIA, CPA Chief Creative Pilot, Flying Pig Audit,...
info_outlineThe Institute of Internal Auditors Presents: All Things Internal Audit Tech
Sponsored by Grant Thornton
Cloud security has become a top board-level concern and a permanent fixture on audit plans. In this companion episode to the Global Best Practices’ A Roadmap to Auditing Cloud Security, Adam Ross talks with Vik Rai and Aadesh Gandhre about the challenges of auditing in multi-cloud environments, regulatory requirements, and the importance of governance and shared responsibility. They explore skill gaps, third-party risk, frameworks, and practical approaches to building a phased cloud security audit program, helping internal auditors strengthen resilience and provide real value.
HOST:
Adam Ross, CIA, CISA
Partner, Grant Thornton Advisors, LLC
GUEST:
Vik Rai, CISSP, CISA
Managing Director, Grant Thornton Advisors, LLC
Aadesh Gandhre, CISA, CAMS (Sanctions), ITIL 4, Certified Cryptocurrency Auditor, Certified in Cybersecurity
Chief Audit Executive, DTCC
KEY POINTS:
-
Introduction [00:00–00:00:47]
-
Why Cloud Security Matters Now [00:00:51–00:03:10]
-
Board-Level Visibility and Audit’s Role [00:03:12–00:05:51]
-
Regulatory Expectations and Frameworks [00:05:54–00:10:28]
-
Skills and Governance at the Board Level [00:11:14–00:13:49]
-
Shared Responsibility and Security Models [00:14:05–00:17:51]
-
Resiliency, Outages, and Accountability [00:17:13–00:18:57]
-
Starting a Cloud Security Audit [00:19:08–00:21:46]
-
Upskilling Auditors for Cloud Environments [00:22:14–00:23:05]
-
Cloud Security Posture Management (CSPM) [00:23:15–00:27:54]
-
Phased and Risk-Based Audit Planning [00:29:07–00:35:42]
-
Final Thoughts [00:37:02–00:40:43]
-
Closing [00:41:28–00:41:46]
IIA RELATED CONTENT:
Interested in this topic? Visit the links below for more resources:
- Global Best Practices: A Roadmap To Auditing Cloud Security
- Webinar: Hybrid Cloud Security: A Primer for Internal Auditors
- Tech: Control in the Cloud
- 2025 Financial Services Exchange Conference
Visit The IIA's website or YouTube channel for related topics and more.
Follow All Things Internal Audit:
Apple Podcasts
Spotify
Libsyn
Deezer