Call us now:
As always Tom McLeod a great review of AI and Audit.
It’s interesting when you read publications from Audit bodies and see the reality of what is happening on the ground with Ai and its effect on Knowledge Industries. The Big four auditor firms openly talk about the effect of AI on their business models. The big Strategy Consultancies are aligning themselves around AI, with some openly stating they are a AI firm.
But what does all this mean for the shop floor, where the rubber meets the road and the work need to take place. That is the great question you ask below?
Here an example, what we know about Cybersecurity is that it is becoming increasingly regulated across the EU, US and APAC. We also know is there are big gaps in the knowledge skills and experience of cybersecurity risk management. As a consequence there are big gaps in compliance, and for cybersecurity that means big gaps in security and security risk management.
This is where AI delivers massive opportunities and benefits. Outside organisations, cybersecurity risk management is a well defined capability, with clear documented guard rails that define risk management, cybersecurity and compliance standards. That has all been consumed by AI, albeit from personal experience is fraught with hallucinations.
Cybersecurity risk management is also a predominantly digitial domain.
What this means is that we no longer need to worry about the knowledge, skills and experience necessary to evaluate cybersecurity risk management. We can build this into AI, we can let AI do the leg work for us. We can automate the control evaluation process, that is required to demonstrate compliance to cybersecurity risk management regulation, and incidentally automate the cybersecurity process.
While the three lines don’t disappear, they are still there, albeit through continuous diagnostic mitigation.
The role of internal audit does not disappear. It’s augmented by AI, closing the already existing gap that IA does not seem to want, or can to fill due to existing Knowledge, skills and ability gaps.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan
Veritas GRC
#cybersecurity #cyberriskmanagement #internalaudit #artificalintelligence
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7359893480694767616