In this episode, Tom Fox welcomes Anthony Pugliese, President and CEO of the Institute of Internal Auditors (IIA).
We begin with the IIA’s global footprint with boards in 122 countries, its role in setting internal audit standards, certifications, including the Certified Internal Auditor credential with about 225,000 holders, and education. Pugliese describes how internal audit is shifting from primarily financial controls to a broader focus on non-financial risks, including cybersecurity, AI and disruptive technologies, sustainability reporting, business resilience, and geopolitical risk. He emphasizes internal audit’s growing prospective/advisory role, particularly in assessing whether AI governance is keeping pace with rapid adoption and in communicating complex risks to boards and audit committees. Cybersecurity is cited as chief audit executives’ top concern, increasingly requiring continuous monitoring. Pugliese notes members want more industry-specific guidance and expanded GRC resources relevant to compliance and directs listeners to iia.org and the free annual Risk in Focus report.
Key Highlights
- What the IIA Does
- Risk Landscape Shifts
- From Assurance to Advisory
- Geopolitical Risk in Practice
- Cyber Threats and Continuous Auditing
- Why Compliance Pros Should Join
Resources
Anthony Pugliese on LinkedIn
Institute of Internal Auditors
Tom Fox
My first work of general non-fiction is now out: Deluge Before Dawn, the story of the 2025 flood in Kerr County Texas which killed 119 people and devastated a county. It is a story of tragedy, heartbreak, survival and resilience. It is available on the following sites: