In this episode, Tom Fox welcomes Anthony Pugliese, President and CEO of The Institute of Internal Auditors Inc.
We begin with the IIA’s global footprint, with boards in 122 countries; its role in setting internal audit standards; certifications, including the Certified Internal Auditor credential with about 225,000 holders; and education. Pugliese describes how internal audit is shifting from primarily financial controls to a broader focus on non-financial risks, including cybersecurity, AI and disruptive technologies, sustainability reporting, business resilience, and geopolitical risk. He emphasizes internal audit’s growing prospective/advisory role, particularly in assessing whether AI governance is keeping pace with rapid adoption and in communicating complex risks to boards and audit committees. Cybersecurity is cited as chief audit executives’ top concern and increasingly requires continuous monitoring. Pugliese notes members want more industry-specific guidance and expanded GRC resources relevant to compliance and directs listeners to iia.org and the free annual Risk in Focus report.
Key highlights:
- What the IIA Does
- Risk Landscape Shifts
- From Assurance to Advisory
- Geopolitical Risk in Practice
- Cyber Threats and Continuous Auditing
- Why Compliance Pros Should Join
Resources:
Anthony Pugliese on LinkedIn
Institute of Internal Auditors
Tom Fox
My first work of general non-fiction is now out: Deluge Before Dawn, the story of the 2025 flood in Kerr County, Texas, which killed 119 people and devastated a county. It is a story of tragedy, heartbreak, survival, and resilience.

It is available on the following sites:
This week only, the Kindle e-book version is available for $0.99 on Amazon.