Auditing AI well depends on understanding what can go wrong and what controls should be in place. This is Module 6 of the AI-Powered Internal Audit Professional Series, a 15-module program developed and published by Business Excellence to build practical AI audit capability.
This module gives internal auditors a structured approach to AI risk assessment and to evaluating the control frameworks designed to mitigate AI risk. It works systematically through the categories of AI-specific risk – technical risks such as model performance degradation and data quality failure; operational risks such as inadequate monitoring and unclear ownership; security risks such as unauthorized access to models and training data; compliance risks tied to regulation and policy; and ethical risks including bias affecting protected groups.
For each risk category, the module identifies the control objectives that should be met and the control activities that typically deliver them – for example, bias testing performed during development and at defined monitoring intervals, automated performance monitoring with alert thresholds, and role-based access control with periodic access reviews. Crucially, the module then shows how to design test procedures that evaluate whether those controls are actually operating effectively, and how to document the results.
The centerpiece deliverable is an AI risk and control matrix that auditors populate during planning: each identified risk is linked to existing controls or noted as a control gap, specific test procedures are defined, and test results are recorded during execution to structure the eventual audit report.
The module is aligned with the NIST AI Risk Management Framework, ISO/IEC 42001, the IIA Global Internal Audit Standards 2024, and the EU AI Act, and reflects current guidance from ISACA. It is written in executive-level language appropriate for senior auditors and Chief Audit Executives.
Delivered as a professional PowerPoint presentation with full speaker notes, the module includes the AI risk and control matrix template, control testing templates, risk assessment checklists, real-world examples from cited sources, and a 10-question knowledge assessment quiz – turning AI risk theory into audit-ready practice.
Got a question about the product? Email us at support@flevy.com or ask the author directly by using the "Ask the Author a Question" form. If you cannot view the preview above this document description, go here to view the large preview instead.
Source: Best Practices in Artificial Intelligence PDF: AI Internal Audit M06: AI Risk and Controls PDF (PDF) Document, Amer Morgan
This document is available as part of the following discounted bundle(s):
Save %!
AI-Powered Internal Audit: Level 2 Audit Methodology Bundle
This bundle contains 4 total documents. See all the documents to the right.
Save %!
AI-IA Professional Series - Complete 15-Module Bundle
This bundle contains 15 total documents. See all the documents to the right.
|
Download our FREE Digital Transformation Templates
Download our free compilation of 50+ Digital Transformation slides and templates. DX concepts covered include Digital Leadership, Digital Maturity, Digital Value Chain, Customer Experience, Customer Journey, RPA, etc. |