https://www.auditeasepro.com/blog Notes on running internal audit, from the team that builds AuditEase Pro. en https://www.auditeasepro.com/blog/is-chatgpt-safe-for-internal-audit-work https://www.auditeasepro.com/blog/is-chatgpt-safe-for-internal-audit-work Fri, 16 Oct 2026 00:00:00 GMT Not with evidence, draft findings or names in a consumer chatbot. What to keep out, which plan terms matter, and own-key or self-hosted options that keep text in. https://www.auditeasepro.com/blog/how-to-audit-ai-systems https://www.auditeasepro.com/blog/how-to-audit-ai-systems Fri, 16 Oct 2026 00:00:00 GMT An AI audit covers governance, data, the model, its use and monitoring. Criteria to test against (NIST AI RMF, ISO/IEC 42001, EU AI Act, IIA) and a first programme. https://www.auditeasepro.com/blog/how-internal-audit-teams-use-ai https://www.auditeasepro.com/blog/how-internal-audit-teams-use-ai Fri, 16 Oct 2026 00:00:00 GMT Where AI helps an audit team now (drafting, search, data tests, planning), where it fails (facts, scope, judgement) and the rules that keep the work defensible. https://www.auditeasepro.com/blog/ai-risk-assessment-audit-planning https://www.auditeasepro.com/blog/ai-risk-assessment-audit-planning Fri, 16 Oct 2026 00:00:00 GMT Yes, in three places: drafting the questionnaire, reading what past audits found, and preparing an engagement. Where it must not decide, and what to keep on record. https://www.auditeasepro.com/blog/ai-drafting-audit-observations-reports https://www.auditeasepro.com/blog/ai-drafting-audit-observations-reports Fri, 16 Oct 2026 00:00:00 GMT It can draft condition, criteria and recommendation from test results, and a summary that cites findings. It cannot find the cause or sign. What to keep on record. https://www.auditeasepro.com/blog/internal-audit-off-spreadsheets https://www.auditeasepro.com/blog/internal-audit-off-spreadsheets Tue, 29 Sep 2026 00:00:00 GMT Spreadsheets run most audit functions, and they work for a while. Where they break first, what to move in which order, and what to leave where it is. https://www.auditeasepro.com/blog/tracking-management-action-plans https://www.auditeasepro.com/blog/tracking-management-action-plans Sat, 26 Sep 2026 00:00:00 GMT Follow-up is where audit value leaks away. What an action plan needs to be trackable, who chases it, and what closing one should require as evidence. https://www.auditeasepro.com/blog/writing-audit-observations https://www.auditeasepro.com/blog/writing-audit-observations Fri, 25 Sep 2026 00:00:00 GMT Criteria, condition, cause, consequence: the four parts of an observation, and why the cause decides whether anything actually changes. https://www.auditeasepro.com/blog/risk-based-annual-audit-plan https://www.auditeasepro.com/blog/risk-based-annual-audit-plan Thu, 24 Sep 2026 00:00:00 GMT A risk-based audit plan starts with a list of auditable entities and ends with a dated schedule. The six steps in between, and where each one usually goes wrong. https://www.auditeasepro.com/blog/single-tenant-internal-audit-system https://www.auditeasepro.com/blog/single-tenant-internal-audit-system Wed, 23 Sep 2026 00:00:00 GMT A single-tenant audit system gives each organisation its own deployment and database. What that changes in practice, and the three cases where it is worth it.