Resources
The reference library behind the model.
These sources are intentionally curated: standards, frameworks, research signals, and regulatory anchors referenced across the thesis and supporting pages. Each link appears once to keep this page clean.
Standards
Primary anchors for direction of the profession and evidence defensibility.
IIA
Global Internal Audit Standards (2024)
Risk-based assurance, quality expectations, and modern enablement direction.
IIA
Effective date update (Jan 2025)
Public update tied to the standards’ effective date and rollout communications.
PCAOB
Auditing standards (evidence expectations)
Sufficient, appropriate, and reproducible audit evidence expectations (external audit lens that influences "defensible").
FRE
Federal Rule of Evidence 901
Authentication and traceability standard that reinforces "show your work" evidence paths.
BDO
IIA 2024 Domain III Analysis (board support and unrestricted access requirements)
BDO analysis of the board support requirements in Domain III of the 2024 IIA Global Internal Audit Standards, including unrestricted data access as an essential condition rather than a recommended practice.
Frameworks
Control, governance, and AI risk structures that hold up as systems scale.
COSO
COSO (framework hub)
COSO’s broader framework portal (IC + ERM references appear across posts).
NIST
AI Risk Management Framework 1.0 (PDF)
Practical governance + lifecycle framing (GOVERN, MAP, MEASURE, MANAGE).
ISO
ISO/IEC 42001 overview
AI management system standard overview (governance alignment signal).
Research and industry signals
Practitioner and industry references used to frame modernization pressure and scale realities.
IIA Research
Pulse of Internal Audit (2025 PDF)
Themes on modernization pressure, technology enablement, and evolving stakeholder expectations.
Deloitte
Internal Audit 4.0
"Technology-enabled, scalable, forward-looking assurance" framing for modern IA models.
Deloitte
Internal Audit Transformation
Research signal on data-driven assurance, continuous monitoring, and scale enablement.
EY
Internal Audit insights
Perspective on shifting from retrospective validation to predictive / analytics-enabled oversight.
Gartner
Gartner (CCM / digital risk context)
Continuous Controls Monitoring (CCM) and analytics-enabled oversight as maturing baseline capabilities signal.
ACFE
Report to the Nations (2024)
Fraud benchmarking signal supporting the shift from sampling to population-level analytics.
NAED
NAED (distribution industry context)
Industry context on digital integration, transaction complexity, and margin sensitivity.
Industry
Supply Chain Brain
Industry analysis reference used inline for data/analytics and decision-making context.
ICAEW
Audit and Assurance guidance
Technical guidance from the Institute of Chartered Accountants in England and Wales on audit quality and assurance practice evolution.
CAR Journal
Contemporary Accounting Research
Peer-reviewed research on accounting and auditing practice; cited for evidence on data-driven assurance and judgment in complex environments.
IIA Publication
Internal Auditor Magazine
Practitioner commentary and signal on profession-wide modernization themes; referenced alongside the Pulse data for directional corroboration.
People and organizational research
Research on talent, team dynamics, and retention that informs the people-side frameworks on this platform.
SHRM
Talent management and retention research
Human capital benchmarks on turnover costs, engagement drivers, and professional development effectiveness; referenced in team and retention framing.
Stanford / Bloom
Work from Home Research (Nicholas Bloom)
Longitudinal research on hybrid and remote work outcomes; informs framing on team structure resilience and distributed audit model performance.
Global Workplace Analytics
Workplace flexibility and productivity data
Aggregated data on flexible work arrangements, productivity outcomes, and talent retention impacts across professional service environments.
Robert Half
Accounting and Finance Salary Guide
Annual compensation benchmarks for audit, finance, and analytics roles; used to contextualize market competition for specialist talent.
Stanford / Barnett
Organizational learning and competitive inertia (William Barnett)
Research on how organizations learn -- or fail to -- from competitive pressure; cited for the structural inertia framing in team and capacity planning.
Lencioni
The Five Dysfunctions of a Team (Patrick Lencioni)
Framework for trust, accountability, and team cohesion; referenced in team structure framing around the conditions that enable or impede audit effectiveness.
Regulatory context
External pressure signals that influence governance expectations (even when "AI regulation" is not the headline).
SEC
Cybersecurity disclosure rules (press release)
Reinforces governance and disclosure pressure tied to technology risk management and oversight.
FTC
Enforcement context for deceptive AI claims (Sep 2024)
Enforcement signal tied to AI-related claims and practices.
EU
EU AI Act regulatory framework
EU regulatory framework reference used for AI governance context.
Tools referenced inline
AI tools cited as part of applied usage context (not endorsements).
Continue reading