Question
A US-based multinational is pivoting its strategy to "AI-first" in 2026. The Internal Audit budget has been cut by 15% due to high R&D costs. The CAE is forced to choose between maintaining the frequency of financial control audits (SOX compliance) or initiating assurance over the new AI governance framework. What is the most professionally responsible analytical approach to this resource conflict?
Tap card to flipAnswer
The CAE must perform a risk-based prioritization aligned with the Board's risk appetite . While SOX compliance is a legal mandate, the "AI-first" pivot introduces new, potentially catastrophic strategic and operational risks. The CAE should analyze the possibility of optimizing SOX testing through automated continuous monitoring to free up resources for AI governance. Simply cutting one for the other is insufficient; the CAE must present the "Residual Risk" of the 15% budget cut to the Board, specifically highlighting which high-risk areas will remain unaddressed.
Tap card to flip back