
Internal Auditors Say AI is Their #1 Strategic Risk. So, Where’s the Strategy?
March 30, 2026American college football Hall of Fame coach Nick Saban has long said that “success is not a continuum.” Past success does not guarantee future results. He treated success as a momentary accomplishment that had to be rebuilt every day through discipline and effort.
That philosophy defined his career. Saban won seven national championships, the most of any college football coach in history. Yet he rarely allowed his teams to dwell on victory. Each season began with the same mindset. The work had to start again.
Internal audit leaders can learn from that perspective.
I have seen many internal audit functions achieve remarkable success. They deliver valuable insights, identify critical risks, and build strong credibility with management and the audit committee. Their work influences decisions and strengthens governance across the organization.
But success in internal audit is not permanent. It must be earned repeatedly through sustained effort, vigilance, and adaptation.
The most effective internal audit leaders understand this reality. They treat success as an achievement, not as a permanent state. That mindset keeps the function sharp and focused.
Success Must Be Continuously Rebuilt
The strongest internal audit functions share several characteristics. They provide assurance that leadership trusts. They deliver insights that help management make better decisions. They identify risks and provide assurance early and clearly. They also build productive relationships across the enterprise.
When these things occur consistently, internal audit earns the trust of stakeholders. It becomes a valued advisor to leadership and the board.
Yet even highly respected internal audit functions can lose momentum. I have watched teams that were once admired begin to lose their influence over time. The shift rarely happens overnight. It develops gradually as conditions change or discipline weakens.
Success in internal audit requires continuous renewal. Without that renewal, even strong functions can drift away from the level of performance that originally earned stakeholder trust.
Five Forces That Can Erode Success
From my experience, there are several common factors tend to erode the success of internal audit functions that were once highly effective.
1. Complacency
Success can create a sense of comfort within the team. When internal auditors receive consistent praise from stakeholders, they may begin to assume their approach will continue to work indefinitely.
Over time, that mindset frequently leads to stagnation. Internal audit plans become predictable. Work programs become less risk-based and remain largely unchanged. The team begins to rely on methods that worked in the past rather than adapting to new conditions.
Organizations and risk environments evolve quickly. Internal audit functions that assume their focus and past methods remain sufficient often discover they have fallen behind.
2. New Stakeholders with Different Expectations
Leadership turnover is inevitable. A new CEO, CFO, or audit committee chair can quickly change the expectations placed on internal audit.
I learned this lesson early in my career as a CAE. As the leader for an internal audit function for a major U.S. military command, I found myself with a new boss every 18-24 months. The formula for successfully serving one administrative boss rarely worked for the next.
Some stakeholders want deeper insight into emerging risks. Others want internal audit to provide more operational advice or support major transformation initiatives. Still others expect stronger assurance over emerging technologies or cybersecurity.
If the chief audit executive does not adjust to these expectations, internal audit can quickly lose relevance. Effective CAEs maintain constant dialogue with key stakeholders. They ask questions, seek feedback, and adapt the function’s priorities to meet evolving expectations.
3. Failing to Identify Emerging Risks
Risk landscapes rarely remain stable for long. In the past decade alone organizations have faced dramatic changes in cybersecurity threats, geopolitical instability, macroeconomic conditions, supply chain disruption, and artificial intelligence.
Internal audit functions that rely solely on traditional risk assessments can miss important developments. The most effective teams maintain a forward-looking view of risk. They monitor industry developments, engage closely with risk management leaders, and continuously refresh their risk assessment processes.
When internal audit anticipates risks rather than reacting to them, stakeholders recognize the value of that foresight.
4. Failure to Innovate
Technology is rapidly transforming the internal audit profession. Data analytics, automation, and artificial intelligence now allow auditors to analyze far more information than traditional approaches allowed.
These tools can identify patterns, anomalies, and control weaknesses that manual testing might overlook. They also improve efficiency and expand audit coverage.
Some internal audit functions hesitate to adopt these technologies. They continue to rely primarily on traditional methods and manual techniques.
That hesitation can create a performance gap. Organizations increasingly expect internal audit to leverage technology to deliver deeper insights and broader assurance.
5. Talent Erosion
Talent remains the most critical asset of any internal audit function. Strong teams combine technical expertise, critical thinking, communication skills, and professional skepticism.
However, talented internal auditors often move into leadership roles elsewhere in the organization. Others pursue opportunities outside the company. If those departures are not managed effectively, the function will lose important capabilities.
Successful CAEs treat talent development as a strategic priority. They recruit strong candidates, invest in training, and create clear pathways for professional growth. Building a pipeline of capable auditors ensures the function remains strong over time.
Sustaining Excellence
The good news is that sustained success is achievable. Internal audit leaders can take practical steps to ensure their teams remain effective and trusted by stakeholders.
Several actions make a meaningful difference.
- Reassess stakeholder expectations on a regular basis.
- Continuously refresh the audit plan to address emerging risks.
- Invest in technology that will improve insight and efficiency.
- Encourage innovation and improvement across the audit team.
- Recruit, develop, and retain exceptional talent.
These steps help create a culture that values continuous improvement. They reinforce the idea that success requires ongoing effort and adaptation.
The Discipline of Continuous Improvement
The most respected internal audit functions I have observed share a powerful discipline. They never assume their reputation guarantees future success.
Instead, they continually challenge themselves. They ask whether they are addressing the most important risks. They evaluate whether their methods remain effective. They invest in new capabilities that strengthen the function.
This mindset keeps internal audit relevant and valuable.
Coach Saban understood a truth that applies well beyond college football. Success does not last on its own. It must be rebuilt through discipline, preparation, and sustained effort.
Internal audit leaders who embrace that philosophy position their teams to maintain trust, deliver meaningful insight, and remain indispensable to their organizations.






I welcome your comments via LinkedIn or Twitter (@rfchambers).