The Future of IT Audit: Key Changes in ITAF 5

Technology is transforming how organizations operate — and IT audit and assurance must evolve alongside it. In this episode, Paul Phillips sits down with Mary Carmichael, contributor to the newly updated IT Audit and Assurance Framework (ITAF 5), to discuss how audit professionals can adapt to today’s increasingly complex digital enterprise.

Together, they explore the major shifts shaping modern audit, including AI governance, digital ecosystems, automation, evolving risk landscapes, cloud environments, and the growing need for stronger data literacy within audit teams. Mary also shares practical guidance on how organizations can begin modernizing their audit approach without overhauling everything overnight.

Key discussion topics include:

The evolution from traditional control testing to outcome-based assurance

Why audit teams need stronger technology and data capabilities

AI governance, automation, and digital risk considerations

Building practical audit modernization strategies

How ITAF 5 supports governance, credibility, and audit relevance in modern enterprises

Whether you're an auditor, governance professional, cybersecurity leader, or risk practitioner, this conversation provides valuable insight into the future of audit and assurance in a technology-driven world.

Related Resources & Stay Connected

Download ITAF 5: https://www.isaca.org/resources/itaf-is-a-framework

Explore More ISACA Podcast Episodes: Dive deeper into cybersecurity, governance, risk, and emerging tech insights. https://www.isaca.org/resources/news-and-trends/isaca-podcast-library