AI & Audit Workpapers: IIA Alignment, Risks, and Practical Controls
July 8, 2026 | 2:00 PM - 3:00 PM
July 8 @ 2:00 pm – 3:00 pm EDT
This roundtable will focus on what “good” audit documentation looks like in practice—especially when teams are using AI to draft, summarize, or analyze workpapers. We’ll start with a brief overview of relevant IIA Standards and the baseline expectations they set for sufficient documentation and documented supervision. Participants will then break into two groups—documentation preparers and documentation reviewers—to discuss what each side needs to see in the file, where gaps commonly occur, and how expectations differ across teams. Each group will identify practical, low-friction controls that can be implemented immediately (e.g., minimum metadata, source traceability, validation steps, and review sign-offs) to better align workpapers with overall documentation expectations. We’ll close by sharing key takeaways and a short list of actions participants can take back to their shops.
Delivery Method: Group Internet
Field of Study: Auditing
Advance Preparation: None
Prerequisites are required: No
Cost: Free for members; members only
Recommended CPEs: 0
Moderator Information
Tino Stivaros
Senior Auditor, CPA
Tino Stivaros, CPA, is a Senior Auditor at the University of Washington, where he leads investigations into ethics violations and losses of state resources across a multi-campus university and hospital system. With over a decade of experience in internal audit, compliance, and investigations, Tino has held senior roles in higher education, state government, and public transit — including Audit Chief at the Vermont Agency of Transportation and Senior Auditor at the MTA Office of the Inspector General in New York.
Tino holds an M.S. in Accountancy from Baruch College, CUNY, and a B.A. in Philosophy, Summa Cum Laude, from the University of Massachusetts Amherst.
Ashvin Thomas
IT Audit Manager
Ashvin Thomas is an IT Audit Manager with the University of Washington’s Internal Audit team in Seattle. He coordinates and executes IT audits across the University, including managing the IT portion of the annual audit plan. His work covers information security, identity and access management, IT general controls, cloud platforms, disaster recovery, and major system changes (Workday and Epic). He holds CISA and CIA certifications.