The Future of IT Audit: Key Changes in ITAF 5

About this episode

This episode discusses the evolution of IT audit and assurance in the context of modern technology and the updates in ITAF 5.

Technology is transforming how organizations operate — and IT audit and assurance must evolve alongside it. In this episode, Paul Phillips sits down with Mary Carmichael, contributor to the newly updated IT Audit and Assurance Framework (ITAF 5), to discuss how audit professionals can adapt to today’s increasingly complex digital enterprise. Together, they explore the major shifts shaping modern audit, including AI governance, digital ecosystems, automation, evolving risk landscapes, cloud environments, and the growing need for stronger data literacy within audit teams. Mary also shares practical guidance on how organizations can begin modernizing their audit approach without overhauling everything overnight. Key discussion topics include: The evolution from traditional control testing to outcome-based assurance Why audit teams need stronger technology and data capabilities AI governance, automation, and digital risk considerations Building practical audit modernization strategies How ITAF 5 supports governance, credibility, and audit relevance in modern enterprises Whether you're an auditor, governance professional, cybersecurity leader, or risk practitioner, this conversation…

People in this episode

Host: Paul Phillips

Guest: Mary Carmichael

Topics covered

• IT audit
• assurance
• digital transformation
• AI governance
• audit modernization
• data literacy

Keywords

• IT audit
• ITAF 5
• digital ecosystems
• automation
• risk landscapes
• data capabilities
• audit strategies

Mentioned in this episode

Organizations: ISACA

Products: IT Audit and Assurance Framework (ITAF 5)

More episodes of ISACA Podcast

• ​​Breaking the Compliance Mentality​ · May 21, 2026 · 24 min
• Audit-Ready by Design: How AI Powers Smarter Identity Security · May 19, 2026 · 26 min
• SheLeadsTech Fireside Chat: Celebrating Women in Cybersecurity · March 4, 2026 · 51 min
• Humans Are IT Security’s Weakest Link · March 3, 2026 · 50 min
• Secure Your Privacy: A security and privacy podcast: real conversations, real consequences, real solutions? · February 19, 2026 · 1h 15m
• Securing Data in the Age of AI with DSPM: Lessons from a High-Impact ISACA Webinar · February 12, 2026 · 26 min