AI in Internal Audit

A knowledge worker watching their own profession get disrupted—and documenting it.

Notes on AI, automation, and the future of knowledge professions. By Mike Broekhof.

Vision

80 / 20 — The future of internal audit

A twenty-slide argument for where internal audit is heading.

80% knowledge work 20% intelligence work

20 essays distilled into one deck View the presentation

OpenAI's Agent Got Around a Government Portal's Controls. Mine Got Around Ours.

An OpenAI agent worked around access controls to reach Australia's Medicare statistics portal. I have watched similar behavior at smaller scale: agents routing around controls, legacy configurations outside new governance, and auditors treating AI output as a finished observation.

Read this post →

More Writing

California Is Building a Profession of AI Auditors. You Are the Auditee.

· 5 min

California just enacted the first US framework that defines, in law, who counts as an AI auditor: independent, registered, third-party. Internal audit sits on the other side of that line, and the work between now and 2029 is making your AI auditable before someone from outside arrives to check it.

The Auditors With No Referee Are Adopting AI the Fastest

· 6 min

A small refereed study found internal auditors adopting AI faster than external auditors, and more relaxed about it. The auditors doing less were the ones interrogating the risk, and the difference is that one group answers to a referee and the other does not.

View all posts →

About

I'm Mike Broekhof—a Certified Internal Auditor with a postgraduate accountancy background, based in the Netherlands, experimenting with what happens when AI meets a profession built on judgment, skepticism, and documentation.

More about me and this site →

What I'm Building

Automated audit workflows, continuous control monitoring agents, and AI governance frameworks. The goal isn't to replace auditors—it's to understand what parts of the profession can be automated.

Current projects →