A Practical Guide to AI Risk, Controls, and Audit Testing
Artificial intelligence is creating new opportunities for organizations, but it is also introducing new risks that internal auditors need to understand. Updated for 2026, this course incorporates current AI risk themes, recent news examples, and practical control considerations for today’s rapidly evolving AI environment.
This course helps auditors move beyond AI buzzwords and focus on the practical audit questions that matter: where AI is being used, what risks it creates, what controls should be in place, and how those controls can be tested.
Participants will explore key AI risk categories, including governance, inventory and use cases, data protection and privacy, model performance and reliability, bias and fairness, transparency, cybersecurity and AI misuse, and third-party and embedded AI. The course also connects those risks to specific internal controls and testing procedures, giving auditors a practical framework for evaluating whether AI safeguards are designed appropriately and operating effectively.
By the end of the course, participants will be better prepared to assess AI use cases, identify red flags, ask stronger audit questions, and provide meaningful assurance over AI-related risks without needing to become AI engineers.
Audit Smarter, not Harder - with Elizabeth and Audie the Internal Otteror!
Elizabeth McDowell, CPA, CIA has over 20 years of audit experience and is the founder of Audit Forward, an innovative internal audit consulting and training firm. Elizabeth is passionate about advancing and advocating for the internal audit profession and was recognized as one of the 2023 Internal Audit Beacons by Richard Chambers. Elizabeth makes auditing and training fun (no, really!) with the help of her mascot, Audie the Internal Otteror. Elizabeth’s most recent industry experience was at Achieve, where she was Sr. Director, Audit Strategy; prior to that, she held internal audit leadership roles at Elevations Credit Union, Fidelity Investments, and Xcel Energy after first starting her career at Ernst & Young.
This portal is provided as a training and development resource for City of Markham employees. Every course is delivered by a qualified subject matter expert or learning organization, is quantifiable in hours, and is verifiable — you receive a documented certificate of completion for every course you finish, stored on LearnFormula indefinitely.
If you hold a professional designation (for example in engineering, accounting, human resources, or law), courses may be counted as professionally relevant, verifiable learning activities toward your continuing professional development. Individual practitioners are responsible for confirming that an activity meets the requirements of their professional body. For questions about the City of Markham's training and development policies, please speak with your people leader or Human Resources.
