What the failure to prevent fraud duty means for your 2026 audit plan
The ECCTA duty is in force. Here is how internal audit functions should be responding — from scoping to reporting — and what the Home Office's six principles mean in practice.
Insights
Practical guidance,
written by practitioners
Analysis on internal audit, regulatory change, and career development — covering the issues that matter to audit and risk professionals in UK financial services. We publish when we have something worth saying.
How to manage an FCA supervisory review without losing audit independence
When the FCA comes in, the pressure on internal audit to be helpful can compromise its independence. This piece sets out how to navigate that tension while keeping the audit function credible.
Building an IIA-aligned methodology from scratch: a practical framework
Many internal audit functions operate without a formally documented methodology. This guide sets out the essential components aligned to the IIA's Global Internal Audit Standards.
Consumer Duty one year on: what the FCA's findings mean for audit functions
The FCA's first wave of Consumer Duty supervisory work has produced findings that internal audit teams need to understand. Here is what the regulator found and what it means for your audit plan.
Co-sourcing versus outsourcing your internal audit function: how to decide
Both models have merit in different circumstances. This piece sets out the key considerations — cost, control, specialism, and regulatory expectations — to help boards and audit committees make the right call.
Making the move from in-house audit to consultancy: what changes and what does not
The transition from a permanent internal audit role to consultancy looks straightforward from the outside. Having made that move, here is an honest account of what to expect.
Financial crime audit in 2025: what the FCA expects from internal audit functions
The FCA's expectations of internal audit in relation to financial crime have continued to evolve. This piece draws on recent enforcement and supervisory activity to set out what good looks like.
How to run an effective audit committee presentation: a practitioner's guide
Audit committee relationships are critical to the effectiveness of internal audit. This guide covers preparation, structure, handling challenges, and how to present findings that drive action.
Getting your first Head of Internal Audit role: what panels are actually looking for
The gap between good senior auditor and credible Head of Audit candidate is wider than most people expect. An honest assessment of what panels look for — and what typically rules candidates out.
Work with us
Facing one of the issues covered here?
If an article has raised a question that is relevant to your organisation, we are happy to have a conversation about your specific situation — no strings attached.
Written by
Kyle McMullan
Founder, the audit hub
25 years in senior financial services internal audit and risk advisory. All insights are written from direct practitioner experience.
Connect on LinkedInWant to discuss any of these topics?
If something you have read here is relevant to a challenge you are working through, we are happy to talk it through. No obligation, no sales process.