Governance Unplugged - Internal Audit, Risk & Controls

Thomas Michel
  • 5.0 (1)
  • Business

Governance Unplugged is a podcast dedicated to exploring the essential pillars of sound governance to help organizations thrive in today’s dynamic business environment. Designed for internal auditors, risk managers, senior management and board members, the podcast delves into how robust governance, risk management, and internal controls lay the foundation for organizational safety and prosperity. By providing meaningful insights and practical strategies, the podcast aims to equip listeners with interesting insights supporting their needs to safeguard their organizations and ensure long-term success.

  1. 2d ago

    Ep 24: Signal, Sensor & Story feat. Ana Riva

    The Radar, Not the Mirror Signal, Sensor and Story: Transforming Internal Audit from Assurance to Anticipation Governance Unplugged: Internal Audit, Risk & Controls | Episode 24 Host: Thomas Michel | Guest: Ana Riva, Head of Group Internal Audit, Syngenta Episode Summary A bridge collapses. One person explains why it failed. Another designs a bridge that never collapses. For most of its history, Internal Audit has been the first person: an excellent historian. But business now moves at Formula One speed, while many audit functions still report through the rear-view mirror. Thomas Michel talks with Ana Riva, Head of Group Internal Audit at Syngenta, about how Internal Audit can move from assurance to anticipation and become the organization's strategic radar. Her answer: three things working as one system. The signal (clarity over existing and emerging risks), the sensor (AI and digital tools for real-time, full-population auditing), and the story (the discipline of turning findings into action). About the Guest Ana Riva leads Group Internal Audit at Syngenta, one of the world's largest agriculture and crop science businesses. She has also served as an independent member of the Risk Management and Sustainability Committee of Ignitis Group, giving her a view from both sides of the table. In This Episode [00:00]  Cold open: the historian and the architect [00:00]  Why now? From assurance to anticipation [00:00]  The signal: clarity over existing and emerging risks [00:00]  Building the forecast in practice [00:00]  The sensor: AI and the end of the sample [00:00]  Getting started with AI: experiment, then scale [00:00]  The story: storytelling as a discipline [00:00]  Signal, sensor and story together, plus key takeaways What You Will Learn ▪     Why the forecast of emerging risks, not today's weather, earns Internal Audit its seat at the table ▪     Audit's forgotten superpower: an independent, enterprise-wide view that connects the dots between silos, without ever grabbing the wheel ▪     How AI ends the "tyranny of the sample," turning an annual photograph into a live video ▪     Why AI should not shrink the audit function, and where the time saved should go ▪     How Syngenta is starting with AI: pattern analysis of ten years of audit reports, control matrices, and report writing ▪     Three questions every audit report should answer: Why does this matter? What could happen? What should we do next? Memorable Quotes “Nobody ever changed their behavior because of a risk heat map.” “The data analysis is what makes audit results right. The story is what makes audit results matter.” “The most correct warning in the world is worthless if nobody turns the wheel.” A Challenge for Listeners Look at the last report you sent to your committee. Was it a screen full of accurate blips, or one sentence someone could act on? And when the next big decision comes, will the business call you into the room before it is taken? Connect with Ana Riva LinkedIn: https://www.linkedin.com/in/anariva

  2. Aug 25

    Ep 23: Speak the Truth, Not Loudly, But in Time feat. Martin Studer

    Full version of the Manifesto can be shared upon request by email: thomas.michel@keystone-governance.ch Personal Manifesto of Internal Audit by Martin Studer Internal audit is not a technical function. It is an institution of trust. It exists because organisations are human systems: vulnerable, incentive-driven, pressured, political, ambitious – and imperfect. Where incentives distort judgement, where bad news evaporates on its way up, and where complexity overwhelms individual oversight, structural risk emerges. That is where internal audit begins. Not to control. Not to please. But to speak the truth early enough for it to still matter. Independence is our only real asset. Not as a principle on paper, but as an operating condition: organisationally protected, intellectually grounded, emotionally resilient, and ethically non-negotiable. Without independence, internal audit becomes scenery. With it, it becomes an institution. Independence means accepting the price of solitude. It means not needing approval to be right. It means enduring criticism without becoming quiet – and exerting influence without becoming arrogant. Assurance is not produced. It is granted. . . . Internal audit is not a career of comfort. It is a career of responsibility. Those who take it seriously gain something rare: the ability to see how organisations truly function – behind presentations, beyond narratives, beneath formal structures. That understanding is not a career step. It is long-term capital. It survives crises. It transcends industries. It protects value, trust, and strategic freedom. And sometimes – not often, but decisively – it allows us to change the course of decisions with clear words. Not loudly. But in time.

  3. Jul 7

    Ep 22 (PART 2): The Internal Auditor of Tomorrow: Why AI Raises the Bar feat. Hervé Gloaguen

    The Internal Auditor of Tomorrow: Why Artificial Intelligence Raises the Bar (Part 2) 💥 In the second part of my conversation with Hervé Gloaguen https://www.linkedin.com/in/hervé-gloaguen-5348ab9/, former Group Chief Audit Executive and Group Chief Compliance Officer of Allianz, we move from the what to the how. And Hervé does not hold back. His big idea: internal audit should not protect its own people. It should be a talent incubator for the whole organization. 🌱 That means attracting the best, developing them intensively, and then, the truly hard part, having the courage to let them fly. In his own words: “I need to cut my right arm regularly.” 💪 A few provocations that stayed with me: 🔹 Around 70% of an audit team should be non career auditors, talented people passing through, not staying for life. 🔹 A Chief Audit Executive should serve a maximum of about eight years. Fresh eyes matter. 🔹 Real growth comes from movement, across functions, geographies and roles. You are the manager of your own career. And on the eternal budget debate, his insurance cover metaphor is brilliant: it is not about praying for more headcount, it is about advising the board on how much safety they truly want. 🛡️ His closing advice to every head of audit? Do not hire the next you. And keep a good sense of humour. 😊 If you missed Part 1, start there, then come back for this one. #InternalAudit #Governance #RiskManagement #Leadership #TalentManagement #AuditAndAssurance #GovernanceUnplugged

  4. Jun 30

    Ep 22 (PART 1): The Internal Auditor of Tomorrow: Why AI Raises the Bar feat. Hervé Gloaguen

    The Internal Auditor of Tomorrow: Why Artificial Intelligence Raises the Bar (Part 1) 🤖 I had the real privilege of sitting down with Hervé Gloaguen @https://www.linkedin.com/in/hervé-gloaguen-5348ab9/, former Group Chief Audit Executive and Group Chief Compliance Officer of Allianz, where he led up to 900 auditors and 800 compliance officers across more than 40 countries. He has also sat firmly on the business side, as a board member, bank co chief executive and audit committee member. Few people have seen our profession from so many angles. And his message is refreshingly optimistic. 🚀 The headline? AI will not replace the auditor. It raises the bar. As the manual testing, the sampling and the first level analysis get automated, the human qualities become more decisive than ever: ✅ Professional skepticism and critical thinking ✅ The ability to communicate and to persuade ✅ Integrity and ethical behaviour Hervé also unpacks the idea of the T shaped auditor, the importance of a genuine risk mindset, and why the great auditor is part diplomat, part curious investigator and, perhaps surprisingly, deeply humble. Think Inspector Colombo, but turbocharged. 🕵️ And he challenges one of our most comfortable habits: the belief that an audit team should be built mainly from accountants. The dream team of tomorrow is younger, leaner and far more diverse. 🧩 This is Part 1 of a rich two part conversation. Part 2 follows next week, and that is where it gets even bolder. 📅 👉 What do you believe raises the bar most for the auditor of tomorrow? I would love to read your thoughts. #InternalAudit #Governance #RiskManagement #AuditAndAssurance #ArtificialIntelligence #Leadership #GovernanceUnplugged

  5. Jun 16

    Ep 21: The Boardroom Does Not Care About Your Frameworks feat. Tonny W. Dekker

    In this episode, Thomas Michel interviews Tony W. DeKker, a former global head of business risk services at Ernst & Young, who now serves on various boards and teaches at Erasmus University. They discuss the gap between GRC science and the reality of the boardroom, the human factor in governance, and the art of risk discipline. They also explore the challenges of risk oversight, the strategic mistakes in cutting GRC functions, and the shortcomings of boardroom risk discussions. The conversation with Tonny Dekker covers the topics of risk management, governance, and the impact of AI on GRC. It emphasises the importance of human judgment, behavior, and emotional intelligence in board-level risk understanding and decision-making. Additionally, it explores the future of GRC and the challenges and opportunities presented by AI and technology. Takeaways Human behavior and the human factor play a significant role in the effectiveness of governance and risk oversight.The gap between GRC science and the reality of the boardroom presents challenges that require a balance between formalities and the art of risk discipline. Risk management is more of an art than a scienceThe future of GRC belongs to leaders with the courage to integrate, simplify, and embrace technology Chapters 00:00 Effective Risk Oversight in Boardrooms31:00 The Art of Risk Management38:19 The Future of Technology and GRC51:08 The Evolution of GRC Platforms

  6. May 19

    Ep 20: Modern Risk Management Must Drive Better Decisions feat. Prof. Stefan Hunziker

    The conversation delves into the purpose and challenges of modern risk management, the importance of risk management in decision-making, the limitations of traditional risk reporting, the role of quantification, and the integration of risk management with internal audit and compliance. It emphasizes the need for risk management to shape decisions under uncertainty and be integrated into the decision-making process, with a focus on better judgment, resilience, and closer integration with other governance functions. Takeaways Risk management must shape decisions under uncertaintyIntegrated risk management is a part of the decision-making processThe future of risk management involves better judgment, stronger resilience, and closer integration with internal audit, compliance, and leadership decisions Chapters 00:00 The Purpose of Modern Risk Management07:42 The Importance of Risk Management13:21 Practical Changes in Risk Management18:39 Decision-Relevant Risk Reporting24:15 Quantification in Risk Management31:29 Integration with Internal Audit and Compliance

  7. May 5

    Ep 19: AI Augmented Audits - A Roadmap to a Future Ready Internal Audit Function w/ Robert Zergenyi

    The conversation explores the transformative impact of AI on the internal audit function, emphasizing its role as a capability shift rather than just a tool. It delves into the practical implications of AI on the audit lifecycle, the importance of understanding different types of AI, the transformation of the internal audit function, and the future role of the internal auditor in an AI-enabled world. Takeaways AI as a transformative capabilityAI's impact on the audit lifecycle Chapters 00:00 AI as a Transformative Capability07:21 Understanding Different Types of AI

  8. Apr 21

    Ep 18: How Internal Audit Brings Reality to AI - Boards Need Truth, Not Tech Optimism w/ R. Zergenyi

    The conversation explores the impact of AI on organizations, the fiduciary responsibility of boards, AI regulation, building trust in responsible AI, defining decision authority, internal audit's role in AI, and the ideal superpower for AI oversight. Takeaways AI is a boardroom priorityStrong AI governance requires clarity in practiceInternal Audit plays a critical role in enabling safe and responsible transformation Chapters 00:00 The Reality of AI in Organizations06:55 Board Fiduciary Responsibility and Oversight12:16 AI Regulation and Board Perspective22:10 Defining Decision Authority and Ownership32:23 Superpower for AI Oversight

See All (26)

Ratings & Reviews

About

Governance Unplugged is a podcast dedicated to exploring the essential pillars of sound governance to help organizations thrive in today’s dynamic business environment. Designed for internal auditors, risk managers, senior management and board members, the podcast delves into how robust governance, risk management, and internal controls lay the foundation for organizational safety and prosperity. By providing meaningful insights and practical strategies, the podcast aims to equip listeners with interesting insights supporting their needs to safeguard their organizations and ensure long-term success.

Information

  • Creator
    Thomas Michel
  • Years Active
    2025 - 2026
  • Episodes
    26
  • Rating
    Clean
  • Copyright
    © 2026 Thomas Michel

You Might Also Like