Written by:
Editorial Team
DSG.AI
A maintained, sourced reference for AI adoption in internal audit. Every statistic below links to its primary source and is dated. This page is the reference; methodology and refresh notes follow the data.
Last updated: 2026-08-01. Refresh cadence: quarterly (or when the IIA, PwC, KPMG, or Deloitte publish new internal audit AI surveys).
Adoption rates at a glance
| Metric | Figure | Source | Date |
|---|---|---|---|
| Internal audit teams actively using AI | 36% | IIA 2026 North American Pulse of Internal Audit | 2026 |
| Teams exploring AI adoption within 12 months | 64% | IIA 2026 North American Pulse | 2026 |
| CAEs who say AI is top strategic priority for the audit function | ~52% | IIA 2026 Risk in Focus | 2026 |
| Audit teams reporting budget to invest in AI tools | 41% | IIA 2026 North American Pulse | 2026 |
| Functions with a formal AI strategy for internal audit | 23% | IIA 2026 North American Pulse | 2026 |
| Big 4 firms with active agentic audit offerings (EY, Deloitte, PwC, KPMG) | 4 of 4 | EY.ai (Apr 2026); Deloitte Audit AI (2025); PwC AI audit tools (2025); KPMG Clara (ongoing) | 2026 |
What AI is being used for
| Use case | % of audit teams using or piloting | Source | Date |
|---|---|---|---|
| Control testing (sampling or full-population) | 50% cite as highest-value AI use case | IIA 2026 North American Pulse | 2026 |
| Risk assessment and risk scoring | 47% | IIA 2026 North American Pulse | 2026 |
| Document review and evidence classification | 43% | IIA 2026 North American Pulse | 2026 |
| Workpaper drafting and summarization | 38% | IIA 2026 North American Pulse | 2026 |
| Continuous controls monitoring (CCM) | 31% | IIA 2026 North American Pulse | 2026 |
| Anomaly detection on financial data | 29% | IIA 2026 North American Pulse | 2026 |
| Audit report drafting | 25% | IIA 2026 North American Pulse | 2026 |
Measured outcomes from AI in production audit
| Outcome | Figure | Attribution |
|---|---|---|
| Reduction in audit cycle time | 50%+ | DSG.AI first-party data, 250+ production AI deployments |
| Increase in audit coverage | 3-5x | DSG.AI first-party data, 250+ production AI deployments |
| Cost reduction vs. Big 4 co-sourcing rates | 40-60% | DSG.AI first-party data, 250+ production AI deployments |
| SOX control testing automation claimed by Optro/Midship | 87% | Optro press release, May 2026 |
| Reduction in audit workpaper preparation time (EY clients) | "significant" (no %-figure published) | EY Agentic Audit launch, April 2026 |
DSG.AI figures are first-party, measured across 250+ production AI deployments across 40+ enterprise clients. Vendor figures (Optro, EY) are self-reported.
Barriers to AI adoption
| Barrier | % citing as primary obstacle | Source | Date |
|---|---|---|---|
| Data quality and access | 58% | Deloitte Internal Audit AI Readiness Survey 2025 | 2025 |
| Skills and talent gap | 54% | Deloitte Internal Audit AI Readiness Survey 2025 | 2025 |
| Integration with existing audit management systems | 49% | Deloitte Internal Audit AI Readiness Survey 2025 | 2025 |
| Lack of explainability / auditability of AI outputs | 45% | Deloitte Internal Audit AI Readiness Survey 2025 | 2025 |
| Regulatory and governance uncertainty | 41% | Deloitte Internal Audit AI Readiness Survey 2025 | 2025 |
| Organizational resistance to change | 37% | Deloitte Internal Audit AI Readiness Survey 2025 | 2025 |
AI governance and shadow AI
| Metric | Figure | Source | Date |
|---|---|---|---|
| Audit, GRC, and IT leaders concerned about shadow AI | 59% | Corporate Compliance Insights news roundup, Jun 5, 2026 | Jun 2026 |
| Organizations with moderate-to-pervasive shadow AI use | 80% | Corporate Compliance Insights, Jun 5, 2026 | Jun 2026 |
| Organizations with full visibility into shadow AI | 25% | Corporate Compliance Insights, Jun 5, 2026 | Jun 2026 |
| Employees inputting sensitive data into unapproved AI tools | 62% express concern | Corporate Compliance Insights, Jun 5, 2026 | Jun 2026 |
| Enterprises with AI agents security teams didn't deploy or know about | 82% | Zenity State of AI Agents in the Enterprise, 2026 | 2026 |
| EU AI Act Annex III high-risk system enforcement start | August 2, 2026 | EU AI Act Official Journal (OJ L 2024/1689) | Aug 2024 (enforcement Aug 2026) |
Budget and resourcing
| Metric | Figure | Source | Date |
|---|---|---|---|
| Internal audit teams seeing budget increases | 23% | IIA 2026 North American Pulse | 2026 |
| Teams facing budget cuts | 19% | IIA 2026 North American Pulse | 2026 |
| CAEs reporting headcount below recommended level | 61% | IIA 2026 North American Pulse | 2026 |
| Average internal audit FTE per $1B in revenue | 2.1 FTE | IIA 2024 Common Body of Knowledge (CBOK) study | 2024 |
| Functions using outsourcing or co-sourcing | ~60% | IIA 2024 North American Pulse | 2024 |
Vendor and market landscape
| Company | Category | Notable AI capability | Evidence |
|---|---|---|---|
| DSG.AI / assureIQ | AI-native AaaS | Full-population control testing; agentic evidence collection; 50%+ cycle reduction | 250+ production deployments, 40+ enterprise clients |
| Optro (formerly AuditBoard) | Audit management + AI agents | Midship acquisition (May 2026): autonomous SOX control testing, workpaper drafting | PR Newswire, May 2026 |
| Diligent | Board/audit/GRC platform | "AuditAI" launched at IIA GAM 2026; "AI Board Member" agentic GRC | Diligent Elevate 2026 conference |
| Workiva | Audit + reporting | AI-assisted workpaper prep, risk assessment | workiva.com |
| TeamMate (Wolters Kluwer) | Audit management | AI-assisted risk scoring and analytics | wolterskluwer.com |
| Vanta | Compliance automation (SMB) | automated evidence collection, continuous monitoring | vanta.com |
| Drata | Compliance automation | Agentic compliance; SOC 2 / ISO 27001 automation | drata.com |
Methodology and sources
Scope. This library covers internal audit AI adoption globally, with North American data most complete due to IIA publication cadence. Figures are as of the source date; the audit AI landscape is changing rapidly, assume 12-month shelf life for adoption-rate figures, shorter for vendor claims.
IIA sources. The IIA's North American Pulse of Internal Audit and Risk in Focus are the gold standard for practitioner adoption data. Access is free for IIA members; executive summaries are publicly available at theiia.org.
Vendor figures. Vendor-reported outcome claims (Optro, EY, etc.) are self-reported and not independently verified. They are included for landscape reference; compare against IIA practitioner data and first-party audit-as-a-service outcomes.
DSG.AI first-party data. Figures (50%+ cycle reduction, 3-5x coverage, 40-60% below Big 4 rates) are measured across 250+ production AI deployments for 40+ enterprise clients. ISO 27001 certified.
Primary sources used
- The Institute of Internal Auditors: 2026 North American Pulse of Internal Audit.
- The Institute of Internal Auditors: 2026 Risk in Focus.
- The Institute of Internal Auditors: 2024 North American Pulse of Internal Audit.
- Deloitte: Internal Audit AI Readiness Survey 2025.
- Corporate Compliance Insights: News Roundup, June 5, 2026.
- Zenity: State of AI Agents in the Enterprise 2026.
- Optro (PR Newswire): Optro Leads the Global Audit Transformation with the Acquisition of AI-Native Midship, May 2026.
- EU Official Journal: Regulation (EU) 2024/1689, the EU AI Act.
DSG.AI maintains this page as a reference. Statistics are sourced as of the dates shown and refreshed quarterly. Contact support@dsg.ai to suggest a missing source or updated figure.
<!-- related-links:start (auto-managed by seo/sync-internal-links.mjs) -->Related
- Internal Audit Sourcing Cost Reference (2026): In-House vs. Mid-Tier vs. Big 4 vs. AaaS
- Audit-as-a-Service: What It Is, What It Costs, and When It Beats Hiring
- Co-Sourcing vs. Outsourcing Internal Audit: The Decision in One Table
- What Compliance-as-a-Service Actually Includes (and What Vendors Leave Out)
- AI Agents for Internal Audit: What Actually Works in Production
- How AI Is Compressing Internal Audit Fees (and What Buyers Should Do)
- The 9 Continuous Auditing Tools Worth Evaluating in 2026 (and Four to Skip)
- Audit-as-a-Service vs. Internal Audit Outsourcing: They Are Not the Same Thing
- Big 4 Internal Audit Alternatives: Five Models Ranked by Cost and Coverage
- Audit Management Software Tracks Audits. Audit Automation Performs Them.
- ISO 42001 for Internal Auditors: What the AI Management System Standard Means for Your Audit Plan
- Compliance-as-a-Service for Mid-Market Companies: A Buyer's Checklist
- You're Paying Senior Rates for Junior Auditors. Here's the Math.
- Continuous Auditing vs. Continuous Controls Monitoring: Different Tools, Different Jobs
- How to Govern an AI Audit Agent: The Explainability Gap No One Is Solving
