On June 6, 2025, generative AI (GenAI) took center stage at the IIA Congress, where the IIA-ISACA AI working group successfully returned to the stage for the second time. In an inspiring session, three frontrunners of the group – Dwayne Valkenburg, Imran Nashir, and Rishi Djairam – shared their vision on how GenAI can serve not just as a risk, but more importantly, as a powerful solution for the internal audit function. 

A Working Group with Impact 

The working group, a joint initiative by IIA and ISACA Netherlands, supports auditors in the Netherlands both strategically and practically in the adoption of GenAI. Their approach? Not just talking about technology, but showing how it works,  as they once again demonstrated at the IIA Congress 2025. 

The Speakers 

  • Dwayne Valkenburg RE CISA, founder of AuditAgent, emphasized the need for a clear GenAI strategy. “We need to stop viewing AI solely as a risk. It’s an opportunity to empower auditors, increase efficiency, and enhance insights.” 
  • Imran Nashir RE CISSP, Senior Audit Manager at KPN, walked the audience through the roadmap for implementing GenAI in audit. He highlighted the importance of practical tools such as prompt libraries and integrating AI into existing methodologies. 
  • Rishi Djairam RA RO, partner at Helpside Audit & Risk, discussed the value of fine-tuning and knowledge bases. “Only when GenAI is enriched with domain-specific knowledge does its output become truly relevant. Think of custom dashboards, report templates, and internal standards.” 
1749227252531

GenAI Roadmap: From Prompt to Agent 

The session was built around a clear GenAI roadmap consisting of five maturity levels: 

1749227252295

  1. Prompting – mastering the art of effective interaction with AI. 
  1. Prompt Library – reusable and standardized prompts. 
  1. Fine-tuning – tailoring AI with audit-specific knowledge. 
  1. Knowledge Base – feeding AI with organizational knowledge for improved outcomes. 
  1. AI Agents – autonomous assistants that support or even partially perform audit tasks. 

Each step was richly illustrated with practical examples, live polls, and tools such as the WhatsApp community, which further engaged the audience. 

Looking Ahead 

The working group called on auditors to step off the sidelines and get actively involved. GenAI is not a distant future – it is happening now. With a clear message to start experimenting, invest in skills, and leverage existing tools, it became evident: internal audit can — and must — take the lead in the responsible and innovative use of AI. 

Through a free email course and in-depth workshops, the working group promotes knowledge sharing, skill development, and collective growth. In doing so, the IIA-ISACA AI working group contributes to a future-proof audit function – driven by technology, but led by people.