Stop Staring at a Blank Page: How Auditors Can Use AI to Create Better Audit Content
- John Blackshire
- Aug 22
- 8 min read
AI Content Generation for Finance and Audit Professionals — September 15 and November 10, 2026
Internal Auditors create an enormous amount of content.
Risk assessments. Audit objectives. Audit programs. Interview questions. Workpapers.
Findings. Compliance analyses. Executive summaries. Audit reports. Audit Committee presentations.
Traditionally, much of that work starts with a blank page.
Artificial intelligence is changing that.
The important question for auditors is no longer simply:
“Can AI write something for me?”
The better question is:
“How can I use AI to produce better audit content faster—without surrendering professional judgment?”
Corporate Compliance Seminars' AI Content Generation for Finance and Audit Professionals addresses that question in a practical 2-CPE program presented by John C. Blackshire, Jr., Retired CPA and Co-Founder of Corporate Compliance Seminars. The program covers AI-assisted risk assessments, audit plans, workpapers, criteria reviews, policy analysis, fraud detection, reporting and other applications throughout the audit process.
Two upcoming sessions provide opportunities to attend:
Tuesday, September 15, 2026
Tuesday, November 10, 2026
AI Content Generation Is Much Bigger Than Writing Audit Reports
When auditors first experiment with generative AI, they often start with writing.
“Rewrite this paragraph.”
“Summarize this document.”
“Make this finding more concise.”
Those are useful applications.
But they barely scratch the surface.
CCS's program examines AI content generation across the audit lifecycle, including risk assessments, audit plans, criteria verification, workpapers, policy and procedure reviews, compliance reports and audit reporting. The course also addresses integrating AI-generated content into traditional audit methodologies while maintaining accuracy, compliance and human oversight.
The potential workflow looks more like this:
Understand the Objective
→ Identify Risks
→ Develop Audit Questions
→ Evaluate Controls
→ Develop Audit Procedures
→ Analyze Evidence
→ Document Workpapers
→ Evaluate Exceptions
→ Develop Findings
→ Communicate Results
AI can potentially assist the auditor at nearly every stage.
Start With Risk Assessment
Imagine being assigned an audit of procurement.
You could begin by opening last year's audit program.
Or you could use an approved AI tool to challenge your thinking.
For example:
“Identify the major operational, financial, compliance, fraud and technology risks associated with this procurement process. For each risk, identify potential controls and questions an Internal Auditor should investigate.”
That doesn't constitute the risk assessment.
It gives the auditor a starting point for professional analysis.
The auditor determines which risks actually apply.
This distinction is essential.
AI generates possibilities. The auditor makes professional judgments.
CCS specifically includes using AI to create risk assessments and audit plans aligned with professional standards.
AI Can Help Develop Better Audit Objectives
Auditors sometimes begin engagements with objectives that are too broad.
For example:
“Review Accounts Payable.”
What exactly does that mean?
AI can help transform a vague scope into more specific potential objectives.
For example:
“Develop potential audit objectives addressing vendor onboarding, invoice processing, payment authorization, duplicate payments, vendor-master changes and fraud risk.”
Now the auditor has something to evaluate.
Which objectives matter?
Which fit the engagement scope?
Which risks are significant?
AI helps accelerate the thinking process.
Develop Better Walkthrough Questions
This is another excellent application.
Auditors sometimes ask terrible walkthrough questions.
“Do you follow the policy?”
“Are invoices approved?”
“Do you review vendor changes?”
Those questions practically invite the answer:
“Yes.”
Instead, provide AI with an appropriate process description and ask it to develop open-ended walkthrough questions.
The results might include:
“Walk me through the last vendor you established.”
“What happens when the normal approver isn't available?”
“Describe the last invoice you rejected and why.”
“Who can change vendor banking information?”
“What happens after someone makes that change?”
Those questions help the auditor understand what people actually do, rather than merely confirming what the policy says they should do.
AI Can Help With Criteria Review
Audit findings need criteria.
What should have happened?
That criteria may come from:
Organizational Policies
COSO
IIA Standards
PCAOB Standards
GAO Green Book
Laws and Regulations
Contracts
Industry Requirements
Other Authoritative Guidance
CCS specifically includes criteria verification and review among its AI applications, including an example involving ChatGPT summarizing and comparing audit criteria with compliance standards.
AI can dramatically accelerate this research.
But there is a non-negotiable rule:
Verify important criteria against the authoritative source.
An AI-generated quotation or regulatory requirement should not become audit criteria simply because the answer sounds authoritative.
AI Can Review Policies and Procedures
Suppose Internal Audit receives a 75-page policy manual.
The traditional approach requires an auditor to read it, take notes, identify important requirements and compare them with actual practices.
AI can assist with the first analytical pass.
For example:
“Identify the key control requirements in this policy. Organize them by process objective, risk, control activity and responsible party.”
Then:
“Identify provisions that appear inconsistent, ambiguous or incomplete.”
Then:
“Develop walkthrough questions to determine whether these requirements are actually being performed.”
CCS includes policy and procedure review—specifically identifying gaps and inconsistencies—among the audit content applications covered by the program.
Workpapers May Be One of AI's Biggest Productivity Opportunities
Audit documentation consumes enormous amounts of professional time.
AI can help convert properly validated auditor notes into structured workpapers.
A useful workpaper structure might be:
Objective
↓
Risk
↓
Procedure
↓
Evidence
↓
Results
↓
Exceptions
↓
Conclusion
The CCS course specifically identifies audit workpapers as an AI content-generation application.
The auditor could provide appropriate source information and instruct AI:
“Using only the information provided, organize these testing results into a workpaper narrative. Do not create facts, evidence or procedures that are not documented. Clearly identify anything necessary to support the conclusion that is missing.”
That last sentence is important.
We don't want AI merely making the workpaper sound good.
We want it helping identify what is missing.
Use AI as the Audit Manager
This may be even more valuable than using AI as the writer.
Once the workpaper is drafted, change the role of the AI.
Tell it:
“Act as an experienced Internal Audit Manager reviewing this workpaper.”
Then ask:
“Does the audit procedure address the stated risk?”
“Which conclusions lack sufficient documented evidence?”
“Which exceptions require additional investigation?”
“What questions would you send back to the preparer?”
“Where does the auditor appear to rely primarily upon management representations?”
Now AI becomes a quality-control tool.
That is a much more sophisticated application than grammar correction.
Use AI to Develop Findings
Audit findings also lend themselves to structured AI assistance.
Consider the classic finding model:
Condition — What happened?
Criteria — What should have happened?
Cause — Why did it happen?
Consequence — What risk or impact results?
Corrective Action — What should change?
The auditor can provide validated evidence and ask AI to organize it into that framework.
But include an important instruction:
“If the evidence does not establish the cause, say that the cause has not been established. Do not infer one.”
That is critical.
AI's tendency to produce a complete-sounding answer can be dangerous in auditing.
Sometimes the correct answer is:
We don't have enough evidence yet.
Red-Team Your Own Audit Finding
After AI helps draft a finding, don't ask it to keep improving the same argument.
Make it attack the argument.
For example:
“Assume management strongly disagrees with this finding. Develop the strongest evidence-based argument management could make against the finding.”
Then examine what AI identifies.
Maybe:
The criteria is weak.
The sample isn't persuasive.
The cause wasn't established.
The consequence is overstated.
Contradictory evidence wasn't addressed.
The recommendation doesn't address the root cause.
That is valuable.
The objective of Internal Audit isn't to win an argument with management.
It is to reach a defensible conclusion.
AI Can Help Write for Different Audiences
The same audit issue may need to be communicated to very different audiences.
The process owner needs details.
The Chief Audit Executive needs the significance.
The CFO may need financial exposure.
The Audit Committee needs governance implications.
AI can help translate the same validated evidence for each audience.
For example:
“Rewrite this finding for an Audit Committee audience. Preserve the underlying facts and risk rating, but focus on the governance implications and corrective action requiring oversight.”
That can make Internal Audit communication considerably more effective.
AI Can Turn Findings Into Audit Committee Insight
An Audit Committee rarely needs every detail from every workpaper.
It needs to understand:
What happened?
Why does it matter?
How significant is it?
Is it isolated or systemic?
What is management doing about it?
When will it be corrected?
AI can help synthesize multiple findings into:
Executive summaries
Risk themes
Governance dashboards
Corrective-action summaries
Audit Committee questions
Presentation outlines
This moves Internal Audit from merely reporting findings toward providing organizational insight.
John C. Blackshire, Jr. Brings the Auditor's Perspective
The course was created by and is presented by John C. Blackshire, Jr., Retired CPA, Co-Founder of Corporate Compliance Seminars. The current program specifically includes ChatGPT in its discussion of natural-language-processing tools for summarizing complex information, drafting reports and comparing audit criteria.
That distinction matters.
Auditors do not need generic demonstrations showing that AI can write a poem, marketing slogan or vacation itinerary.
They need to understand:
How does this help me perform an audit?
The September and November sessions concentrate on that professional use case.
The Blank Page Should Become Less Common
Think about how much professional time auditors spend creating first drafts.
First draft of the risk assessment.
First draft of the audit plan.
First draft of the walkthrough questions.
First draft of the workpaper.
First draft of the finding.
First draft of the report.
Generative AI changes the workflow:
Auditor Defines the Objective
↓
Auditor Provides Appropriate Context
↓
AI Generates a Draft
↓
Auditor Challenges the Draft
↓
Auditor Verifies the Evidence
↓
Auditor Applies Professional Judgment
↓
Auditor Produces the Final Work
That is not replacing the auditor.
It is reallocating professional time away from generating words and toward evaluating ideas and evidence.
But AI Can Also Produce Bad Audit Work Faster
This is the warning every Internal Audit leader needs to understand.
Suppose an auditor does not understand internal controls.
AI can generate a beautiful control analysis.
Suppose the auditor doesn't understand audit evidence.
AI can generate a beautifully written unsupported conclusion.
Suppose the auditor doesn't understand risk.
AI can generate a 25-page risk assessment containing irrelevant risks.
The product looks professional.
That doesn't make it correct.
Professional-looking bad audit work may become one of the most important AI risks facing Internal Audit departments.
That is why AI skills and audit skills need to develop together.
Confidentiality and Human Oversight Matter
CCS's course explicitly addresses bias, data security, privacy, regulatory compliance and human oversight when integrating AI into audit processes.
Internal Auditors routinely handle:
Employee information
Financial information
Cybersecurity vulnerabilities
Investigation records
Customer data
Audit Committee communications
Fraud allegations
Legal information
An auditor cannot assume that sensitive organizational information can simply be pasted into any public AI tool.
The organization's AI governance and information-security requirements still apply.
Two Opportunities to Build the Skill in 2026
CCS's AI Content Generation for Finance and Audit Professionals is offered as a two-hour program providing 2 CPE credits in Auditing. The course is classified as Basic to Intermediate and identifies access to ChatGPT Plus for post-event exercises, with AI Prompting Essentials listed as advance preparation.
Two upcoming sessions are:
Tuesday, September 15, 2026
A good opportunity for auditors already experimenting with ChatGPT or other generative AI tools to begin applying them systematically to audit content.
Tuesday, November 10, 2026
A particularly useful opportunity for Internal Audit departments looking ahead to their 2027 risk assessments, annual audit plans and audit methodology improvements.
That November timing deserves emphasis.
Instead of preparing the 2027 audit plan exactly as the department prepared the 2026 plan, ask:
Where can AI make our 2027 audit process faster, more analytical and more effective?
The Bottom Line: Don't Delegate Professional Judgment—Amplify It
AI's greatest value to Internal Audit isn't that it can write faster.
The bigger opportunity is that it can help auditors:
Generate more possibilities.
Ask better questions.
Challenge assumptions.
Analyze more information.
Identify documentation gaps.
Improve communication.
Red-team conclusions.
Reduce time spent creating first drafts.
But the auditor remains responsible.
AI does not own the audit objective.
AI does not determine whether evidence is sufficient.
AI does not exercise professional accountability.
AI does not sign the report.
The auditor does.
That leads to the operating model Internal Audit leaders should be pursuing:
AI generates. The auditor evaluates.
AI challenges. The auditor investigates.
AI drafts. The auditor verifies.
AI accelerates. The auditor remains accountable.
That is how generative AI can improve audit productivity without sacrificing audit quality.
Corporate Compliance Seminars' AI Content Generation for Finance and Audit Professionals on September 15 and November 10, 2026 is designed to help auditors start putting that model into practice.
Comments