I’m Tim Buckley, and this is the weekly Beyond the Lines™ newsletter.

This week, I want to look at AI through a more commercially useful lens than most of the market is doing.

Not as a novelty. Not as a scare story. And not as a generic efficiency conversation.

I want to look at it through the lens that matters most for internal audit leadership:

That is the real strategic question. Because AI will not apply equal pressure across the role. It will compress more routine, lower-value mechanics.

It will not reduce the need for strong judgement, sharper framing or board-trusted reporting. If anything, it increases the premium on all three. And that is how you futureproof your career, by being excellent at the human stuff.

That is why I keep coming back to the same line:

AI changes the floor, not the ceiling.

The floor is the routine layer of the work. The part built around gathering, organising, drafting and processing.

The ceiling is the higher-order layer. The part built around judgement, escalation, consequence, challenge, management ownership and credibility in the room.

The floor moves up.
The ceiling stays human.

That matters more than most internal audit teams realise.

For years, a lot of senior time has quietly been spent too low in the chain.

Drafting first-pass papers.
Restructuring updates.
Cleaning up narrative.
Chasing responses.
Compiling committee packs.
Tidying commentary that is directionally fine but not yet board-ready.

Necessary work, often. Premium work, not always.

That distinction is becoming more important. Because once AI can help create a competent looking first-pass output at speed, the market doesn’t reward that competence in the same way. It becomes expected.

And once it becomes expected, the premium moves.

As you may already know, I’m launching the next stage of BtL in less than two weeks time. The first Beyond the Lines™ Leadership Signals webinar is on Thursday 30th April 5.30pm BST and I’d love for you to join me.

The first of this mini series will focus on Modernising the Three Lines at scale: how to reduce friction and duplication without creating more bureaucracy.

We’ll be getting into questions like:

It’s going to be a great conversation, so please register today and join me as BtL grows into more than a newsletter.

Here is a simple way to understand the shift we are seeing, from the use of AI, through five layers.

1. Gather
Interview notes, evidence, action updates, source material, data points.

2. Organise
Sorting inputs, grouping themes, structuring commentary, cleaning information.

3. Draft
First-pass findings, summary papers, audit committee updates, action trackers, issue wording.

4. Judge
What actually matters. What is weak. What is missing. What needs escalation. What does not warrant board airtime. What absolutely does.

5. Influence
Turning insight into decisions, ownership and outcomes. Driving management clarity. Improving the quality of the board conversation. Helping the committee understand what really needs attention.

AI is already good enough to help materially with the first three layers.

Not perfectly.
Not unsupervised.
Not without validation.

But enough to change expectations.

And that is the key point. When the first pass becomes easier, faster and cheaper to produce, it stops being the premium.

That does not make it unimportant. It makes it less scarce.

The higher premium sits in Layers 4 and 5.

Judgement and influence.

That is where the future CAE becomes more valuable, not less.

Let’s be more specific.

The work most exposed to commoditisation tends to share a few characteristics.

In internal audit, that often includes:

AI can take friction out of all of that.

Good. It should.

If a CAE is still spending too much personal energy on the mechanics of turning raw material into a presentable first pass, that is exactly the sort of drag AI should help remove.

But this is where people sometimes stop thinking too early. Because the more useful question is not just what AI can help produce. It is what that means for the value of the human layer above it.

As routine work gets compressed, these are the capabilities that become more valuable.

Can you tell what actually matters?

Not what looks tidy.
Not what sounds safe.
What is genuinely material.

Can you separate a local control weakness from a wider governance signal?

Can you identify whether the committee needs information, assurance or a decision?

Can you turn audit insight into language that lands with senior stakeholders?

This is where a lot of internal audit reporting still falls short.

The facts may be sound.
The issues may be real.

But the framing does not always help the room understand consequence, urgency or ownership.

Future-ready leaders will be better at translating findings into business relevance, not just audit language.

Once AI can produce something competent looking, the differentiator becomes your ability to challenge what sits beneath the competence.

What is missing?
What is being softened?
What sounds reasonable but is actually weak?
What answer does not survive a second question?

AI can generate a draft. It cannot independently hold the line when the executive story does not stack up.

This matters more than many teams admit.

Internal audit does not build trust with the committee by reporting everything.

It builds trust by helping the committee see what matters at the right moment and in the right way.

That means judging:

What belongs in a routine update
What belongs in an ARC paper
What needs chair attention now
What should stay with management
What has become a pattern rather than an isolated miss

That is premium work.

AI can organise action updates. It cannot tell whether ownership is real.

It cannot tell whether a responsible executive is personally engaged, or whether the action has been delegated into a holding pattern.

It cannot judge whether progress is genuine, performative or politically convenient.

Humans still have to do that.

A board-trusted CAE is not trusted because the paper is tidy.

They are trusted because they can stand behind the judgement inside the paper.

They can explain consequence.
Defend the escalation.
Handle challenge.
Speak plainly.
Avoid theatre.
Hold their ground.

That becomes more valuable in a world where polished inputs are easier to generate.

AI can help draft a cleaner ARC paper … useful.

But it can’t decide whether the real message is being buried under balance.

It can’t decide whether the tone is too cautious for the facts.

It can’t judge whether the paper creates the right level of board attention.

And it can’t take responsibility for what happens if the issue is under-called.

That remains human work, that’s truly value added.

AI can make remediation tracking look much better.

Updates become cleaner.
Themes become neater.
Narrative becomes more coherent.

But leadership still has to ask:

Is management ownership actually improving?
Has behaviour changed?
Is this late because it is difficult, or because it is tolerated culturally?
At what point does this stop being a tracking issue and become a governance issue?

That is where the real value sits.

AI can prepare briefing points for a difficult stakeholder conversation.

But it cannot replace what matters in the meeting itself.

Can you cut through spin?
Can you ask the harder second question?
Can you stay commercially sensible without becoming too soft?
Can you protect the credibility of the function while still landing the point?

That is the human premium. And these are the skills that we need to develop to future proof the career of the Internal Auditor.

This is the risk I think more CAEs should take seriously.

Some internal audit functions will use AI to become more strategic.

Others will simply become better at producing administrative output.

Useful, yes. But not automatically more strategic.

That is the trap.

A function can become more efficient while staying too low in the value chain.

And if the function is still mostly known for paper production, process management and committee administration, AI will not strengthen its standing in the long run. It will expose the gap.

The internal audit leaders who gain ground will not be the ones who merely use more AI. They will be the ones who use AI to stop wasting leadership capacity on work that no longer deserves that level of human attention.

Take your last three significant outputs.

An ARC paper.
A quarterly board update.
A major audit report.
A remediation review.

For each one, ask:

What could AI have drafted to a decent first pass?
What needed named human judgement?
What required escalation thinking, not just writing?
What depended on understanding management behaviour, not just reading updates?
What part of this is where the committee genuinely values us?

Then ask a sharper question:

That one question will tell you a lot about how future-ready the function really is.

The principle I would anchor to is this:

AI drafts. Humans decide.
AI organises. Humans validate.
AI speeds up mechanics. Humans sign off.

That is not just a workflow rule. It is a leadership design principle for the future internal audit function.

The AI Defensibility Pack sits alongside this.

It is there to help internal audit leaders think more clearly about validation, evidence, sign-off and accountability when AI starts taking more of the first-pass work.

Because faster output is not the same as defensible output. And polished wording is not the same as reliable judgement.

If you’ve not used this yet, download it today.

The future CAE will not win on paper production. That layer is becoming easier to replicate, quickly.

The premium is moving to judgement, challenge, consequence and credibility.

Some leaders will use AI to move further up the value chain. Others will use it to become more efficient at staying where they already are.

That is a very different future.

If this issue was useful, share it with someone building toward a CAE role, or trying to modernise how internal audit shows up with the board.

That is where this conversation belongs.

If this edition was useful, please share it with a colleague or team member who would get value from it too.

Beyond the Lines™ is growing through smart people passing useful work on, not noisy promotion.

And if they want practical tools, sharper thinking, and more honest conversations, they can subscribe here:

Best,

Tim Buckley

Founder Beyond the Lines™ | Integral Assurance

Most AI tools ask you to trade your data for intelligence. Norton Neo doesn't. It's the first safe AI-native browser built by Norton, and it gives you powerful built-in AI without handing your privacy over to get it. Search, summarize, and write with AI built directly into your browser. Your data stays yours. Your context stays private.

Built-in VPN, anti-fingerprinting, and ad blocking come standard. No add-ons. No setup. No compromises.

Fast. Safe. Intelligent. That's Neo.

Download Norton Neo