Good morning {{name}},

I’m Tim Buckley, founder of Beyond the Lines™.

Beyond the Lines™ is an internal-audit-led platform for current and aspiring CAEs, Heads of Internal Audit and senior audit leaders who want to turn insight into clearer decisions, stronger ownership and better outcomes in a Human + AI world.

Less control theatre. More decisions, ownership and outcomes.

If you are new here, welcome. This week’s issue is a little different, providing a founder update on where Beyond the Lines™ is going next. Because over the last few months, the direction has become much clearer.

BtL is no longer just a newsletter, a LinkedIn page or a set of practical infographics. Those things still matter. They are how the ideas travel. But the bigger ambition is to build BtL into the practical voice of Internal Audit Transformation.

Not transformation as a vague slogan. Not another polished conversation about being “more strategic” with no explanation of what actually changes. I mean the practical work of helping internal audit leaders become more board-trusted, more decision-ready and more future-ready.

That means sharper audit committee reporting. Clearer management ownership. Stronger evidence of movement. More credible challenge. Better use of AI without losing human judgement. And fewer situations where good audit work is completed, accepted and tracked, but still fails to change anything meaningful.

That is the space BtL is being built around.

This week, I want to share the direction of travel. The new website. The free Board-Trusted CAE Scorecard. The Board-Trusted CAE Toolkit. The future Accelerator. And the practical idea underneath all of it:

Internal Audit Transformation should be measured by movement, not activity.

Before I get into the BtL update, a reminder that I’ll be joined by Sandro Boeri, Culture & Leadership Advisor to Boards and Executives, for an upcoming Beyond the Lines™ live session this week on Thursday 18th June at 12.30 BST:

Culture in action: How to audit behaviour without it becoming subjective

This session fits directly into where BtL is going. Because one of the biggest questions for internal audit leaders now is not just whether a process exists, a control is documented or a policy has been acknowledged.

It’s whether behaviour is changing.

Culture is rarely the problem on paper. The issue is often the gap between what is said and what actually happens. That gap matters because behaviour shapes escalation, accountability, ownership, decision-making and control discipline.

In the session, Sandro and I will explore how audit teams can engage with culture and behaviour in a way that is practical, credible and grounded in evidence. Not vague culture commentary. Not subjective judgement dressed up as assurance. Evidence-based insight into how behaviour actually shows up in real business decisions.

If you work in internal audit, risk, controls, governance or assurance, I think this will be a useful one.

Beyond the Lines™ started as a way to say something more honest about audit, risk and controls work. The original point was simple: a lot of organisational assurance activity creates the appearance of control without always creating enough movement in decisions, ownership or outcomes.

That still feels true.

Reports are written. Findings are accepted. Actions are tracked. Committees are updated. Dashboards become greener. On paper, the process can look tidy. But somewhere between insight and action, the value often leaks. Good work gets done, but the business does not always make a clearer decision, own the outcome differently, or change the underlying risk position.

That is why the BtL promise has stayed consistent:

Less control theatre. More decisions, ownership and outcomes.

What has changed is the clarity of the next stage. Beyond the Lines™ is now becoming much more clearly centred on internal audit leadership. It is still not audit-siloed, because modern internal audit leaders cannot operate in isolation from risk, controls, governance, culture, technology, stakeholder behaviour or commercial consequence. But the primary focus is sharper: current and aspiring CAEs, Heads of Internal Audit, Audit Directors, Senior Audit Managers and internal audit leaders who want to become more board-trusted, decision-ready and future-ready in a Human + AI world.

That is where the next phase of BtL is being built.

Content has been the starting point. The posts, infographics, newsletters and webinars have helped build a common language around board trust, decision-ready reporting, management ownership, audit committee relevance, control theatre, Human + AI judgement and evidence of movement.

That language matters, because before people can improve something, they need a clearer way to describe what isn’t working.

But content alone is not enough.

A good post can clarify the problem. A strong infographic can give someone a framework you save and come back to. A newsletter can shape the conversation and help people think differently about the work. But the next step has to be more practical. If BtL is going to be useful beyond the feed, it needs to help audit leaders apply these ideas in real reports, real committee papers, real stakeholder conversations and real implementation work.

That is the shift I am building towards.

The platform will develop around three practical layers.

The first is diagnosis: helping audit leaders see where board trust, decision-readiness, ownership and follow-through are strong, exposed or drifting.

The second is the practical system: tools, examples and working templates that help leaders improve reporting, ARC papers, ownership, AI guardrails and evidence of movement.

The third is implementation support: deeper spaces, sessions and future programmes that help people apply the work in real functions, not just understand the theory.

That is the ecosystem taking shape. Not content for the sake of visibility. Content that leads to practical capability.

One of the first pieces I am building is the free Board-Trusted CAE Scorecard.

This will be a practical diagnostic for current and aspiring CAEs, Heads of Internal Audit and senior audit leaders who want to understand where their function may already be strong, where it may be exposed, and where it may be drifting into activity without enough visible movement.

The idea behind it is straightforward. Before you improve something, you need to know where the friction is. Board trust does not usually fail in one dramatic moment. It tends to leak through smaller operating gaps: reports that do not land, committee papers that bury the point, action plans that name a task owner but not an outcome owner, follow-up that tracks completion but not risk movement, or AI use that speeds up drafting without making judgement more defensible.

The Scorecard is being designed to help audit leaders assess the areas that shape board trust and decision-readiness, including audit committee relevance, management ownership, follow-through discipline, risk movement evidence, commercial consequence, stakeholder confidence, AI judgement and implementation rhythm.

It is not intended to be a vanity score. The aim is to create a better leadership conversation.

The Scorecard will be free and is coming very soon. It will become a clear entry point into the BtL ecosystem, particularly for people who are not yet ready for full implementation support but want a practical way to understand where they stand.

The next layer is the Board-Trusted CAE Toolkit, which is the primary paid resource I am finalising at the moment.

I want to be clear about the intention behind it. This is not being designed as a generic template dump, an AI hype product, a magic fix for weak leadership, or a way to make audit outputs look more polished while the underlying problems stay the same.

The Toolkit is being built as a practical working system for internal audit leaders who want their work to land better. It focuses on the operating gaps I keep coming back to in BtL content: reports that are technically accurate but not decision-ready, committee papers that contain useful information but make members hunt for the point, management actions that are assigned but not properly owned, follow-up that tracks completion but not movement, and AI use that makes the mechanics faster without necessarily making judgement more defensible.

In other words, it is for audit leaders who are already doing serious work but want to translate that work into clearer board conversations, stronger management ownership and more visible outcomes.

The Toolkit includes practical components such as a dashboard, a 10-dimension baseline, decision-ready reporting examples, an audit committee narrative builder, an ownership map, AI judgement guardrails and a 30-day sprint structure.

That final point matters. I don’t want this to become another resource that people download, admire and never use. The Toolkit is being designed around focused implementation. One report. One committee paper. One ownership gap. One AI use case. One follow-up rhythm. One practical reset.

That is where transformation becomes real.

The Toolkit is coming very soon, and I will share more detail with subscribers first as it gets closer.

I wanted to share a short walkthrough video of the Toolkit before it launches.

The aim was not to create a polished sales video, it’s a first look inside the thinking, the structure and the use cases, so people can see what the Toolkit is designed to help with before it becomes available.

I wanted the walkthrough to show why the Toolkit exists, how the dashboard works, what the baseline is designed to reveal, how the reporting and ARC examples can help audit work land better, how the ownership map changes the conversation, how the AI guardrails support defensible Human + AI working, and how a 30-day sprint could be used without turning everything into an overwhelming transformation programme.

So take a look below, and let me know your thoughts by replying to this email.

The Accelerator is also part of the longer-term direction for Beyond the Lines™, but I am not rushing it.

The Scorecard and Toolkit come first because they create the diagnostic and the practical system. The Accelerator will come later as the deeper transformation layer for audit leaders who want to work through the real-world problems behind board trust, audit committee credibility, decision-ready reporting and management ownership in a more structured way.

The ambition is for the Accelerator to become a best-in-class Internal Audit Transformation programme for current and aspiring CAEs, Heads of Internal Audit and senior audit leaders.

Not a passive course.

Not a collection of generic leadership modules.

And not another theoretical programme that sounds good but does not change how people operate.

The aim is to build a practical, industry-led experience around the real problems audit leaders are dealing with now: how to make audit committee papers land, how to strengthen board trust, how to challenge management without creating theatre, how to turn findings into owned outcomes, how to use AI without weakening judgement, and how to lead an internal audit function that is credible in a Human + AI world.

The programme will combine BtL frameworks, real-world scenarios, practical application, peer discussion and input from experienced industry leaders. The goal will be to help participants transform how they think, communicate and operate as internal audit leaders, so they become more commercially sharp, more decision-ready and more board-trusted.

I see the Accelerator as the premium implementation layer of BtL.

The Scorecard helps leaders diagnose the gap.

The Toolkit gives them the practical system.

The Accelerator will help them apply, test, challenge and refine that system in the context of real internal audit leadership.

More details will come when the shape is ready. For now, my immediate focus is on getting the Scorecard and Toolkit right.

The new Beyond the Lines™ website is also part of this shift.

The website needs to become more than a digital business card. It needs to explain the ecosystem clearly: what BtL stands for, who it helps, what problems it is built around, and how the newsletter, webinars, free Scorecard, Toolkit and future Accelerator fit together.

The aim is to make the pathway clearer without turning the brand into a hard-sales machine.

For people who are new to BtL, the website should help them understand the point of view quickly.

And practical transformation starts when work lands differently in reports, committees, conversations and follow-through.

That is what the website is being built to communicate.

More on this very soon.

I still want this week’s edition to include a practical framework, because this should not just be a platform update.

The theory underneath the whole direction is simple:

Internal Audit Transformation should be measured by movement, not activity.

Activity matters, but it is not the end point. The number of reports produced, actions accepted, dashboards updated or meetings held does not, by itself, prove that internal audit is creating meaningful value. Those things may be necessary, but they are not enough.

The better test is what changed because of the work.

This is the shift BtL will keep building around.

That is where I think the profession needs to go.

Take a common audit issue. The control weakness is valid. The report is accurate. Management accepts the finding. An action owner is named. A due date is agreed. On paper, that can look like progress.

But the better questions sit underneath the process.

If those questions are unclear, the issue has not fully landed.

That is not a criticism of the audit team. It is a signal that the operating system around the work needs strengthening. The audit work may be technically sound, but the handoff into decision, ownership and movement may still be too weak.

That is the space BtL is being built to help with.

Pick one live audit issue, committee paper or management action. Do not choose something theoretical. Choose something that is currently open, being reported, waiting for management action, or due to go to the audit committee.

The purpose of this exercise is simple: to test whether the work is actually creating movement, or whether it is just being documented, accepted and tracked.

Use one example all the way through.

Let’s say Internal Audit has raised an issue around poor evidence of review in a key financial control. The report is accurate. Management has accepted the finding. An action owner has been named. A due date has been agreed.

On the tracker, it looks fine. But has the issue really landed?

That is what this test is designed to find out.

Start by asking: what decision should this work inform?

This matters because an audit issue that does not inform a decision often becomes passive. It sits in a report as something management “accepts”, but nobody is forced to make a real choice.

In the financial control example, the decision might be: Should the business redesign the review control, increase the evidence standard, retrain reviewers, change the threshold, or accept a higher level of residual risk?

That is much sharper than simply saying: “Management should improve evidence of review.”

What to do: rewrite the issue so the decision is visible. Make it clear what management, the committee or the control owner needs to decide, challenge or approve.

Next, ask: who owns the outcome?

This matters because many audit actions name someone to complete a task, but nobody is clearly accountable for making sure the risk position improves.

In the example, the task owner might be a Finance Manager who updates the control template. But the outcome owner might be the Regional FD, because they are accountable for whether the control is operating properly and whether the risk is actually reduced.

Those are not the same thing.

What to do: name both. Identify who completes the action, and who is accountable for the outcome. If only the task owner is named, the issue is still exposed.

Then ask: what evidence would show that the risk position has changed?

This matters because completion is not the same as impact. Uploading a new template, closing an action or confirming training has taken place does not necessarily prove the control is working better.

In the example, evidence of movement might include a sample of recent reconciliations showing clearer review evidence, timely challenge of exceptions, fewer unresolved reconciling items, and evidence that reviewers are documenting judgement rather than just ticking the box.

What to do: define the evidence standard before closure. Do not wait until the action is marked complete and then decide whether the evidence is good enough.

Next, ask: what does the audit committee need to challenge with management, and what would a good answer look like?

This matters because committee papers often provide updates without making the real question clear. If members have to hunt for the management challenge point, the paper is probably too passive.

In the financial control example, the committee may need to challenge whether management’s fix improves the control, whether the timeline is realistic, whether the issue exists elsewhere, or whether residual risk is being accepted too casually.

Internal Audit should also be ready to explain what would make management’s answer credible.

What to do: add a clear challenge line and define the evidence standard behind it. For example: “The committee may wish to challenge whether the proposed remediation fixes the underlying review discipline, or only improves the evidence template. A credible response should show what has changed, who owns the outcome, how exceptions will be escalated, and what evidence will prove movement.”

Then ask: where could AI help with the mechanics?

This matters because AI can make the work faster, clearer and better structured, but only if it is used in the right place and within approved boundaries.

In the example, AI could help draft a clearer issue summary, compare the current wording with a stronger decision-ready version, prepare challenge questions for management, or structure a short committee update.

But it should not decide whether the control is effective. It should not create unsupported conclusions. It should not process confidential or sensitive information unless the tool, use case and data handling are approved.

What to do: use AI to improve structure, clarity and preparation. Do not use it to outsource professional judgement.

Finally, ask: where must human judgement remain visible?

This matters because polished output can hide weak thinking. A report can read well and still fail if the evidence is thin, the conclusion is unclear, or the accountability is vague.

In the example, human judgement must remain visible in the risk assessment, root cause, conclusion, recommendation, escalation decision, closure standard and final sign-off.

What to do: make sure the final output shows who reviewed the evidence, what judgement was applied, what conclusion was reached, and who is accountable for the decision.

At the end of the exercise, you should have a stronger version of the issue.

Not just: “Management will improve evidence of review by 30 September.”

But something closer to: “The issue requires management to decide whether the current review control is sufficient, or whether the control design, evidence standard and escalation route need strengthening. The Finance Manager owns the action, but the Regional FD owns the outcome. Closure should only be accepted when recent evidence shows the review is timely, documented, challenged where required, and reducing unresolved exceptions. The committee should challenge whether the proposed remediation improves control operation, or simply improves the audit trail.”

That is the difference.

The first version tracks an action. The second version creates a clearer decision, stronger ownership and a better test of movement.

That is the kind of practical shift BtL will keep building around.

Over the next few weeks, you will see more of this coming together.

The Board-Trusted CAE Scorecard and the Board-Trusted CAE Toolkit are both coming very soon. The new website almost ready for launch. More practical visual frameworks are on the way. The leadership sessions will continue. Human + AI internal audit content will become a bigger part of the platform. And the future Accelerator will become clearer once the Scorecard and Toolkit are properly in place.

My aim is not to turn BtL into a content machine. It is to build a serious practical platform for Internal Audit Transformation.

A place for internal audit leaders who care about board trust, decision-ready reporting, ownership, culture, AI-enabled judgement and outcomes. A place that speaks to the real work of modern internal audit leadership, not just the theory around it.

Not more noise. Not more control theatre.

A practical voice for where the profession needs to go next.

Beyond the Lines™ is moving into its next phase.

The newsletter will stay. The content will stay. The practical tone will stay. But the platform is becoming clearer.

BtL will not just explain the problems internal audit leaders face. It will help them diagnose them. Build around them. And move them into better decisions, clearer ownership and stronger outcomes.

That is the direction. That is what I’m building. And I’m glad you’re here early enough to see it take shape.

Less control theatre. More decisions, ownership and outcomes.

Best,

Tim Buckley

Founder Beyond the Lines™ | Integral Assurance

Register for Culture in action with Sandro Boeri

Implementing usage-based pricing successfully requires more than just a pricing strategy. It requires financial and operational infrastructure capable of handling dynamic pricing models, real-time usage signals, and increasingly complex monetization approaches.

In this guide, you'll learn  ⤵

Download the Guide