The IIA Submitted Comments to the U.S. Office of Science and Technology Policy
LAKE MARY, FL (March 17, 2025) – The Institute of Internal Auditors has submitted a comment letter in response to a request for information from the U.S. Office of Science and Technology Policy (OSTP) entitled “Development of an Artificial Intelligence Action Plan.”
In the letter, The IIA emphasized the importance of establishing clear and measured safeguards governing AI applications, noting the significant impact the technology will have on Americans.
Specifically, The IIA advocated that “a comprehensive AI Action Plan must also highlight the importance of governance, internal controls, and risk management” to support organizations who utilize AI.
Further, the letter noted that “a critical component of any robust risk management analysis – and one The IIA recommends should be recognized in the AI Action Plan – is the complementary role of an organization’s internal audit function. An internal audit function – operating in conformity with the Global Internal Audit Standards – is the entity responsible for providing an organization’s governing body with objective assurance over AI related risk management and internal control processes.”
The IIA recommends that the AI Action Plan empower the private sector to execute assurance responsibilities through internal audit, rather than “establish a traditional regulatory regime directing a specific government agency to audit AI operations.”
As OSTP explores policy solutions to promote American leadership in AI, the internal audit profession is uniquely positioned to facilitate private sector-based transparency and accountability.
For this reason, The IIA asked OSTP to address the following topics in the AI Action Plan:
1) Recognize the Significance of AI Risk Management and Governance: The IIA supports a greater policy emphasis concerning the need for appropriate risk management and governance processes related to implementing and using AI in business operations.
2) Strengthen Internal AI Oversight: Utilize internal audit-led assurance processes for evaluating an organization’s AI-related internal controls, risk management and governance structures. The presence of a qualified internal audit function will strengthen independent oversight efforts and increase consumer confidence.”
The IIA appreciates OSTP’s consideration of our recommendation on behalf of the internal audit profession and looks forward to continuing a productive dialogue on this critically important topic to the lives of all Americans.
About The Institute of Internal Auditors and the Internal Audit Profession
Internal auditing is an independent, objective assurance and advisory service designed to add value and improve an organization’s operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of governance, risk management, and control processes.
The IIA is an international professional association that serves more than 260,000 global members and has awarded more than 200,000 Certified Internal Auditor® (CIA®) certifications worldwide. Established in 1941, The IIA is recognized throughout the world as the internal audit profession’s leader in standards, certifications, education, research, and technical guidance. For more information, visit theiia.org.
Media Contact
Sarah DuBois
Sarah.dubois@theiia.org
952-688-2588
James Schiavone
Lansons
jamess@lansons.com
917-238-9614