Pat Niemann is the Audit Committee Forum Leader and Jennifer Lee is a Managing Director at EY. This post is based on their EY memorandum.
Executive summary
Five areas audit committees should watch next
As audit committees prepare for the quarter ahead, they should consider the following themes as they set agendas. Additional context is provided below.
- Risk oversight must be more connected and forward looking. Geopolitical disruption, tariff uncertainty, AI, cyber risk, market volatility and regulatory change are converging across operations, supply chains, technology environments and capital allocation decisions. Audit committees should challenge whether management is assessing these risks collectively (and their interdependencies) and with sufficient visibility into second and third order impacts.
- Resilience should be tested, not assumed. Companies may be accustomed to disruption, but the current environment requires more rigorous scenario planning, stress testing, liquidity discipline and third party dependency mapping. Audit committees should understand the triggers, thresholds and contingency actions management would use if conditions deteriorated.
- AI governance is entering a more disciplined phase. As AI moves from experimentation to scaled deployment, boards are focusing on cost, return, accountability and control. Audit committees should ask whether management has clear decision rights, reliable cost and value measures, appropriate data and model controls, and cyber defenses that can keep pace with AI enabled threats.
- Financial reporting implications need early attention. Tariffs, supply chain changes, inflation, interest rates, impairment indicators, liquidity pressures, tax developments, cyber incidents and AI enabled processes may affect judgments, estimates, disclosures and internal controls. Audit committees should confirm that disclosure controls and ICFR remain responsive to the current risk environment.
- Regulatory change may create both relief and new oversight demands. FASB, SEC and PCAOB developments could affect disclosure requirements, enforcement expectations and audit quality discussions. Audit committees should monitor rulemaking progress and outcomes, being mindful to consider potential implications for investor communications, audit planning and governance practices.

