Topic: "Navigating Emerging Risks in the Digital Age"

• Date: Thursday 26 February 2026
• Event Start Time: Midday (registrations open from 12.00 pm)
• Online Participants Entry Time: 12.30 pm
• Venue: Datacom, 55 Featherston Street, Wellington (all registered attendees to go to the Datacom reception first, they will then be escorted to the event area)
• Format: Hybrid (In-person & Online)

Session Summary

As organisations across Aotearoa continue to navigate rapid digital transformation, the nature of risk is shifting faster than ever. This joint IIA NZ and ISACA session brings together expertise from internal audit and technology risk professionals to explore emerging risks in the digital age, including cybersecurity, data governance, AI ethics, and resilience.

The session will highlight how internal auditors and IT governance specialists can collaborate to anticipate, assess, and respond to new and evolving risk landscapes, ensuring organisations remain resilient, secure, and future-ready.

Key Points

From the IIA NZ Speaker (Internal Audit Focus):

• Understanding enterprise-wide emerging risks and their implications for assurance.
• How internal audit can align its work programme to respond to fast-changing risks.
• Incorporating digital trends; AI, automation, hybrid work, cloud, data flows into the audit plan.
• Prioritising areas of heightened exposure in small and large organisations.
• Strengthening cross-functional collaboration to support proactive risk management.

From the ISACA Speaker (Cyber & Technology Risk Focus):

• Key cybersecurity threats impacting NZ organisations in 2026.
• Practical frameworks for managing technology, cyber, and digital trust risks.
• What "good" cyber hygiene looks like for organisations with varying levels of maturity.
• Strategies for building organisational resilience and readiness.
• Tools and techniques for monitoring and managing rapidly evolving digital risks.

Shared Focus Areas:

• Where internal audit and technology risk intersect and how to leverage it.
• The importance of shared intelligence, shared language, and shared priorities.
• Examples of demonstrating effective risk anticipation, early detection, and response.
• Practical techniques for ensuring risk information reaches Boards and senior leaders.

Agenda

• 12.00 - 12.15 pm: Sign-in/registrations. Registrations will close at 12.15 pm
• 12.00 - 12.30 pm: Networking & working luncheon (tea and coffee provided)
• 12.30 - 12.35 pm: Welcome and introductions (IIA NZ & ISACA)
• 12.35 - 1.05 pm: Speaker 1 (20-minute presentation + 10-minute Q&A)
• 1.05 - 1.35 pm: Speaker 2 (20-minute presentation + 10-minute Q&A)
• 1.35 - 1.50 pm: Combined Q&A with both presenters and/or facilitated panel (15 mins)
• 1.50 - 2.00 pm: Organisational updates (if no additional questions) & closing thanks

For Online Attendees

• Join from 12.30 pm for introductions and speaker sessions.
• Teams link may open earlier for optional online networking (IIA NZ to provide the Teams link to online attendees).