The demands on internal audit are changing as organisations deal with risks that increasingly affect different parts of the business. Boards need to understand how these risks connect. They must also assess whether the assurance they receive provides a reliable picture of the organisation’s exposure.
Against this backdrop, the Institute of Internal Auditors South Africa (IIA SA) will host its 29th Annual National Conference. The event will take place from 23 to 25 November 2026 at Gallagher Convention Centre in Midrand, Johannesburg. Under the theme Reframe Resilience: Assurance in the Age of Risk Convergence, the hybrid event will bring together industry professionals. Internal audit professionals, board members and risk leaders will examine how assurance needs to respond to converging risks.
Rethinking risk assurance
IIA South Africa believes internal audit must take a broader view of organisational risk. Technology and external pressures are creating new challenges for governance and assurance.
Cybersecurity incidents can affect operations well beyond the IT function. Meanwhile, AI adoption raises further questions about oversight and accountability. Geopolitical uncertainty and climate-related risks also place additional demands on boards and the assurance functions that support them.
Insights from industry leaders
The programme will feature organisational behaviour specialist Siphiwe Moyo, who will discuss why converging risks demand a new assurance mindset. Other keynote speakers include Thokozile Kuwali, Chairman of AFIIA, and Yvonne Mothibi, Chief Executive Officer of IRMSA. Tichaona Zororo of EGIT and Grace Letseka, President of the ISACA SA Chapter, will also address AI governance. They will examine the changing role of internal auditors as organisations increasingly adopt technology.
Panel discussions will explore public sector accountability and how Chief Audit Executives can provide insights beyond the annual audit plan. The Chief Audit Executive panel will feature internal audit leaders from the Auditor-General of South Africa, Eskom, Hollard and Stellenbosch Municipality.
Other sessions will cover combined assurance, ethical systems, cybersecurity, ransomware recovery, sustainability risks and recurring audit findings.
Strengthening governance and assurance
IIA South Africa sees the conference as an opportunity for practitioners and business leaders to assess their assurance arrangements. They will consider whether these arrangements are keeping pace with changing risks. The discussions will draw on experience across the public and private sectors. They will focus on improving audit planning, strengthening governance and providing boards with information to support decision-making.
The three-day programme includes plenary presentations and parallel tracks, allowing participants to choose sessions relevant to their responsibilities. Participants can attend some sessions only in person, while others will be available online.
Registration for the conference closes on 16 November 2026.
Further details and registration are available on the IIA South Africa website.
