Your scope just grew. Your headcount didn’t.

You didn't sign up for internal audit to become a cybersecurity engineer. Or a vendor contract specialist or an organizational psychologist.

But here you are.

The IIA's new Global Internal Audit Standards just made cybersecurity, third-party risk, and organizational behavior mandatory audit territory. And the clock is already running.

The teams that figure this out fastest aren't necessarily the ones with the biggest budgets or the most headcount. They're the ones who don't waste time reinventing the wheel. They walk into a new topical area with a clear framework, the right questions already mapped out, and a documentation approach that holds up when the audit committee starts asking follow-up questions.

I'm Mike Levy. I founded Cherry Hill Advisory, a risk advisory firm built for internal audit and risk leaders. The Risk Register is our weekly newsletter covering what's actually moving in the profession. No filler, just the stuff worth knowing.

So we built the framework for you.

Three free practitioner-level guides, one for each Topical Requirement, built for the auditor doing the actual work. Not a summary of the standard. Not a checklist that looks good and falls apart in the field. A practical, field-ready framework that gets your team from "we need to cover this" to "here's how we cover it credibly" without burning three weeks figuring it out from scratch.

One of the things I care most about is making sure internal audit and risk professionals have access to real, practical education not just the people whose organizations can afford it. The workbooks above are free. Most of our monthly CPE webinars are free. Some sessions go deeper into specific topics and are paid but the door into this community is always open.

And if you want to go deeper, we cover this live. Every month we run free CPE webinars built around exactly these topics, the kind of sessions where you can ask the questions you can't Google. Cyber risk in June. Third-party risk in July. More details are below.

Download the workbooks. Join us live if you can. And if this is the kind of thinking you want in your inbox every week, you're in the right place.

Want more?

We’ve opened the doors to our full training vault so you can see exactly how we tackle complex audit challenges in real-time.

Access the Cherry Hill Training Archive to get full webinar replays and presentation decks here and more of our future events here.

Catch Us Live at...

Cherry Hill Advisory is a global risk advisory firm serving internal audit and risk leaders across every industry. We help organizations strengthen audit quality, address emerging risk, and meet rising expectations from audit committees, regulators, and stakeholders. Our team works with organizations on external quality assessments, internal audit cosourcing, training, fraud risk, and strategic risk advisory.