Boardroom: Rubber-Stamp Audits

Articles Matt Kelly Jun 08, 2026

Boards must question the reliability of SOC audit mills offering cheap, easy assurance.

As low-cost SOC providers proliferate, boards and internal audit functions face growing pressure to distinguish credible assurance from rubber-stamped reviews.

Articles
Magazine
Digital
Governance
Audit Committee
Risk
Third Party
Technology
Cybersecurity
Executive
Mid-Level
Global Regions
English

You are attempting to access subscriber-restricted content.

Are You Ready to Experience Everything Internal Auditor (Ia) Has to Offer? Sign in or become a member to gain access to the latest internal audit news and information today.

IIA Resources

Guidance

Cybersecurity Topical Requirement
Third-Party Topical Requirement
Topical Requirements Application Guidance
Auditing IT Governance and IT Management
Understanding and Auditing Big Data

Matt Kelly

Matt Kelly is editor and CEO of RadicalCompliance.com, an independent blog about audit, compliance, and risk management. He welcomes feedback at mkelly@radicalcompliance.com.

Learn more with our other resources

Articles

Boardroom: Rubber-Stamp Audits

Boards must question the reliability of SOC audit mills offering cheap, easy assurance.

You are attempting to access subscriber-restricted content.

IIA Resources

Guidance

Matt Kelly

Learn more with our other resources

Better Together

Finding Patterns in Public Disclosures

The Challenger Sales Approach

Risk: Tracking Currency Volatility