Skip to Content

AI, Data Quality, and the Auditor’s New Frontier

Blogs Gabriel Fabiyi, CIA, CISA, CDPSE, CA Oct 13, 2026

During an audit knowledge‑sharing session, I heard a story that has stayed with me ever since. An audit leader described how his team reviewed a major retailer that had just deployed an artificial intelligence (AI)‑powered forecasting engine. Leadership believed it would finally sharpen demand planning, reduce inventory costs, and modernize operations. Instead, the organization quickly found itself in chaos. Forecasts didn’t align, procurement was buying items stores didn’t need, and warehouses were filling up with the wrong products.

What struck me wasn’t the operational mess, it was the root cause. The issue wasn’t the AI system vulnerabilities at all. It was a single outdated master data file. One inaccurate stock keeping unit (SKU) list had quietly replicated across multiple systems, and the AI simply magnified the error. The fallout was costly: overstocking, lost revenue, customer frustration, and eventually a board‑level investigation into what everyone assumed was a “system failure.”

The audit leader paused and said something that hit me deeply: “This wasn’t a system failure. It was a data governance failure.” That line stayed with me long after the session ended. It reminded me that in an AI‑driven world, bad data doesn’t just create mistakes — it multiplies them at scale.

As auditors, we often focus on analytics, automation, and control testing. But the future of assurance demands something deeper: protecting the integrity of the data that fuels every decision, every model, and every strategic move.

Data Quality Defines Corporate Success

AI can generate millions of data points in minutes. It is reshaping how organizations operate, compete, and make decisions. Data has become the engine of corporate strategy. When it is accurate, organizations gain clarity and competitive advantage. When it is flawed, the consequences ripple across governance, compliance, financial reporting, and long‑term viability. A single corrupted dataset in a manufacturing plant can distort yield forecasts, misstate inventory valuations, lead to financial misstatement, trigger regulatory scrutiny, or undermine compliance.

In the manufacturing sector, where margins are tight, supply chains are global, and operational precision is non-negotiable, the integrity of data is no longer just an IT concern but a core governance and audit priority. Auditors are now expected to validate not only the numbers, but the systems, algorithms, and data flows that produce them.

Core Data Domains

As AI accelerates data creation, it also accelerates vulnerabilities like privacy breaches, suboptimal datasets, data theft, and compliance failures if there is a data gap. Understanding how master data categories are used in a manufacturing organization will strengthening internal audit technical know-how in evaluating the master data governance control environment.

Master Data: In a manufacturing organization, master data forms the backbone of every operational and strategic decision and the enterprisewide source of truth that keeps the entire ecosystem aligned. When product lists, vendor records, pricing structures, and employee directories are consistent and well‑governed, production lines run with fewer errors, planning cycles become more reliable, and compliance requirements are easier to meet. A stable foundation ensures that every department, from procurement to logistics and finance, works with the same accurate information.

Product Data: These detailed attributes of every item the company produces are not merely descriptive but also operationally critical. Accurate product codes, dimensions, weights, and variants feed directly into bills of materials, production routings, costing models, and quality controls. When product data is precise, manufacturers reduce scrap, avoid rework, and maintain the integrity of automated processes that depend on exact specifications.

Vendor and Supplier Data: This is also essential in governing the flow of materials into the organization. Manufacturing depends on timely, high‑quality inputs, and reliable supplier information enables strong procurement controls, effective contract management, and robust third‑party risk oversight. Clean, complete vendor data supports everything from lead‑time optimization to raw‑material traceability, helping manufacturers maintain continuity even when supply chains are under pressure.

Customer Data: On the demand side, customer data provides insight into who buys the company’s products, how they buy, and what they expect. For manufacturers, this information shapes production planning, inventory strategy, and service levels. Accurate customer profiles and purchase histories help forecast demand, support customization or configuration‑to‑order models, and improve delivery performance by ensuring logistics teams have the right shipping and fulfillment details.

Strategic Business Data: Market share trends, competitor intelligence, revenue projections, and customer lifetime value analyses help leadership determine where to invest, which product lines to expand or retire, and how to position the organization for future growth. In manufacturing, where capital investments are significant and planning horizons are long, accurate data is essential in aligning operational capabilities with strategic ambitions.

Operational Data: This dataset captures the fast‑moving pulse of the business. Daily sales, order status, production output, downtime events, shipment tracking, returns, and service logs provide real‑time visibility into performance. Operational data fuels continuous improvement initiatives, supports predictive maintenance, and enables rapid decision‑making on the shop floor. When operational data flows freely and accurately, manufacturers can respond quickly to disruptions, optimize throughput, and deliver consistently on customer expectations.

The Data Future

How an organization safeguards its data and assesses vulnerabilities related to confidentiality, integrity, availability, security, and privacy is another aspect of data governance. Data risk-levels can be defined as critical, high, medium, or low. By examining controls through this multidimensional lens, auditors gain a clearer understanding of where weaknesses exist and how they might compromise operational reliability, regulatory compliance, or strategic decision‑making.

Strong master data governance and risk‑aligned controls are now essential to organizational resilience. We are no longer just testing controls, we are protecting the integrity of the data that drives every model, forecast, and decision. The future belongs to organizations that can safeguard their information.

The views and opinions expressed in this blog are those of the author and do not necessarily reflect the official policy or position of The Institute of Internal Auditors (The IIA). The IIA does not guarantee the accuracy or originality of the content, nor should it be considered professional advice or authoritative guidance. The content is provided for informational purposes only.

Gabriel Fabiyi, CIA, CISA, CDPSE, CA

Gabriel Fabiyi is manager, internal audit and risk management, for the City of Saint John in Canada.