Steve Melletz Spoke About "Cyber Risk Governance: Elevating Internal Audit and Board Oversight" at the National Conference of Internal Auditors, September 28, 2026, in Mexico City

What an honor it was to speak at the National Conference of Internal Auditors in Mexico City sponsored by the Mexican Institute of Internal Auditing (IMAI).  The topic was Cyber Risk Governance: Elevating Internal Audit and Board Oversight.     This session offered a focused, oversight-oriented perspective, illustrating how internal audit can strengthen cyber risk governance by implementing leading frameworks to emphasize governance structures, measurable outcomes, and alignment with enterprise risk management.

It further demonstrated how internal audit can deliver clear, decision-grade assurance, enabling boards and audit committees to understand cyber risk in business terms and act with confidence—positioning internal audit as a key contributor to cyber resilience and governance effectiveness. 

Cybersecurity can no longer be delegated solely to IT or security functions. It demands active oversight from boards and audit committees, with internal audit positioned as an independent, informed, and strategically aligned function. The challenge is not merely technical it is fundamentally one of governance, control assurance, and decision quality.

I thoroughly enjoyed my time in Mexico City and was treated fabulously by the IMAI and their membership.  It was a pleasure and I hope to speak again next year.

If any of this would be of interest to your organization, please feel free to contact me!