ISACA San Diego May Meeting

Agentic AI is not a future scenario. It is operating inside enterprise systems today, executing transactions, negotiating contracts, and accessing data pipelines without human intervention at every step. Most organizations are deploying capability faster than they are building the controls to govern it. That gap is where material risk lives.

This session examines what the agentic economy requires from boards, audit committees, and internal audit leaders. It covers the structural shift from recommending AI to acting AI, the identity and credential risks most audit frameworks have not yet addressed, why existing governance standards — COSO, COBIT, SOX ITGC — were not built for continuously operating autonomous systems, and the four governance exposures internal audit cannot afford to defer. The session draws on formal verification research, named industry deployments, and a published practitioner framework to give attendees a concrete basis for action.

Attendees will leave with a pre-deployment governance checklist, an accountability mapping structure for agentic workflows, board-level questions to bring back to their organizations, and a maturity model for assessing where their audit function stands today. The CAE who establishes agentic AI as a formal audit domain in 2025 and 2026 is not following the profession. They are leading it. August 2, 2026 is the EU AI Act enforcement date for high-risk AI systems. For many in this room, the governance work is already overdue.

SPEAKER: Tibyasa Matovu, Chief Audit Officer | Founder at Wahoo Audit | AAIA, CISA

Tibyasa Matovu is a chief audit and risk executive with 20 years governing enterprise risk, regulatory accountability, and control integrity across complex financial services environments. He is the founder of Wahoo Audit, a principal-led AI governance and internal audit advisory practice. Tibyasa advises boards and executives on the governance implications of frontier technology and positions internal audit as a strategic trust architecture function.

He holds AAIA and CISA credentials and is completing the Securities Industry Institute Executive Education Program at Wharton. His expertise spans agentic AI governance, AI-enabled audit transformation, enterprise turnaround, and ITGC in cloud and SaaS environments. He has operated across OCC, FINRA, SEC, and energy sector regulatory environments.

Visit Tibyasa on LinkedIn: https://www.linkedin.com/in/tibyasa-matovu/

DETAILS:
Date: Thursday, May 21
Time: 12:00 - 1:15 p.m.
Location: In-Person and Online via Zoom
CPE: 1

Know what’s Happening Next — before everyone else does.

Get App

Host or Publisher ISACA San Diego Chapter