The Audit Podcast: Ep 261
Why Auditors Need Smarter Tools w/ Ed Zimmer (ControlSense)
Host: Trent Russell
Date: October 28, 2025
Episode Overview
In this episode, host Trent Russell sits down with Ed Zimmer, founder of ControlSense AI and a seasoned audit innovator, to discuss the critical need for smarter tools in internal audit functions. The conversation centers on how ControlSense leverages AI to address persistent pain points, drive consistency, and increase audit quality. Ed shares insights from his 30+ year career, highlights how ControlSense differs from generic AI tools, breaks down its security model, and offers practical advice for auditors facing today’s technology landscape.
Key Discussion Points & Insights
1. Ed Zimmer’s Background and Genesis of ControlSense
- Ed's Experience:
- Principal at Advanced Risk and Controls Analytics, LLC
- Former Director of Audit Innovation at Citigroup (30 years)
- Author of a book on audit analytics
- Genesis of ControlSense:
- Motivated by audit time constraints and manual process inconsistencies
- Leveraged AI to automate and standardize core audit deliverables
“We decided to, instead of going into ChatGPT on all this stuff, to create a customized AI assistant that’s geared specifically for internal audit.” — Ed, [05:44]
2. Audit Pain Points and ControlSense’s Solution
- Common Challenges:
- Inconsistent deliverables due to varying auditor skillsets
- Manual, repetitive tasks (e.g., risk & control matrices, report writing)
- Time pressure leading to suboptimal audits
- ControlSense Fixes:
- Taps into best practices, standards, and new risk data
- Customizable for each audit department’s unique methodology
- Automates report formatting, RCM generation, and testing
"It extracts this information and creates a very specific format that we can customize... so it really takes away a lot of the back and forth and increases audit quality.” — Ed, [09:11]
3. Increasing Audit Quality Through AI
- Wider Perspective on Quality:
- Goes beyond technical accuracy (e.g., typos), encompassing completeness, relevance, and emerging risks
- Helps auditors avoid over-reliance on prior workpapers
“ControlSense does go out and... identify some of the key current and emerging risks that might not have been considered... You have to get current with this information or otherwise you might miss some very, very important risk and controls.” — Ed, [11:38]
4. Differentiating ControlSense From Generic AI Tools
- Compared to ChatGPT & Copilot:
- Built specifically for internal audit workflows and standards
- Customizes outputs to align with client methodology—no manual reformatting
- Extends to monitoring outstanding issues and stakeholder follow-ups
“ControlSense brings this all together throughout the entire audit methodology... it brings everything together into one cohesive platform rather than going back and forth.” — Ed, [14:36]
5. How ControlSense Works in Practice
- Process Flow:
- Audit Planning:
- Suggests relevant risks, prepares audit memo
- RCM Generation:
- Auto-creates formatted risk and control matrices, custom to client needs
- Fieldwork:
- Full-population transactional testing—no technical skills required
- Anomaly detection
- Findings & Report Writing:
- Auto-formats findings, creates full audit reports in seconds
- Ensures consistent structure and content quality
“People with different skills and experience... nobody’s going to do it in a really consistent way. And as a reviewer... I would love to see a good first draft.” — Ed, [16:15]
- Audit Planning:
- Time and Consistency Gains:
- Frees auditors from repetitive tasks, lets them “think more”
- Cuts reporting cycles dramatically
6. Data Security and Privacy in AI Tools
- Strong Security Model:
- LLMs firewalled within the organization’s perimeter—data never leaves client infrastructure
- Moving toward a SaaS model with ironclad data protection for organizations lacking LLM infrastructure
“No data that you enter will actually leave your organization, leave your company’s infrastructure. So that’s all protected from there.” — Ed, [23:15]
Notable Quotes & Memorable Moments
-
On the Human Element in Audit:
“You have to appreciate the little things because that’s what makes life. That’s what makes everybody happy, I think.” — Ed, [02:12]
-
On Over-Reliance on Prior Workpapers:
“Despite the mantra of don’t say this is how we did it last year... it’s pounded in my brain, still felt, still fell for it.” — Trent, [13:08]
-
On AI Not Replacing Auditors, But Auditors Using AI Replacing Others:
“It’s not going to replace auditors. But if you do resist the use of Generative AI, that might be the person that’s replaced.” — Ed, [24:57]
Timestamps for Key Segments
| Timestamp | Topic | |-----------|-------| | 00:00 | Audit time constraints and opportunity for AI | | 05:44 | Ed explains ControlSense and its origins | | 07:20 | Audit pain points addressed by ControlSense | | 09:11 | Customization for departmental needs | | 11:38 | Quality in audit and how AI helps catch emerging risks | | 14:36 | Differences from ChatGPT, Copilot, and other tools | | 16:15 | Step-by-step use of ControlSense across audit stages | | 20:32 | Full-population data testing and report consistency | | 23:15 | Data protection and security model | | 24:57 | Closing thoughts: future of AI and auditors |
Actionable Takeaways and Next Steps
- Webinars & Free Trials:
ControlSense will host webinars with live walkthroughs (see show notes for schedule). - Test Before You Buy:
Free extended use of ControlSense AI is available for departments wanting to try the platform risk-free. - Final Advice:
Embrace generative AI to boost efficiency and effectiveness—or risk being left behind."I do encourage everyone to test the waters of AI assistance... embrace the efficiency and effectiveness that it comes with the use of Generative AI.”—Ed, [24:57]
For listeners: Check out the show notes for links to the ControlSense demo, webinar info, and the trial offer.
Summary prepared to reflect the episode’s informative and conversational tone, highlighting rich insights for auditors, audit leaders, and anyone evaluating new audit technology.