Topic: "Navigating Emerging Risks in the Digital Age"

• Date: Thursday 26 February 2026
• Event Start Time: Midday (registrations open from 12.00 pm)
• Online Participants Entry Time: 12.30 pm
• Venue: Datacom, Wellington and Online
• Format: Hybrid (In-person & Online)

Session Summary

As organisations across Aotearoa continue to navigate rapid digital transformation, the nature of risk is shifting faster than ever. This joint IIA NZ and ISACA session brings together expertise from internal audit and technology risk professionals to explore emerging risks in the digital age, including cybersecurity, data governance, AI ethics, and resilience.

The session will highlight how internal auditors and IT governance specialists can collaborate to anticipate, assess, and respond to new and evolving risk landscapes, ensuring organisations remain resilient, secure, and future-ready.

Key Points

From the IIA NZ Speaker (Internal Audit Focus): Philip Whitmore - Partner, KPMG Cyber - In Person Presentation

• Understanding enterprise-wide emerging risks and their implications for assurance.
• How internal audit can align its work programme to respond to fast-changing risks.
• Incorporating digital trends; AI, automation, hybrid work, cloud, data flows into the audit plan.
• Prioritising areas of heightened exposure in small and large organisations.
• Strengthening cross-functional collaboration to support proactive risk management.

From the ISACA Speaker (Cyber & Technology Risk Focus): Paul Ramsay - Principal Consultant and Director, Equinox IT

• Key cybersecurity threats impacting NZ organisations in 2026.
• Practical frameworks for managing technology, cyber, and digital trust risks.
• What "good" cyber hygiene looks like for organisations with varying levels of maturity.
• Strategies for building organisational resilience and readiness.
• Tools and techniques for monitoring and managing rapidly evolving digital risks.

Shared Focus Areas:

• Where internal audit and technology risk intersect and how to leverage it.
• The importance of shared intelligence, shared language, and shared priorities.
• Examples of demonstrating effective risk anticipation, early detection, and response.
• Practical techniques for ensuring risk information reaches Boards and senior leaders.

Speaker Bios:

IIA NZ Speaker - Philip Whitmore: Philip is a Partner within KPMG Cyber with over 30 years' practical experience in the provision of cyber security consultancy services within New Zealand and through-out the wider Asia Pacific region. He was awarded the New Zealand Senior Cybersecurity Professional of the Year award in late 2023. Philip has delivered internal audit programmes and specific engagements for over 20 years for a broad range of organisations in both the public and private sectors. He has been a member of IIA for more than two decades, and previously was the regional lead for the internal audit practice of another large professional services organisation.

ISACA Speaker - Paul Ramsay: Paul is a Director of Equinox Limited and has over 40 years of experience in the IT industry. He combines sound business and technical skills to ensure the practical application of new technology. He has undertaken a wide range of activities from strategy and governance to system implementation and support, and has extensive consulting and assurance experience.

Paul helped to establish the International Institute of Business Analysis (IIBA) New Zealand chapter in 2006, and was also involved in establishing the Test Professionals Network in 2004 and the Project Quality Assurance Forum in 2015. He has been co-chair of NZRise, co-convenor of the Professional Pathways Working Group of the Digital Skills Forum, and a member of the New Zealand Government Procurement Business Reference Group.

Agenda

• 12.00 - 12.15 pm: Sign-in/registrations. Registrations will close at 12.15 pm
• 12.00 - 12.30 pm: Networking & working luncheon (tea and coffee provided)
• 12.30 - 12.35 pm: Welcome and introductions (IIA NZ & ISACA)
• 12.35 - 1.05 pm: Speaker 1 (20-minute presentation + 10-minute Q&A)
• 1.05 - 1.35 pm: Speaker 2 (20-minute presentation + 10-minute Q&A)
• 1.35 - 1.50 pm: Combined Q&A with both presenters and/or facilitated panel (15 mins)
• 1.50 - 2.00 pm: Organisational updates (if no additional questions) & closing thanks

For Online Attendees

• Join from 12.30 pm for introductions and speaker sessions.
• Teams link may open earlier for optional online networking (IIA NZ to provide the Teams link to online attendees).