THE INSTITUTE OF INTERNAL AUDITORS

FIN · Financial Institutions/Investments/Securities

The IIA submitted letters to the U.S. Securities and Exchange Commission in response to the following requests for information: 1) On July 2, The IIA provided perspective on the SEC's Draft Strategic Plan for Fiscal Years 2026-2030 (File No. DSP-3) 2) On August 26, The IIA sent a letter to the SEC requesting a 90-day extension on the public comment period on a New York Stock Exchange proposal to amend Sections 303A.00 and 303A.07 of the Listed Company Manual (SEC Release No. 34-106128; File No. SR-NYSE-2026-37). 3) On September 8, The IIA submitted a letter to the SEC - and signed a joint letter with multiple coalition groups - in opposition to the New York Stock Exchange proposal to amend Sections 303A.00 and 303A.07 of the Listed Company Manual (SEC Release No. 34-106128; File No. SR-NYSE-2026-37). The IIA also sent two letters to the Public Company Accounting Oversight Board in Q3: 1) IIA Comments in Response to the Request for Public Comment on the PCAOB Standard Setting (August 7; PCAOB Release No. 2026-005) 2)IIA Comments in Response to the Request for Public Comment on the Draft 2026-2030 Strategic Plan Goals and Objectives (September 3; PCAOB Release No. 2026-006). The IIA conducted meetings with members and staff on the U.S. House Committee on Financial Services to discuss key recommendations from a recent IIA report regarding modernization of the U.S. Sarbanes-Oxley Act.

CSP · Consumer Issues/Safety/Products

The IIA conducted meetings with members and staff on the U.S. House Energy and Commerce Committee as a follow-up to a June 2026 letter regarding the SECURE Data Act (H.R. 8413). In the letter, The IIA highlighted the importance of including independent assurance mechanisms in the proposed data privacy legislation to ensure the processes envisioned by the bill are operating appropriately.

Literal federal measure citations: H.R. 8413

CDT · Commodities (big ticket)

The IIA conducted meetings with members and staff of U.S. House Committee on Financial Services to offer perspective on emerging prediction market policies. These meetings were a follow-up to a letter sent to Congress by The IIA in April 2026 recommending the following three actions concerning prediction markets: 1) Require prediction market platforms to establish formal internal control frameworks 2) Ensure the operation of independent, properly structured internal audit functions at registered exchanges 3) Commission a GAO study focused on controls and audit infrastructure

CPI · Computer Industry

The IIA conducted meetings with members and staff of the U.S. House Energy and Commerce Committee to discuss recommendations for strengthening the Frontier Risk Oversight, National Transparency, Independent Evaluation, and Reporting Act (FRONTIER ACT; H.R. 9925). These engagements highlighted the important role internal audit can play in providing ongoing assurance over internal controls and risk management pursuant to Section 4 of the proposal. In addition, The IIA held introductory meetings with the staff of members serving on the U.S. Senate Subcommittee on Consumer Protection, Technology, and Data Privacy. These engagements were an opportunity to provide an overview of the internal audit profession and discuss how internal auditors can be a technical resource on issues related to AI safety and security.

Literal federal measure citations: H.R. 9925