AI governance, AI audit, and IT audit.

Practical writing on AI governance, AI audit, and IT audit — frameworks, controls, and how they actually apply in practice.

Written by a practicing higher-education CIO and certified IT auditor holding AAIA, CISA, CISM, CRISC, CISSP, and PMP.

Read the writing · About Baz

Selected writing

• EU AI Act High-Risk Deadline Moved to December 2027 — A close reading of the high-risk deadline and the audit work that remains.
• The IT Auditor's Field Guide to Auditing AI Systems — A six-stage approach to planning and carrying out an AI audit.

About Dr. Baz Abouelenein

Baz Abouelenein is a higher-education CIO and IT auditor. He holds AAIA, CISA, CISM, CRISC, CISSP, and PMP. His writing examines AI governance, audit controls, and the decisions practitioners face when technology changes faster than policy.

Not affiliated with or endorsed by ISACA, ISC², or PMI.

AAIA, CISA, CISM, and CRISC are registered trademarks of ISACA. CISSP is a registered trademark of ISC². PMP is a registered trademark of PMI. IT Audit Prep is not affiliated with, endorsed by, or sponsored by ISACA, ISC², or PMI.