Evelyn Foong
Audit, Risk & AI Governance
The director boards appoint to get confident about AI, data and risk — from a practitioner who operationalised AI across an entire audit function years before it was the norm.
Boards are being asked to govern technologies they've never had to before. I've already done it — from the inside.
The AI question, answered from practice
I've operationalised AI across an entire assurance function — so a board gets oversight grounded in real experience, not slideware.
Audit & risk committee-ready
More than two decades reporting to Board Risk, Compliance and Audit Committees from the inside — fluent at the board–management interface from day one, and chair-ready for an ARC.
Credibility on regulated boards
Two decades inside APRA-supervised financial services — fluent in what regulators and audit committees expect, with direct credibility for government and regulated boards.
Already governing as a director
Current NED at the Institute of Internal Auditors Australia, chairing its Investment Committee. Proof, not aspiration.
Governing AI from experience, not theory
Most boards are overseeing AI and data risk for the first time. I've already done it from the inside — rebuilding internal audit around data science and AI well before the current inflection point, with the majority of findings driven by full-population analysis rather than sampling.
The value to a board is direct: I know what mature AI and data governance looks like in practice, where the assurance gaps sit, and the questions that separate confident oversight from box-ticking.
How I think about it →
“You must unlearn to learn. The rulebook we have no longer cuts it.”
The leadership that doesn't show up in a CV
The full record — two decades of assurance, board-lensed.
On governing AI, data and risk
Navigating the Polycrisis: How Internal Auditors Must Adapt in an Era of Unprecedented Change
A write-up of Evelyn's ACIIA keynote panel in Kuala Lumpur — on the accelerating technology-adoption curve and why audit, risk and governance professionals must “unlearn to learn” to stay ahead of AI-era risk.
Let's talk.
I'm open to board and selected advisory enquiries. The best way to reach me is by email or on LinkedIn.