Map 2026 risks to scenarios (economic, tariff/trade, cyber/AI, supply chain) and agree on triggers, decision rights, and escalation paths.

Update cyber incident response and AI governance (policy, model risk controls, change management, monitoring); set AC reporting metrics (e.g., time to detect, model drift indicators).

Be aware of leading SEC comment letter themes and focus on non-GAAP measures, MD\&A clarity, segment reporting, and revenue recognition; ensure management has remediation plans and disclosure controls aligned with these trends.

Be aware of the top internal control issues in adverse ICFR management assessments and focus on accounting personnel resources, segregation of duties, information technology, inadequate disclosure controls, and non-routine transactions.

Assess Pillar Two/global minimum tax impacts (measurement, disclosures, controls) and confirm readiness in tax and consolidation processes.

Challenge impairment and going concern judgments amid interest rate and liquidity dynamics; review refinancing plans and covenant sensitivities.

Refresh fraud risk assessment and investigations protocol, including data‑driven detection and hotline triage; confirm auditor’s use of data analytics and how AC will get insight.

Clarify AI in the audit and finance functions: understand where the external auditor uses tech/AI, the benefits/limits, and how management’s AI controls interface with audit procedures.

Tighten cyber reporting to the board—define thresholds for “material incident,” board‑ready dashboards, and linkage to enterprise resilience KPIs.

Revisit AC charter, skills, and education plan—ensure technology fluency (AI, data governance), transaction oversight (M\&A comeback), and disclosure expertise are covered.