"Show Me the Test Results": AI Assurance Becomes an Audit Product
On October 19, the AICPA and the Artificial Intelligence Underwriting Company announced a joint certification that pairs a SOC 2 report with live testing of AI agents for hallucinations, data leakage, and prompt injection (AICPA). It is being piloted at several CPA firms, including PwC, with a full launch expected in early 2027 (Accounting Today). AICPA's Amy Pawlicki said "it isn't enough to just have policies in place"; organizations must demonstrate they are followed (CFO Dive).
The leadership move: Ask every AI vendor for its SOC 2 report and AI testing plan, add AI assurance terms to vendor contracts, and bring a vendor assurance summary to your next renewal.
Disclosure: Ken Leatherman is a Property & Casualty broker with Gallagher. This is general information, not coverage advice.
Read the full research behind this story, plus this week's senior housing and governance flagships, in the LITT Briefing on Substack.