Audit Capacity

Audit capacity refers to an organization's ability to examine its AI systems, data practices, and decision-making processes in a thorough and timely way. It covers having enough qualified people, tools, documentation, and access to logs to verify that AI systems behave as claimed and comply with applicable rules. For compliance officers and risk managers, limited audit capacity is a serious exposure, because regulators such as those enforcing the European Union's AI Act increasingly expect organizations to demonstrate evidence of their controls rather than simply state them.

1 item

ResearchUS2026-11-14

AI Auditor Shortage Threatens IVO Oversight Before Laws Take Effect

A growing policy consensus supports independent verification organizations (IVOs) as the primary mechanism for third-party AI oversight, but a severe shortage of qualified technical auditors threatens implementation. Proposed regimes, including Massachusetts' Mass Wins Act requiring roughly quarterly catastrophic risk evaluations and annual compliance audits, face staffing constraints at organizations such as METR and AVERI. Enterprises whose AI governance programs assume third-party audit availability face timing and coverage gaps as a result.

AI auditing independent verification organizations third-party oversight METR AVERI AI regulation audit capacity frontier AI