IT auditor and internal audit technologist in Dubai. Notes on risk and governance, data-driven auditing, and building the tools an audit function runs on.