IT Audit
Auditing information systems, cybersecurity, cloud, and AI governance against international standards (ITGC and application controls).
Audit · Technology · Assurance
Mostafa Maarof
Head of Audit Group at Egypt's Accountability State Authority, and Chair of the INTOSAI WGISTA.
A senior audit professional working where public accountability meets emerging technology — from auditing artificial intelligence and cloud computing to building evidence-driven tools for auditors.
CIACISACFEAAIAACCA CertIPSASIDI Trainer
54SAIs
Supreme Audit Institutions in the global AI readiness assessment
8
world regions covered across the INTOSAI community
6th
Annual WGISTA meeting, chaired and delivered in Cairo
3
audit domains: IT, Performance and Compliance
About
Audit expertise at the frontier of technology
Mostafa Maarof is a senior audit professional specializing in the audit of information technology, performance, and compliance — and one of the first CISA-qualified IT auditors at Egypt's Accountability State Authority.
As Chair of the INTOSAI Working Group on the Impact of Science and Technology on Auditing (WGISTA), he leads international efforts to help Supreme Audit Institutions keep pace with artificial intelligence and emerging technology — including a readiness assessment framework and the MAAT Initiative, presented at the 25th INCOSAI congress in Sharm El-Sheikh.
He co-authored the INTOSAI (WGITA) guidance on auditing artificial intelligence and cloud computing, is a certified trainer of the INTOSAI Development Initiative (IDI), and builds analytics and evidence-based retrieval tools for auditors.
Expertise
What I do
Four domains where government audit meets technology and international standards.
Performance Audit
Assessing the economy, efficiency, and effectiveness of public programs and spending, with evidence-based use-case catalogues.
Compliance Audit
Verifying conformity with laws, regulations, and public-finance frameworks — including data protection (Law 151/2020).
AI & Emerging Technology
Co-author of guidance on auditing AI and the cloud, and builder of RAG and data-analytics tools for audit.
International roles
Leadership within the INTOSAI community
Chair — Working Group on the Impact of Science & Technology on Auditing
INTOSAI WGISTA — AI Readiness Assessment Framework
Guidance on auditing AI and cloud computing
INTOSAI WGITA — co-author
Cybersecurity Audit Guidance
WGITA — GAO-led, with Egypt as a supporting SAI
The MAAT AI Initiative
Strategy, charter & governance framework — presented at INCOSAI XXV
Certified Trainer
INTOSAI Development Initiative (IDI) — training to multiple SAIs
Publications & guidance
Selected papers & professional guidance
A sample list — each entry will link to the full document, managed from the dashboard.
2026Guidance
Auditing Artificial Intelligence & Cloud Computing
2026Framework
Are We Ready? An AI Readiness Framework for SAIs
2026Initiative
The MAAT Initiative: Strategy, Charter & Governance
2026Paper
SAI Readiness for Big Data
2026Catalogue
Arabic Performance Audit Use-Case Catalogues
Training library
Courses & lectures delivered
A library of programmes authored and delivered to Supreme Audit Institutions and training providers.
IT & Technology Audit
Internal Control & Anti-Fraud
Events & news
Recent work & engagements
Sample cards showing how events and news — with images, video, or articles — will appear, all managed from the admin dashboard.
Event
Cairo, 2026
6th Annual WGISTA Meeting
Chairing the annual meeting of the INTOSAI working group, with a panel of AI experts from outside the INTOSAI community.
Read more: 6th Annual WGISTA MeetingNews
Sharm El-Sheikh, 2026
MAAT Initiative presented at INCOSAI XXV
Introducing the MAAT AI Initiative to the INTOSAI community, built on a readiness assessment of 54 SAIs across 8 regions.
Read more: MAAT Initiative presented at INCOSAI XXVVideo
Tunisia, 2026
SAI readiness for big data
Presenting ASA's paper at the "Tech Spring" session of the 8th ARABOSAI IT Audit Working Group meeting.
Read more: SAI readiness for big dataArticle
Article
Auditing AI: a practical framework for SAIs
A look at the "Are We Ready?" framework — six dimensions and a five-stage maturity model for SAI readiness.
Read more: Auditing AI: a practical framework for SAIsArticle
Article
From evidence to assurance: RAG tools in audit
How evidence-backed retrieval tools help auditors tie conclusions to their original sources.
Read more: From evidence to assurance: RAG tools in auditEvent
Harbin, 2025
Engagements at the INTOSAI WGBD meetings
Consecutive participation in the Big Data working group meetings across several countries, sharing ASA's analytics experience.
Read more: Engagements at the INTOSAI WGBD meetings
Gallery
Moments from meetings & the field
Sample image gallery — photos and captions will be uploaded and arranged from the dashboard.
WGISTA annual meeting — Cairo
INCOSAI XXV — Sharm El-Sheikh
ARABOSAI — Tunisia
Panel discussion
Training delivery
WGBD — Harbin
Contact
Let's talk
For professional collaboration, speaking invitations, or inquiries about INTOSAI and technology-audit work.
contact@mostafamaarof.com