Companies that have been submitting XBRL reports are no longer covered by the SEC's modified liability provisions for XBRL reporting. This paper reviews the risks when implementing XBRL and suggests how internal audit functions can help their organizations address reporting risks and improve supporting processes.