Duffy Leidner is an industry senior analyst in RSM US LLP’s risk consulting practice with extensive experience delivering internal audit, performance audit and operational risk solutions to public sector, quasi-governmental and government contracting organizations. In 2026, Duffy was selected for RSM’s cutting-edge Industry Eminence Program, which positions its analysts to understand, forecast and communicate economic, business and technology trends shaping the industries the firm serves.
Duffy specializes in helping governing bodies and executive leadership understand how programs, processes and controls support strategic objectives, regulatory requirements and effective stewardship of public resources.
Duffy leads complex engagements across internal audit, enterprise risk management, process improvement, data-driven analysis, organizational transformation, third-party oversight and contract compliance. His work emphasizes practical insights, clear communication and actionable recommendations that resonate with audit committees, boards and senior management.
He has led co-sourced and fully outsourced internal audit functions, including annual risk assessments, audit plan development, project execution, staff management and monitoring of management action plans. Duffy provides leadership on enterprise risk management initiatives, internal audit function transformations, continuous improvement efforts and quality assessment reviews of internal audit activities.
He has participated in more than 150 internal audits and performance reviews across public sector and regulated environments, with responsibilities such as process walkthroughs, control evaluations, development and review of audit deliverables, data visualization, and the presentation of observations and improvement opportunities to executive leadership and oversight bodies. Duffy has led performance audits and program evaluations on behalf of oversight bodies, assessing program outcomes, control design, data reliability and public reporting practices in accordance with applicable professional standards.
Duffy has deep experience in third-party and vendor oversight, and he has led more than 25 vendor assessments focused on contractual compliance, operational effectiveness and the identification of cost and performance improvement opportunities. He is recognized within RSM for thought leadership in emerging risk areas, including leading the establishment of a dedicated blockchain and digital asset risk consulting capability.
