Our 2019 Global Risk, Internal Audit and Compliance Survey of 2,000 executives (half in risk functions) shows that as organizations move through digital transformation, internal audit functions that are more digitally fit more effectively help their stakeholders make better decisions, and take smarter risks.
The stakes from digital initiatives are high, in opportunities gained and threats missed from both new technologies and the heightened risks they bring. Now is the time to shift from discussion to action. An internal audit function’s digital fitness must match that of its organisation. If not, gaps across the lines of defence will widen, and more points of entry for risk will appear.
In our survey, we analysed the digital fitness of internal audit functions by looking at five important fitness dimensions: Vision and roadmap, Ways of working, Operations, Services model and Stakeholder engagement.
We identified six habits that lead to more-digitally-fit risk functions. As organizations go through digital transformations, these habits help drive effective internal audit and overall risk management performance. Three of these habits in particular give internal audit more dexterity to move all six habits forward. Our lessons from the most digitally fit group, the Dynamics, guide internal audit functions towards what they must do to advance:
You can want to focus on doing things in a digital way but if you don't have the support behind it from your CEO and the board, and really have them driving you to do what you do with focus on digital, you can beat your head against the wall and not get anywhere. I don't want to underestimate how important senior leadership and board support is to be able to do this and to be successful at it.