Welcome!

News Feed Item

Internal Audit Departments Starting to Embrace Data Analytics, Yet Many Have Far to Go to Achieve Full Potential, According to Latest Protiviti Survey

Audit professionals who use data analytics find significant value in its use; others need assistance with process and skills gaps

MENLO PARK, Calif., March 20, 2017 /PRNewswire/ -- The abundance of information captured in the world today and the ability to apply data analytics to assess, monitor and predict activity has many chief audit executives (CAEs) around the world rethinking traditional audit models and approaches. According to Embracing Analytics in Auditing, the 2017 Internal Audit Capabilities and Needs Survey report, released today by global consulting firm Protiviti, 66 percent of internal audit functions now employ some form of data analytics in audit processes. However, despite this positive trend, many audit departments (34 percent) do not employ data analytics as part of the audit process, thus have not started the journey to realize the significant benefits that analytics technologies and resulting insights can provide. Of those who currently use data analytics, a mere 10 percent rate their data analytics functions as quantitatively managed or optimized.

More than 900 internal audit professionals participated in Protiviti's 11th annual Internal Audit Capabilities and Needs Survey to assess data analytics capabilities and practices among internal audit functions, along with the top priorities for CAEs and internal audit professionals this year. The survey was conducted globally and the majority of the responses came from North America.

"The pace of change in our world is having a dramatic impact on how organizations operate.  Internal audit professionals must be adept in applying new tools and techniques to understand and manage risk. The use of advanced data analytic techniques is the runaway winner as a best practice of the future," said Brian Christensen, executive vice president, global internal audit and financial advisory, Protiviti. "Many of the organizations that are already employing data analytics within their audit departments are beginning to experience significant value in the results. As recognition of these benefits grows, we expect to see CAEs work with management and the board of directors to make further investments to increase their data analytics capabilities, in terms of both tools and skillsets, as the practice of internal auditing shifts increasingly to analytics and continuous auditing and monitoring."  

The Impact: Data Analytics and the Audit Process
Although they are in the minority amongst their peers, internal audit functions with mature, continuous monitoring and auditing programs are achieving impressive benefits. These include strengthening risk assessments; more effectively tracking fraud indicators and key operational indicators; enabling a real-time view of organizational risk; and conducting risk-based audits.

On the other end of the spectrum, according to the report, internal audit groups in the developmental stage may not know yet how to properly elevate and optimize their analytics, largely due to the lack of understanding about the benefits these capabilities can provide.

Challenges and Insights
The survey also revealed that internal audit functions face numerous challenges, such as:

  • 73 percent of all organizations performing analytics say demand for data analytics has increased – even more so among organizations in the "best practices" segment
  • 34 percent are planning to add analytics headcount
  • Identifying where data resides is a challenge for 60 percent of organizations as are system constraints (56 percent)
  • Data quality is an issue as well – only 22 percent rate it to be excellent or good

The Protiviti report offers insights on these challenges and many other key findings of the survey. For example, internal audit groups with dedicated analytics functions and organizations that have attained a 'managed' or 'optimized' state of analytics maturity are far more likely to conduct continuous auditing. Protiviti's survey found that overcoming the constraints to build more sophisticated analytics processes requires:

  • A longer-term strategy and an implementation roadmap
  • Carefully chosen and well-crafted pilot programs
  • Clear direction (including investment in skills, tools and expertise) from CAEs and organizational leaders

"It can be overwhelming for organizations just getting started with using data analytics. There may be budget and resource constraints, employees need to learn new technologies and new processes need to be developed. We've found that companies just need to pick a starting point and get the help they need so that, over time, they can truly optimize their internal audit functions," added Christensen.

In addition to the 2017 study's special focus on data analytics, the Protiviti report includes sections on general technical knowledge; audit process knowledge; and personal skills and capabilities. In these sections, data analytics, continuous auditing and emerging technologies stand out as areas that CAEs and internal audit professionals need to improve their knowledge and expertise.

Webinar on April 12
Key findings from the survey will be discussed in a complimentary webinar on April 12 at 10:00 a.m. PDT. Protiviti's Christensen, joined by Protiviti Managing Directors Gordon Braun and Barbi Goldstein, will discuss the findings and add their insights during the 90-minute webinar. Please register here.

About the Survey and Resources
Protiviti's 2017 Internal Audit Capabilities and Needs Survey was fielded in December 2016 across the globe and surveyed 906 respondents. Respondents work in the public, private, government and non-profit sectors and are representative of virtually all industry sectors. Nearly two-thirds of respondents are from organizations with more than $1 billion in revenue.

The survey report, along with an infographic highlighting key results, a podcast and a short video, are all available for complimentary download at www.protiviti.com/IAsurvey.

From March 20th to 22nd, Protiviti is exhibiting at The Institute of Internal Auditors' General Audit Management Conference in Orlando, FL and has complimentary copies of the survey report available for interested attendees. For more information about the conference, please visit: www.protiviti.com/events.

About Protiviti
Protiviti (www.protiviti.com) is a global consulting firm that delivers deep expertise, objective insights, a tailored approach and unparalleled collaboration to help leaders confidently face the future. Through its network of more than 70 offices in over 20 countries, Protiviti and its independently owned Member Firms provide clients with consulting solutions in finance, technology, operations, data analytics, governance, risk and internal audit.

Protiviti has served more than 60 percent of Fortune 1000® and 35 percent of Fortune Global 500® companies. The firm also works with smaller, growing companies, including those looking to go public, as well as with government agencies. Protiviti is a wholly owned subsidiary of Robert Half (NYSE: RHI). Founded in 1948, Robert Half is a member of the S&P 500 index.

Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services.

Editor's note: Infographic (in jpeg and pdf) and photos available upon request.

 

To view the original version on PR Newswire, visit:http://www.prnewswire.com/news-releases/internal-audit-departments-starting-to-embrace-data-analytics-yet-many-have-far-to-go-to-achieve-full-potential-according-to-latest-protiviti-survey-300426241.html

SOURCE Protiviti

More Stories By PR Newswire

Copyright © 2007 PR Newswire. All rights reserved. Republication or redistribution of PRNewswire content is expressly prohibited without the prior written consent of PRNewswire. PRNewswire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

Latest Stories
SYS-CON Events announced today that Infranics will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Since 2000, Infranics has developed SysMaster Suite, which is required for the stable and efficient management of ICT infrastructure. The ICT management solution developed and provided by Infranics continues to add intelligence to the ICT infrastructure through the IMC (Infra Management Cycle) based on mathemat...
Most companies are adopting or evaluating container technology - Docker in particular - to speed up application deployment, drive down cost, ease management and make application delivery more flexible overall. As with most new architectures, this dream takes a lot of work to become a reality. Even when you do get your application componentized enough and packaged properly, there are still challenges for DevOps teams to making the shift to continuous delivery and achieving that reduction in cost...
@DevOpsSummit has been named the ‘Top DevOps Influencer' by iTrend. iTrend processes millions of conversations, tweets, interactions, news articles, press releases, blog posts - and extract meaning form them and analyzes mobile and desktop software platforms used to communicate, various metadata (such as geo location), and automation tools. In overall placement, @DevOpsSummit ranked as the number one ‘DevOps Influencer' followed by @CloudExpo at third, and @MicroservicesE at 24th.
SYS-CON Events announced today that Auditwerx will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Auditwerx specializes in SOC 1, SOC 2, and SOC 3 attestation services throughout the U.S. and Canada. As a division of Carr, Riggs & Ingram (CRI), one of the top 20 largest CPA firms nationally, you can expect the resources, skills, and experience of a much larger firm combined with the accessibility and attent...
SYS-CON Events announced today that Interoute, owner-operator of one of Europe's largest networks and a global cloud services platform, has been named “Bronze Sponsor” of SYS-CON's 20th Cloud Expo, which will take place on June 6-8, 2017 at the Javits Center in New York, New York. Interoute is the owner-operator of one of Europe's largest networks and a global cloud services platform which encompasses 12 data centers, 14 virtual data centers and 31 colocation centers, with connections to 195 add...
SYS-CON Events announced today that Cloudistics, an on-premises cloud computing company, has been named “Bronze Sponsor” of SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY. Cloudistics delivers a complete public cloud experience with composable on-premises infrastructures to medium and large enterprises. Its software-defined technology natively converges network, storage, compute, virtualization, and management into a ...
MongoDB Atlas leverages VPC peering for AWS, a service that allows multiple VPC networks to interact. This includes VPCs that belong to other AWS account holders. By performing cross account VPC peering, users ensure networks that host and communicate their data are secure. In his session at 20th Cloud Expo, Jay Gordon, a Developer Advocate at MongoDB, will explain how to properly architect your VPC using existing AWS tools and then peer with your MongoDB Atlas cluster. He'll discuss the secur...
In his session at Cloud Expo, Alan Winters, an entertainment executive/TV producer turned serial entrepreneur, will present a success story of an entrepreneur who has both suffered through and benefited from offshore development across multiple businesses: The smart choice, or how to select the right offshore development partner Warning signs, or how to minimize chances of making the wrong choice Collaboration, or how to establish the most effective work processes Budget control, or how to max...
Imagine having the ability to leverage all of your current technology and to be able to compose it into one resource pool. Now imagine, as your business grows, not having to deploy a complete new appliance to scale your infrastructure. Also imagine a true multi-cloud capability that allows live migration without any modification between cloud environments regardless of whether that cloud is your private cloud or your public AWS, Azure or Google instance. Now think of a world that is not locked i...
In his session at @ThingsExpo, Eric Lachapelle, CEO of the Professional Evaluation and Certification Board (PECB), will provide an overview of various initiatives to certifiy the security of connected devices and future trends in ensuring public trust of IoT. Eric Lachapelle is the Chief Executive Officer of the Professional Evaluation and Certification Board (PECB), an international certification body. His role is to help companies and individuals to achieve professional, accredited and worldw...
In his General Session at 16th Cloud Expo, David Shacochis, host of The Hybrid IT Files podcast and Vice President at CenturyLink, investigated three key trends of the “gigabit economy" though the story of a Fortune 500 communications company in transformation. Narrating how multi-modal hybrid IT, service automation, and agile delivery all intersect, he will cover the role of storytelling and empathy in achieving strategic alignment between the enterprise and its information technology.
While DevOps most critically and famously fosters collaboration, communication, and integration through cultural change, culture is more of an output than an input. In order to actively drive cultural evolution, organizations must make substantial organizational and process changes, and adopt new technologies, to encourage a DevOps culture. Moderated by Andi Mann, panelists discussed how to balance these three pillars of DevOps, where to focus attention (and resources), where organizations might...
Microservices are a very exciting architectural approach that many organizations are looking to as a way to accelerate innovation. Microservices promise to allow teams to move away from monolithic "ball of mud" systems, but the reality is that, in the vast majority of organizations, different projects and technologies will continue to be developed at different speeds. How to handle the dependencies between these disparate systems with different iteration cycles? Consider the "canoncial problem" ...
In his session at 20th Cloud Expo, Scott Davis, CTO of Embotics, will discuss how automation can provide the dynamic management required to cost-effectively deliver microservices and container solutions at scale. He will discuss how flexible automation is the key to effectively bridging and seamlessly coordinating both IT and developer needs for component orchestration across disparate clouds – an increasingly important requirement at today’s multi-cloud enterprise.
The essence of cloud computing is that all consumable IT resources are delivered as services. In his session at 15th Cloud Expo, Yung Chou, Technology Evangelist at Microsoft, demonstrated the concepts and implementations of two important cloud computing deliveries: Infrastructure as a Service (IaaS) and Platform as a Service (PaaS). He discussed from business and technical viewpoints what exactly they are, why we care, how they are different and in what ways, and the strategies for IT to transi...