Internal Audit Imperatives for the Decade Ahead
Richard Chambers, CIA, CGAP, CCSA, shares his personal reflections and insights on the internal audit profession.
In late December, I wrote about the five events that defined the past decade for internal auditors. It is too speculative (and far too early) to predict any defining events for the next decade. However, I do have some views on key imperatives that internal auditors must pursue if we are to build on the success we enjoyed during the past 10 years.
The IIA’s Global Board of Directors recently updated The Institute’s five-year strategic plan. Included in the plan is a preferred milestone that internal auditing be “universally recognized as a profession” by 2014. No one is debating how far we have come as a profession. However, being universally recognized as a profession is still aspirational, and is an indication of the distance we still must travel.
As I look at the decade ahead, I am confident that The IIA will do its part to elevate the stature of the profession around the world. We will establish a clear and concise definition of internal auditing’s value proposition, implement and communicate an International Professional Practices Framework worldwide, and continuously advocate the value of the profession to key stakeholders around the world. However, even if The IIA successfully accomplishes all of these strategies and more, any progress in further elevating the stature of the profession will need to be reinforced by internal audit professionals in the “trenches.”
In the past decade, we elevated our stature as a profession by:
- Helping our organizations navigate the demands of new legislation and regulations related to financial controls.
- Becoming champions for effective enterprise risk management.
- Becoming a respected source of talent for our organizations.
- Diversifying our focus and demonstrating our value in the face of a global economic crisis.
In the decade ahead, I believe there will be even greater challenges than those we successfully navigated in the past. I have already commented on the overarching need to provide assurance to our boards on the effectiveness of risk management. Below, I have identified five additional imperatives that I believe must be addressed in the coming decade — and the sooner the better:
- Expand our capabilities to continuously assess risks.
- Enhance our proficiency in data mining and analysis.
- Better integrate the deployment of IT and non-IT audit resources.
- Become more effective in communicating our value proposition to our immediate stakeholders.
- Enhance our coordination with other risk and compliance functions in our organizations.
In the coming weeks, I will expand on these in my blog and invite your perspectives on these and other imperatives that we must pursue.
Posted on Feb 8, 2010 by Richard Chambers
Share This Article:
Entries
Richard,
I would like to raise a fundamental question that goes to the very heart of our aspirational goal of being seen as a profession.
I have - perhaps wrongly or ill-informed - always held the view that for any collection of like minded people to call themselves a profession there needs to be some form of transparent and universally accepted discipline mechanism.
Such a mechanism ensures that those that do not maintain a certain level of behaviour consistent with the expectations of the group are excluded from the benefits of being associated with the group.
The Institute of Internal Auditors and indeed internal auditors globally do not have that mechanism in effective or efficient operation.
Until such time as we - as a collection of like minded people - agree that there is value in such discipline mechanisms then we are but, to borrow, a phrase surfing on the wisdom of the crowd.
We may meet every imperative you list above and may grow on from our achievements of the last decade ... but we will never be a profession.
Therein lies the greatest challenge.
I would welcome your and anyone else's thoughts.
Tom