imperatives for internal audit in the public sector · public sector internal audit stakeholders’...

26
Preparing for the Future Imperatives for Internal Audit in the Public Sector Richard F. Chambers CIA, QIAL, CGAP, CCSA, CRMA President and CEO The Institute of Internal Auditors Copyright © 2018 The Institute of Internal Auditors, Inc. All Rights Reserved.

Upload: others

Post on 08-Oct-2019

11 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Preparing for the FutureImperatives for Internal Audit

in the Public Sector

Richard F. ChambersCIA, QIAL, CGAP, CCSA, CRMA

President and CEO

The Institute of Internal Auditors

Copyright © 2018 The Institute of Internal Auditors, Inc. All Rights Reserved.

Page 2: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Overview

• Competing Expectations of Public

Sector Internal Audit

• Mounting Pressure on the Profession

• Imperatives for the Next Year and

Beyond

• The Internal Audit Leader of the Future

• Parting Thoughts

Copyright © 2018 The Institute of Internal Auditors, Inc. All Rights Reserved.

Page 3: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Public Sector Internal Audit Stakeholders’ Expectations

Management

• Expertise

• Advice/insight

• Foresight

• Risk-centric focus• Cybersecurity

• Public scrutiny

• Operations

• Technology

Oversight Bodies,

Public and Media

• Independence

• Proficiency

• Transparency

• Assurance

• Focus on compliance,

efficiency, integrity

Audit Committees

• Assurance

• Expertise

• Relationship acumen

• Communication

• Coordination with

other risk/control

functions

Achieving Alignment

Page 4: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Pressure Is Mounting

• Competing stakeholder expectations

• The “theater of politics”

• High degree of public scrutiny

• The volatility of risks

• Disruption driven by technology

• Looming uncertainties – Brexit

• Pressure on independence and objectivity

Page 5: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

1. Maintain a Laser Focus on the

Horizon.

2. Take the Offense in the War for

Talent.

3. Sharpen and Deploy the Best

Navigation Tools.

4. Be a Beacon for Transformation.

5. Sail Toward the Storm.

Imperatives

For the Next Year

And Beyond

Page 6: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Maintain a Laser Focus on the Horizon

Page 7: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Maintain a Laser Focus on the Horizon

The Challenge for Internal Audit

• Risks are emerging at warp speed.

• Focusing on the horizon is essential to avoiding the post-crisis question:

“WHERE WERE THE

INTERNAL AUDITORS?”

The Imperative

• In focusing on the horizon:

– Continuously assess risks.

– Identify and swiftly respond to emerging risks.

– Deploy “Doppler Radar” to identify approaching storms.

Page 8: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Focus on the Horizon: Strategies for Success

Key Indicators of Emerging Risks

• Economic forecasts

• Geopolitical risks

• Known strategic business risks facing your organization

• New initiatives being planned

• Legislative and regulatory outlook

• Threats or opportunities facing other government entities

• Risks emerging as headlines via traditional or social media

Understand the Challenge

• How dynamic is your sector?

• Open a dialogue with management and other stakeholders.

– You need stakeholder support to focus on the horizon.

Page 9: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Take the Offense

In the War for Talent

Page 10: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Take the Offense in the War for Talent

The Challenge for Internal Audit• New risks mandate expertise in multiple areas.

• Experts are in high demand.

• And they demand the best opportunities.

The Imperative

• To engage in the war for talent:

– Understand stakeholder needs and expectations.

– Assess existing competencies.

– Develop and deploy strategies, including

• Talent sourcing

• Talent development

• Succession

– Continuously motivate and reward talent.

Page 11: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Gaps in Talent Yield Consequences

72%

Percent of CAEs who believe they have talent gaps to fill

62%

Perform work only to the extent of internal

competencies

37%

Delay work until competencies are

developed

28%

Exclude area from audit plan

In acknowledging talent gaps, CAEs say they are somewhat, very or extremely likely to:

Page 12: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

The War for Talent: The Current Battlefield

Skills Being Actively Recruited

1 Analytical/Critical Thinking

2 Communication

3 Business Acumen

4 Data Mining and Analytics

5 Accounting and Finance

Skills Most Difficult to Recruit

1 Cybersecurity and Privacy

2 Data Mining and Analytics

3 Industry-Specific Knowledge

4 Innovative Thinking

5 Persuasion and Collaboration

What Skills Are in Demand? How Hard Are They to Find?

Page 13: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Sharpen and Deploy

The Best Navigation Tools

Page 14: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Sharpen and Deploy the Best Navigation Tools

The Challenge for Internal Audit

• Pace of growth has slowed.

• Environment is more complex.

• Expectations are at an all-time high.

The Imperative

• Audit smarter, better, and faster – and

continuously deliver impact.

• Deploy leading technologies and practices

to enhance capacity, effectiveness, and

value.

Page 15: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Deploy the Best Navigation Tools

Implementation of Technology

Solutions Full or Partial

1 Electronic workpapers 77%

2 Data analytics 62%

3

Automation of routine internal audit

tasks (e.g. robotics process

automation)

18%

4

Automation of analysis of evidence

(e.g. automated judgement, artificial

intelligence)

13%

New technologies create agile and future-focused functions

Today’s tools of the trade: Audit management systems Data analytics

Tomorrow’s tools of the trade: Robotics Artificial intelligence (AI)

Deploy solutions that will yield dynamic results/insights

Page 16: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Be a Beacon

For Transformation

Page 17: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Be a Beacon for Transformation

The Challenge for Internal Audit

• New market, value networks disrupting at record pace.

• Established market-leading firms, products, and

alliances facing lethal risks.

• Innovation is often the only path forward.

The Imperative

• Champion transformation built on innovative

thinking/actions.

• Provide stakeholders insight into best innovation

processes/frameworks.

• Shine a light on:– Disruptive threats

– Targets for transformation

– Risks and controls throughout transformation processes

Page 18: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Key Steps to Building an Innovative Mindset

• Empower staff to identify problems, risks, threats.

• Analyze first: Make sure you’re solving for the right

problem.

• Understand what is driving decision to innovate.

– Technological disruption

– Shareholder, regulatory pressure

– Disruptive innovation

– Staying ahead of the competition

• Understand your corporate culture.

• Start small and benchmark.

• Innovation must fit the overall business strategy.

“According to the consulting firm

McKinsey, 70% of business

transformations fail. . . . By

inserting itself at 7 steps of the

transformation process and

addressing these risks, internal

audit can assist management in

beating the odds and achieving a

successful transformation.”

James E. Schulien

“Seven Steps to Transformation”

Internal Auditor magazine, August 2017

Page 19: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Sail Toward

The Storm

Page 20: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Sail Toward the Storm

The Challenge for Internal Audit

• Tendency to avoid controversial topics, such as:

– Executive compensation

– Legal compliance

– Corporate culture

– Harassment/misconduct (gender, ethnicity, etc.)

• Looking the other way only compounds risks.

• Some internal auditors experience “courage deficit.”

The Imperative

• Internal auditors must:– Follow the risks – wherever they are.

– Be willing to push on closed doors.

– Summon the courage to sail toward (and even chase)

the storm.

Page 21: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Attributes of Courageous Internal Auditors

6 attributes of courage:

– Overcome fear.

– Be passionate.

– Persevere in the face of adversity.

– Stand up for what’s right.

– Expand your horizons.

– Face suffering with dignity or faith.

Speak truth to power.

Page 22: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

The Internal Audit

Leader of Tomorrow

Page 23: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

The Internal Audit Leader of Tomorrow

• Genetically Risk-centric – Leading at the Speed of Risk!

– Risk-aware

– Risk-intuitive

– Embrace opportunities to enhance value.

– Risk-courageous

• Tech Savvy and Tech Fearless

– Understand innately how technology can impact and change organizations and still

have the courage to embrace and adapt to technological change.

• Incessantly Curious and Professionally Skeptical

– More than just a trait of the best; it will be table stakes to get into the game.

– Tomorrow's internal audit leaders will need to walk a fine line when it comes to

skepticism.

• Ethically Farsighted

– Understand how technology and other factors that change our world impact and

influence ethics within the organization and within themselves.

Page 24: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

The Internal Audit Leader of Tomorrow

• Intellectually Honest

– Speaking truth to power.

– True leaders will not give in to pressure to compromise intellectual honesty for

expediency.

• Not Your Grandfather's CPA

– Accounting/finance remains the most recruited academic degree.

– In the future, internal auditors will increasingly come from nontraditional

backgrounds, such as engineering and chemistry, as demand for specialized skills

grows in parallel to changing demands on the profession.

• Cosmopolitan

– The market is increasingly global. Companies operate seamlessly around the

world.

– Internal auditors of the future will have to be cosmopolitan — familiar with and at

ease in many different countries and cultures.

Page 25: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Parting Thoughts

In the Future

We must be recognized

as critical to protecting

and enhancing

organizational value!

In the Past

We were focused on

controls – to ensure the

organization’s resources

were protected.

Page 26: Imperatives for Internal Audit in the Public Sector · Public Sector Internal Audit Stakeholders’ Expectations Management • Expertise • Advice/insight • Foresight • Risk-centric

Thank You

Copyright © 2018 The Institute of Internal Auditors, Inc. All Rights Reserved.