survey on workplace readiness · environment and internal audit’s involvement in the process. the...

25
AUDIT EXECUTIVE CENTER KNOWLEDGE BRIEF SURVEY ON WORKPLACE READINESS Health, safety, and liability in the COVID-19 environment

Upload: others

Post on 25-Jul-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

AUDIT EXECUTIVE CENTER KNOWLEDGE BRIEF

SURVEY ON WORKPLACE READINESS Health, safety, and liability in the COVID-19 environment

Page 2: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

Table of Contents

Summary........................................................................................................................................................ 1

Factors for returning to the workplace ....................................................................................................... 3

Readiness assessments............................................................................................................................... 4

Areas of uncertainty ..................................................................................................................................... 6

Internal audit involvement ............................................................................................................................ 8

Demographics ............................................................................................................................................... 9

Appendix A: Readiness per industry group ............................................................................................. 11

Appendix B: Preparation activities ............................................................................................................ 19

Page 3: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

1

SUMMARY

Not all organizations prepared for return to the workplace

According to a recent IIA survey, more than 50% of organizations indicated they were not well-prepared to

address some key factors for ensuring a safe return to the workplace. These include activities directly related

to COVID-19 transmission (such as testing and making social distancing modifications), as well as evaluating

potential organizational liability (Exhibit 4).

In addition, more than 15% of respondents were not able to provide an opinion on the readiness of their

organization on about a third of the factors, including legal liabilities and testing (Exhibit 5).

Finally, most internal audit leaders have been involved in preparations for returning to the workplace,

particularly with assessments of risk and consulting activities. However, few internal auditors are performing

reviews of related critical risk areas, such as health and safety (Exhibit 7). Appendix B provides informative

comments about the focus of internal audit efforts, organized by industry groups.

Report overview

This report examines organizational readiness for employees returning to the workplace in the COVID-19

environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate

their organizations in the following areas:

Health and safety procedures.

Health resources.

Human resource issues.

Operational impacts.

Regulatory compliance and legal issues.

There are some notable differences in levels of preparedness by industry group. In particular, respondents

from educational services rated their organizations as the least prepared for a return to the workplace

compared to other industries (Exhibit 3). Also, public administration respondents were most likely to choose

“not sure” in response to questions about preparedness (Exhibit 6). See Appendix A for industry breakouts.

This survey was distributed electronically to internal audit leaders by email and on social media from May 6–8,

2020.1 Responses were received from 371 chief audit executives (CAEs) and directors in the United States

(91%) and Canada (9%).2

Page 4: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

2

1. The World Health Organization declared COVID-19 a pandemic on March 11, 2020. See WHO media briefing on

COVID-19 – 11 March 2020, (World Health Organization, March 11, 2020), https://www.who.int/dg/speeches/detail/who-

director-general-s-opening-remarks-at-the-media-briefing-on-covid-19---11-march-2020.

2. Responses received from outside North America were not included in the totals or the analysis.

Exhibit 1: Industry Groups for Analysis

Name of Industry Group Number of Respondents

Percentage

Finance and insurance 124 34%

Non-consumer-facing (e.g., business services)

Other services (except public administration) (16); professional,

scientific, and technical services (11); real estate, rental, and leasing

(12); information (2); wholesale trade (6); management of companies

and enterprises (4); administrative, support, waste management,

remediation services (2)

53 14%

Physical outputs (except manufacturing)

Utilities (13); mining, quarrying, oil/gas extraction (10); transportation

and warehousing (12); construction (5); agriculture, forestry, fishing,

and hunting (5)

45 12%

Educational services 42 11%

Manufacturing 34 9%

Public administration 34 9%

Health care and social assistance 28 8%

Consumer-facing (e.g., retail, food, travel)

Arts, entertainment, and recreation (4); retail trade (4);

accommodation and food services (3)

11 3%

TOTAL 371 100%

Note: Industry categories are based on the NAICS (North American Industry Classification System)

https://www.naics.com/search-naics-codes-by-industry/. Some industries received enough responses to be analyzed

independently, while other industries were combined into groups with similar characteristics. Although the response rate

for "consumer facing” was small, the group was retained to provide continuity with previous reports.

Page 5: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

3

FACTORS FOR RETURNING TO THE WORKPLACE

Key factors assessed in the survey

Key factors to consider for returning to the workplace were compiled from OSHA’s Guidance on Preparing

Workplaces for COVID-19 and the CDC’s Interim Guidance for Businesses and Employers. Exhibit 2 lists the

factors used in the survey, with red asterisks indicating factors directly related to transmitting COVID-19

between people. Survey respondents assessed their organizations’ preparedness across these 19 factors.

Exhibit 2: Factors for Returning to the Workplace in the COVID-19 Environment

Health and safety procedures

Implementing personal hygiene policies (hand washing, etc.)*

Implementing distancing policies to prevent infection (six feet of separation, etc.)*

Cleaning and disinfecting the workplace*

Preventing infection among those who clean and disinfect*

Health resources

Personal protection equipment*

Testing to identify currently infected employees*

Testing to identify prior infected employees*

Vendors for cleaning services*

Supplies for cleaning and disinfecting*

Human resource issues

Health and safety policies for employees

Identifying and protecting at-risk employees

Informing employees of possible exposure at the workplace (contact tracing)*

Protecting confidentiality of infected employees

Operational impacts

Physical modifications to workplace for social distancing*

Reduced productivity due to COVID-19 environment

Increased costs related to adapting workplaces for COVID-19

Regulatory compliance and legal issues

Regulatory compliance related to COVID-19

Legal liability for employee illness or death

Legal liability for breach of confidentiality related to COVID-19

The survey question was, “How prepared is your organization to address [topic] for returning to work in the COVID-19

environment?” Response options were “not prepared,” “minimally prepared,” “moderately prepared,” “well prepared,”

“very well prepared,” and “not sure.” In the exhibits for this report, the descriptions of the factors were shortened to fit

in the available space.

* Factor directly related to transmitting COVID-19

Page 6: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

4

READINESS ASSESSMENTS

Industry differences point to future challenges

To get an overview of the sense of readiness, we averaged the percentage of those who chose “well

prepared” or “very well prepared” across the 19 factors. For all respondents, the average was 53%. As shown

in Exhibit 3 below, manufacturing and the physical outputs industry group indicated higher rates of readiness

than other groups. Educational services was notably lower. See Appendix A for detailed results from each

industry group, listed in the order from Exhibit 3.

65%

62%

56%

54%

53%

52%

46%

40%

53%

Manufacturing

Physical outputs

Health care and social assistance

Finance and insurance

Public administration

Consumer-facing (retail, food, travel)

Non-consumer-facing (business services)

Educational services

All respondents

Exhibit 3: Average Percentage of "Well Prepared" Per Industry Group (Highest to Lowest)

Note: How prepared is your organization to address factors for returning to work in the COVID-19

environment? Survey responses were collected May 6-8, 2020, from CAEs and directors in North

America associated with The IIA. The graph shows the average percentage for who chose "well

prepared" or "very well prepared" across the 19 factors. n = 371. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 7: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

5

Preparedness levels are lowest for testing and social distancing

Testing for COVID-19 infection has the lowest levels of preparedness, followed by workplace modifications

for social distancing (Exhibit 4). However, some industries, such as health care, manufacturing, and the

physical outputs group, indicate higher levels of readiness than average (Appendix A). Appendix A provides

detailed results from each industry group.

46%

40%

19%

8%

18%

12%

12%

7%

7%

10%

6%

12%

9%

5%

6%

7%

4%

3%

4%

16%

18%

35%

25%

26%

31%

20%

34%

22%

32%

17%

24%

26%

22%

23%

24%

20%

17%

14%

22%

21%

4%

22%

8%

8%

16%

7%

19%

4%

22%

8%

8%

11%

8%

4%

9%

3%

3%

16%

21%

42%

45%

48%

49%

52%

52%

52%

54%

55%

56%

57%

62%

63%

65%

67%

77%

79%

Tests for previous infection *

Tests for current infection *

Workplace modification for distancing *

Illness or death liability

Personal protection equipment (PPE) *

Costs to adapt workplaces

Availability of cleaning vendors *

Reduced productivity

Confidentiality breach liability

Social distancing policy

Infection of cleaning staff *

Contact tracing (informing employees) *

At-risk employees policy

Regulatory compliance for COVID-19

Availability of disinfecting supplies *

Health and safety policy

Medical confidentiality policy

Disinfecting workplace *

Personal hygiene *

Exhibit 4: Readiness for Returning to the Workplace(All Respondents)

Not or minimally prepared Moderately prepared Not sure Well or very well prepared

50%

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment? Survey

responses were collected May 6-8, 2020, from CAEs and directors in North America associated with The IIA. Totals may

not equal 100% due to rounding. n = 371. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 8: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

6

AREAS OF UNCERTAINTY

Uncertainty about testing, legal liability, and cleaning staff

For six of the factors surveyed, 16% or more of respondents did not provide an assessment as to the

preparedness of their organizations (Exhibit 5).

22%

22%

22%

20%

19%

16%

11%

9%

8%

8%

8%

8%

8%

7%

5%

4%

4%

3%

3%

Tests for previous infection *

Infection of cleaning staff *

Illness or death liability

Tests for current infection *

Confidentiality breach liability

Availability of cleaning vendors *

Regulatory compliance for COVID-19

Medical confidentiality policy

Personal protection equipment (PPE) *

Availability of disinfecting supplies *

Costs to adapt workplaces

Contact tracing (informing employees) *

At-risk employees policy

Reduced productivity

Workplace modification for distancing *

Health and safety policy

Social distancing policy

Personal hygiene *

Disinfecting workplace *

Exhibit 5: Percentage of "Not Sure" Responses for Readiness for Returning to the Workplace

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment? Those

who answered "not sure" only. Survey responses were collected May 6-8, 2020, from CAEs and directors in North

America associated with The IIA. n = 371. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 9: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

7

“Not sure” responses compared by industry group

Notably, more respondents from public administration chose “not sure,” compared to other industry groups,

when asked to assess the return-to-workplace factors (Exhibit 6).

17%

12%

11%

11%

11%

9%

9%

11%

Public administration

Health care and social assistance

Non-consumer-facing (business services)

Finance and insurance

Educational services

Manufacturing

Physical outputs

All respondents

Exhibit 6: Average Percentage of "Not Sure" Responses for Readiness for Returning to the Workplace (Compared

by Industry Group)

Note: How prepared is your organization to address factors for returning to work in the COVID-19

environment? Those who answered "not sure" only. Survey responses were collected May 6-8,

2020, from CAEs and directors in North America associated with The IIA. The consumer-facing

industry group was not included in this exhibit because their lower response rate appeared to skew

the percentages. n = 360.

Page 10: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

8

INTERNAL AUDIT INVOLVEMENT

For some critical risk areas, very few reviews are being done

Most internal auditors are actively involved in their organizations’ readiness efforts. Nearly three-

quarters of respondents noted that they are identifying emerging risks and updating risk assessments. In

addition, two-thirds are performing consulting activities in preparation for organizations returning staff to the

workplace.

However, very few internal audit functions are performing reviews that provide for readiness to return. For

example, only 8% of respondents are performing reviews related to health and safety, 10% are performing

reviews related to human resources, and 15% are performing reviews of risk related to third parties (Exhibit 7).

Note: In which areas has internal audit been involved in preparing for returning to work in the COVID-19

environment? Those who chose “not sure” or “not applicable” were not included in the results. n = 288.

72%

66%

38%

31%

27%

17%

15%

10%

8%

7%

Identifying emerging risksand risk assessment

Consulting (general)

Crisis response team

Operational reviews andproductivity impact analysis

Compliance risk reviews and legalreviews (other than compliance)

Financial impact analysis

Third-party risk reviews

Human resource reviews

Health and safety reviews

Other

Exhibit 7: Internal Audit Involvement in Readiness for Returning to the Workplace

Page 11: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

9

DEMOGRAPHICS

7%

35%

23% 23%

7% 5%

1 2 to 5 6 to 10 11 to 25 26 to 50 50+

Exhibit 8: Internal Audit Function Size

Note: What is the size of your internal audit function? Survey responses

were collected May 6-8, 2020 from CAEs and directors in North America

associated with The IIA. n = 371.

35%

26%

24%

11%

4%

Publicly traded

Public sector

Privately held

Nonprofit

Other

Exhibit 9: Organization Type

Note: For what type of organization do you currently work? Survey

responses were collected May 6-8, 2020 from CAEs and directors in North

America associated with The IIA. n = 371.

Page 12: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

10

33%

11%

9%

9%

8%

4%

4%

3%

3%

3%

3%

2%

1%

1%

1%

1%

1%

1%

1%

1%

Finance and insurance

Educational services

Manufacturing

Public administration

Health care and social assistance

Other services (except public administration)

Utilities

Real estate and rental and leasing

Transportation and warehousing

Professional, scientific, and technical services

Mining, quarrying, and oil and gas extraction

Wholesale trade

Agriculture, forestry, fishing and hunting

Construction

Arts, entertainment, and recreation

Management of companies and enterprises

Retail trade

Accommodation and food services

Administrative, support, waste management,remediation services

Information

Exhibit 10: Industry

Note: What is the primary industry classification of the organization for which you work (or your primary client if you

are a service provider)? Survey responses were collected May 6-8, 2020, from CAEs and directors in North America

associated with The IIA. Total may not equal 100% due to rounding. n = 371.

Page 13: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

11

APPENDIX A: READINESS PER INDUSTRY GROUP

Manufacturing

41%

29%

6%

3%

6%

6%

6%

9%

3%

3%

18%

21%

26%

38%

15%

35%

32%

29%

26%

15%

12%

23%

23%

12%

18%

18%

15%

12%

6%

21%

18%

21%

26%

6%

9%

20%

15%

3%

12%

3%

3%

3%

3%

3%

20%

32%

53%

56%

56%

59%

62%

65%

65%

65%

67%

68%

71%

76%

76%

79%

82%

85%

91%

Tests for previous infection *

Tests for current infection *

Illness or death liability

Workplace modification for distancing *

Infection of cleaning staff *

Social distancing policy

Contact tracing (informing employees) *

Costs to adapt workplaces

Reduced productivity

Confidentiality breach liability

Availability of cleaning vendors *

Personal protection equipment (PPE) *

At-risk employees policy

Regulatory compliance for COVID-19

Health and safety policy

Disinfecting workplace *

Medical confidentiality policy

Availability of disinfecting supplies *

Personal hygiene *

Exhibit 11: Readiness for Returning to the WorkplaceManufacturing

Not or minimally prepared Moderately prepared Not sure Well or very well prepared

50%

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment?

Survey responses were collected May 6-8, 2020, from CAEs and directors in North America associated with The IIA.

Manufacturing only. n = 34. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 14: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

12

Physical outputs (except manufacturing)

47%

36%

7%

2%

20%

9%

7%

2%

2%

2%

9%

7%

5%

2%

20%

20%

27%

22%

25%

29%

29%

38%

22%

18%

18%

18%

22%

22%

20%

20%

13%

9%

9%

13%

11%

22%

25%

2%

9%

9%

2%

14%

16%

9%

9%

4%

5%

7%

4%

5%

20%

33%

44%

51%

53%

53%

55%

58%

62%

64%

64%

66%

69%

73%

73%

76%

82%

89%

91%

Tests for previous infection *

Tests for current infection *

Illness or death liability

Confidentiality breach liability

Workplace modification for distancing *

Costs to adapt workplaces

Reduced productivity

Social distancing policy

Regulatory compliance for COVID-19

Infection of cleaning staff *

Availability of cleaning vendors *

Contact tracing (informing employees) *

Personal protection equipment (PPE) *

Health and safety policy

Medical confidentiality policy

At-risk employees policy

Availability of disinfecting supplies *

Personal hygiene *

Disinfecting workplace *

Exhibit 12: Readiness for Returning to the WorkplacePhysical Outputs

Not or minimally prepared Moderately prepared Not sure Well or very well prepared

50%

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment?

Survey responses were collected May 6-8, 2020, from CAEs and directors in North America associated with The

IIA. Physical outputs only. n = 45. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 15: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

13

Health care and social assistance

28%

18%

14%

14%

14%

11%

11%

11%

18%

7%

7%

7%

7%

4%

7%

7%

7%

7%

7%

14%

14%

40%

40%

21%

14%

25%

29%

21%

18%

32%

28%

11%

28%

11%

11%

18%

11%

11%

29%

29%

7%

7%

18%

25%

11%

7%

4%

18%

4%

4%

21%

7%

14%

11%

4%

4%

4%

29%

39%

39%

39%

47%

50%

53%

53%

57%

57%

57%

61%

61%

61%

68%

71%

71%

78%

78%

Tests for previous infection *

Tests for current infection *

Workplace modification for distancing *

Costs to adapt workplaces

Contact tracing (informing employees) *

Availability of cleaning vendors *

At-risk employees policy

Reduced productivity

Personal protection equipment (PPE) *

Illness or death liability

Regulatory compliance for COVID-19

Social distancing policy

Confidentiality breach liability

Availability of disinfecting supplies *

Infection of cleaning staff *

Medical confidentiality policy

Disinfecting workplace *

Health and safety policy

Personal hygiene *

Exhibit 13: Readiness for Returning to the WorkplaceHealth Care and Social Assistance

Not or minimally prepared Moderately prepared Not sure Well or very well prepared

50%

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment?

Survey responses were collected May 6-8, 2020, from CAEs and directors in North America associated with The IIA.

Health care and social assistance only. n = 28. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 16: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

14

Finance and insurance

49%

52%

22%

21%

8%

15%

6%

13%

8%

8%

12%

9%

6%

6%

7%

5%

5%

2%

4%

12%

10%

28%

31%

26%

31%

19%

19%

21%

28%

22%

24%

28%

24%

22%

18%

14%

17%

14%

25%

24%

15%

6%

19%

5%

21%

14%

15%

7%

9%

8%

6%

9%

4%

9%

9%

1%

2%

14%

14%

35%

42%

47%

49%

54%

54%

56%

57%

57%

59%

60%

61%

67%

68%

72%

80%

80%

Tests for current infection *

Tests for previous infection *

Personal protection equipment (PPE) *

Workplace modification for distancing *

Illness or death liability

Social distancing policy

Infection of cleaning staff *

Availability of cleaning vendors *

Confidentiality breach liability

Costs to adapt workplaces

Contact tracing (informing employees) *

At-risk employees policy

Reduced productivity

Availability of disinfecting supplies *

Health and safety policy

Regulatory compliance for COVID-19

Medical confidentiality policy

Disinfecting workplace *

Personal hygiene *

Exhibit 14: Readiness for Returning to the WorkplaceFinance and Insurance

Not or minimally prepared Moderately prepared Not sure Well or very well prepared

50%

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment?

Survey responses were collected May 6-8, 2020, from CAEs and directors in North America associated with The IIA.

Finance and insurance only. Totals may not equal 100% due to rounding. n = 124. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 17: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

15

Public administration

38%

32%

9%

6%

9%

9%

15%

12%

3%

9%

12%

12%

3%

15%

3%

6%

3%

6%

3%

15%

18%

15%

15%

35%

18%

26%

23%

21%

23%

23%

14%

20%

17%

15%

17%

23%

20%

12%

29%

24%

32%

32%

9%

23%

9%

12%

23%

12%

9%

15%

18%

9%

20%

15%

12%

9%

9%

18%

26%

44%

47%

47%

50%

50%

53%

53%

56%

56%

59%

59%

59%

62%

62%

62%

65%

76%

Tests for previous infection *

Tests for current infection *

Infection of cleaning staff *

Illness or death liability

Reduced productivity

Availability of cleaning vendors *

Costs to adapt workplaces

Workplace modification for distancing *

Confidentiality breach liability

At-risk employees policy

Social distancing policy

Contact tracing (informing employees) *

Availability of disinfecting supplies *

Personal protection equipment (PPE) *

Regulatory compliance for COVID-19

Medical confidentiality policy

Disinfecting workplace *

Health and safety policy

Personal hygiene *

Exhibit 15: Readiness for Returning to the WorkplacePublic Administration

Not or minimally prepared Moderately prepared Not sure Well or very well prepared

50%

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment?

Survey responses were collected May 6-8, 2020, from CAEs and directors in North America associated with The

IIA. Public administration only. n = 34. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 18: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

16

Consumer-facing (retail, food, travel)

46%

28%

18%

18%

27%

18%

18%

18%

18%

18%

18%

9%

18%

9%

18%

9%

9%

9%

18%

27%

27%

27%

36%

36%

27%

18%

18%

27%

36%

27%

36%

36%

9%

18%

27%

9%

27%

27%

18%

18%

9%

18%

9%

18%

27%

37%

37%

46%

46%

46%

46%

46%

55%

55%

55%

55%

55%

64%

73%

73%

73%

82%

Tests for previous infection *

Tests for current infection *

Illness or death liability

Regulatory compliance for COVID-19

Workplace modification for distancing *

Costs to adapt workplaces

Reduced productivity

Confidentiality breach liability

Infection of cleaning staff *

Availability of cleaning vendors *

Social distancing policy

Contact tracing (informing employees) *

At-risk employees policy

Availability of disinfecting supplies *

Medical confidentiality policy

Personal protection equipment (PPE) *

Health and safety policy

Disinfecting workplace *

Personal hygiene *

Exhibit 16: Readiness for Returning to the WorkplaceConsumer-Facing (Retail, Food, Travel)

Not or minimally prepared Moderately prepared Not sure Well or very well prepared

50%

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment?

Survey responses were collected May 6-8, 2020, from CAEs and directors in North America associated with The

IIA. Consumer-facing industry group only. Small n value was accepted in order to have this group represented in

the results. n = 11. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 19: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

17

Non-consumer-facing (business services)

45%

43%

21%

15%

19%

10%

10%

11%

11%

19%

9%

8%

13%

21%

6%

6%

2%

5%

4%

23%

28%

45%

26%

32%

26%

30%

36%

36%

28%

38%

15%

23%

19%

34%

26%

34%

23%

19%

26%

21%

2%

19%

8%

21%

17%

8%

8%

4%

4%

26%

13%

7%

4%

11%

7%

2%

5%

6%

8%

32%

40%

41%

43%

43%

45%

45%

49%

49%

51%

51%

53%

56%

57%

57%

70%

72%

Tests for previous infection *

Tests for current infection *

Workplace modification for distancing *

Availability of cleaning vendors *

Costs to adapt workplaces

Illness or death liability

Confidentiality breach liability

Reduced productivity

At-risk employees policy

Contact tracing (informing employees) *

Health and safety policy

Infection of cleaning staff *

Availability of disinfecting supplies *

Personal protection equipment (PPE) *

Social distancing policy

Regulatory compliance for COVID-19

Medical confidentiality policy

Personal hygiene *

Disinfecting workplace *

Exhibit 17: Readiness for Returning to the WorkplaceNon-Consumer-Facing (Business Services)

Not or minimally prepared Moderately prepared Not sure Well or very well prepared

50%

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment?

Survey responses were collected May 6-8, 2020, from CAEs and directors in North America associated with The

IIA. Non-consumer-facing (business services) only. n = 53. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 20: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

18

Educational services

50%

48%

24%

19%

24%

12%

7%

19%

9%

14%

12%

7%

19%

12%

12%

10%

7%

7%

7%

21%

24%

52%

45%

45%

31%

60%

29%

31%

33%

38%

36%

28%

33%

31%

26%

14%

24%

14%

12%

9%

2%

12%

7%

29%

5%

19%

24%

10%

5%

12%

5%

5%

5%

12%

24%

5%

3%

17%

19%

22%

24%

24%

28%

28%

33%

36%

43%

45%

45%

48%

50%

52%

52%

55%

64%

76%

Tests for previous infection *

Tests for current infection *

Workplace modification for distancing *

Costs to adapt workplaces

Personal protection equipment (PPE) *

Illness or death liability

Reduced productivity

Availability of cleaning vendors *

Confidentiality breach liability

At-risk employees policy

Social distancing policy

Regulatory compliance for COVID-19

Contact tracing (informing employees) *

Health and safety policy

Availability of disinfecting supplies *

Medical confidentiality policy

Infection of cleaning staff *

Personal hygiene *

Disinfecting workplace *

Exhibit 18: Readiness for Returning to the WorkplaceEducational Services

Not or minimally prepared Moderately prepared Not sure Well or very well prepared

50%

Note: How prepared is your organization to address factors for returning to work in the COVID-19 environment?

Survey responses were collected May 6-8, 2020, from CAEs and directors in North America associated with The

IIA. Educational services only. n = 42. * An asterisk indicates a factor directly related to transmitting COVID-19.

Page 21: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

19

APPENDIX B: PREPARATION ACTIVITIES

Learn what internal audit leaders are doing to address returning to the workplace in the COVID-19

environment. This appendix provides a summary of some new areas of focus, plus representative comments

from CAEs and directors. The comments were chosen to illustrate different activities but are not necessarily

intended as recommendations due to the many different considerations that impact internal audit involvement.

Areas of focus related to returning to the workplace

Exhibit 19: Examples of Activities, Reviews, and Audits Related to Returning to the

Workplace

Physical workspace

Health and safety

Human capital risk

Human resource implementation of return-to-workplace

Reviews of recommendations from subject matter experts

Policy and procedures per location

Physical arrangement of work spaces for social distancing

Prioritization of office space

Personal protection equipment (PPE) audits

Strategy

Risk assessment and consulting

Impact to organizational mission and objectives

Providing updates to the board

Compliance

Government policies and laws changing

Communicating with regulatory agencies

Operations

Continued effectiveness of key controls

Monitoring pandemic-related financial programs

Increased operational risk

Operational resilience audit

Operational change reviews

Change in IT and cyber processes

Teleworking security

Long-term work from home risks

Cost reduction

Identifying key vendors (supply chain)

Research

Surveys

Focus groups

Regulatory update reviews

Data analytics

Meetings

Team participation

SWOT analysis (strengths, weaknesses, opportunities, threats)

Note: This list was compiled from the answers provided to Q7: Briefly describe how internal audit has been involved in

preparations for returning to work in the COVID-19 environment. n = 371.

Page 22: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

20

Featured comments from survey respondents

Comments are organized according to industry groups, which are listed in the same order as Exhibit 3 (more

prepared to less prepared).

Manufacturing

We are part of our company's COVID-19 task force with daily update meetings. Through these

meetings, I can learn about areas of heightened risk and potential advisory opportunities for new or

changing processes.

I am providing insights from other organizations through my network and through the resources I

receive from external parties including the Big 4, other consulting, and The IIA.

Internal audit has been ramping up data analytics and related visuals so that we can continue to be

productive while maximizing our time away from the office so our most essential workers can return

safely.

Internal audit is focused on major cost reduction initiatives.

Return-to-work is handled by HR and monitored by internal audit.

Physical outputs (except manufacturing)

We were instrumental in forming the task force and preparing a checklist of actions to consider for

returning to work.

Internal audit is a member of the Incident Command Structure and we have a seat at the table for

the return-to-work discussion (when and how to return, what to consider, etc.).

We are actively involved in documenting departmental COVID-19 contingency plans and performing

follow-up on resulting action items. We participate in daily COVID-19 executive update calls.

We participate in executive team remote meetings on the status of emergency management

response, construction and maintenance work restarting safely, human resources and IT efforts, ferry

system impact updates, and communications efforts.

Safety-related reviews are scheduled, and any gaps will be communicated immediately to

management.

We are completing PPE (personal protection equipment) audits and supporting the business areas

via review of protocols and communications. We also have emergency management and business

continuity under our audit head. Therefore, the support from that business area is significant.

We are monitoring regulatory changes in different operating jurisdictions and assessing implications

for local or global return to work.

The CAE is a pandemic task force member. Internal audit is conducting surveys and compiling

feedback/lessons learned.

Health care and social assistance

Internal audit is part of the crisis management team, assisting the CFO in financial risks related to

COVID-19; consulting on changes in work processes for remote work and limited employee staffing

onsite; assessing operational risk; and consulting with COO on changes in operations.

Page 23: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

21

Finance and insurance

Internal audit is leading the crisis response team by heading up meetings, documenting the process,

and consulting on all aspects of reopening.

Internal audit is participating in the high-level discussion on how and when we will return to on-site

work. We are reviewing policy and procedures for the process by location.

We are using data analytics to provide important information on the trends of COVID-19 to the crisis

management and COO teams to determine when our firm will shift to a return-to-the office status.

Internal audit is conducting monthly key control reviews to ensure key controls remain effective

throughout the impact of the pandemic.

Internal audit is advocating for continued compliance reviews and recognition of increased risk due

to operational changes and increased operational volume of transactions.

Public administration

Internal audit is focused on development of health and safety research for all provinces and territories

(including municipalities), for each office.

We are opening up discussions on a daily basis between agencies and internal audit staff. We have

weekly discussions with leadership, and we are keeping up with changing policies and laws.

We are helping to develop ways to track and monitor financial processes, including COVID spend, a

federal revenue maximization project, operational reviews of emergency procurement, contracts,

discretionary spending, a private donation site, and small business loan assist.

We have been providing advice and guidance to senior management ensuring users of our programs

are able to social distance.

Audit has provided recommendations based on physical risk assessments and analysis of distance

requirements in shared office spaces.

Consumer-facing (e.g., retail, food, travel)

We are having general discussions with C-suite around options and timing for returning to work for

the corporate office. Our local locations are essential businesses and have remained open.

Internal audit is beginning to help document standard operating procedures for return to work in

operations. We may help map out the overall governance process for return to work. As CAE, I have

taken it upon myself to identify emerging risks.

We are working hand-in-hand with operational management team to consult/assist in ensuring there

are no control gaps or increased risk areas not considered.

We are considering how desk spaces need to change to avoid close social contact.

Non-consumer-facing (e.g., business services)

Our internal audit team has had someone as a key member of the COVID task force overseeing

global efforts. Internal audit is playing an important role in the return-to-work strategy by creating and

giving assurance over the plans for all 130 locations for tracking and tracing.

Internal audit serves as a "watch dog" on procedures and implementation efforts.

Page 24: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

22

Internal audit is actively participating in focus groups and teams to incorporate consideration of

controls and risk assessments into new processes and activities due to COVID-19.

We are reviewing policies and FAQs to provide insight and perspective.

We have had conversations with HR and others involved in the efforts and provided guidance on

good practices.

Educational services

Internal audit is coordinating with the CFO and other senior leaders to assess which roles should

come back to the office and which roles could remain 100% remote or partially remote.

Internal audit is reviewing proposed actions and recommendations from subject matter experts.

Internal audit has been monitoring institutional progress towards returning to work in the COVID-19

environment. We are preparing to perform assurance and consulting engagements to address the

risks.

Circumstances limiting the role of internal audit

Broader factors may result in a limited role for internal audit in preparing to return to work, as noted:

We are a hospital and have redeployed the entire organization to COVID-19 care and now COVID-

19 recovery/reopening. Audit does not have a role at this time in reopening.

Our return-to-work plans have been postponed multiple times and are currently scheduled for

September 2020, so we aren't preparing to return to work yet.

Internal audit has had minimal involvement because we are a very large school district with a very

small internal audit function.

Internal audit reports to the CFO who dictates the risk assessment/audit plan. Unfortunately, this

person has laid off most of our department as a cost savings, after rejecting the need for a business

continuity plan.

Internal audit is not part of our risk response team, which is led by enterprise risk management and

focused on disaster recovery and business continuity. Internal audit is focused on the impact on

internal controls over financial reporting.

We are currently 100% virtual and can remain so. Final return requirements are dependent upon

state government.

Page 25: Survey on Workplace Readiness · environment and internal audit’s involvement in the process. The survey asked CAEs and directors to evaluate their organizations in the following

ABOUT THE AUDIT EXECUTIVE CENTER

The IIA’s Audit Executive Center® (AEC®) is the essential resource to empower CAEs to be more successful. The Center’s suite of information, products,

and services enables CAEs to respond to the unique challenges and emerging risks of the profession. This report is reserved for your exclusive use as

a member of the Audit Executive Center. For more information on the Center, visit www.theiia.org/AEC.

ABOUT THE IIA

The Institute of Internal Auditors (IIA) is the internal audit profession’s most widely recognized advocate, educator, and provider of standards, guidance,

and certifications. Established in 1941, The IIA today serves more than 200,000 members from more than 170 countries and territories. The association’s

global headquarters is in Lake Mary, Fla. For more information, visit www.theiia.org.

DISCLAIMER

The AEC and The IIA publish this document for informational and educational purposes. This material is not intended to provide definitive answers to

specific individual circumstances and as such is only intended to be used as a guide. The AEC and The IIA recommend seeking independent expert

advice relating directly to any specific situation. The AEC and The IIA accept no responsibility for anyone placing sole reliance on this material.

COPYRIGHT

Copyright © 2020 The Institute of Internal Auditors, Inc. All rights reserved. For permission to reproduce, please contact [email protected].

May 2020