#United States #Lake Mary #Geopolitical Risks #Digital Disruption #Internal Audit Foundation

New Insights into Risk Management

A Changing Risk Landscape

In a rapidly evolving global environment, organizations are increasingly facing intricate challenges from digital disruption and geopolitical factors. According to the latest Risk in Focus survey conducted by the Internal Audit Foundation, there has been a notable rise in risk ratings associated with digital disruption, particularly due to the rise of artificial intelligence (AI) alongside geopolitical uncertainties marketing the complexities of modern risk management.

Survey results derived from over 3,000 internal audit practitioners across 132 countries revealed that the perceived risks of digital disruption soared by 10 percentage points to reach 58%, while geopolitical risks also saw a similar increase, now standing at 48%. This growth reflects a significant shift in focus, with North America reporting the highest risk level for digital disruption at an alarming 69%. The survey reinforces the sentiment that organizations are not only facing isolated risks but interconnected challenges where one area can affect multiple facets of operations.

Understanding Interconnected Risks

The findings underscore that digital disruptions are influencing areas beyond cybersecurity, affecting supply chains, regulatory obligations, and even market competition. The interconnectedness of these risks means that organizations must reconsider their approaches toward managing them. For example, challenges initiated by technological advancement or geopolitical instability can quickly impact an organization's liquidity and workforce.

As Anthony Pugliese, President and CEO of The Institute of Internal Auditors pointed out, "The global risk environment continues to be reshaped by the convergence of technology, geopolitical uncertainty, fraud, workforce trends, supply chain pressures, and other emerging challenges.” This understanding is crucial for organizations aiming to navigate these waters effectively.

Diverse Responses to Rising Risks

While cybersecurity has long been recognized as a paramount global risk, seeing an increase of 7 percentage points to 80%, responses to evolving risks remain inconsistent across organizations. Cybersecurity aligns well with audit attention, as 75% of respondents acknowledge it as a top audit priority. On the other hand, digital disruption, despite its escalated importance, is still receiving only 42% attention from audit leaders.

The concerning trend is that while 48% of global respondents ranked geopolitical uncertainty among their top five risks, a mere 13% consider it a top audit priority. In North America, only 6% deemed it a top priority within their auditing scope, reflecting a disconnect that could leave organizations vulnerable to emerging threats.

Gaps in Preparedness and Governance

One significant revelation from this year’s survey is the disparity between perceived risks and governance maturity. Digital disruption ranked low in terms of risk management maturity, with only 23% of respondents indicating sound governance practices. Moreover, just 11% reported full audit coverage for these evolving risks. Geopolitical uncertainties similarly scored poorly, raising alarms for organizations that often grapple with understanding and mitigating their exposures in this domain.

By comparison, traditional risk areas such as financial or liquidity risks reported a much higher governance maturity and audit coverage, indicating that organizations are indeed focusing on established risk areas while emerging risks remain under-represented.

Moving Forward: Strategies for Improvement

To strengthen organizational preparedness against these rapidly changing risks, several strategies have been recommended.

1. Enhance Governance Visibility: Boards should gain clearer insights into how risk ratings align with governance maturity and audit coverage.
2. Scenario Planning: Using scenario analyses can help organizations anticipate rapidly changing risks more effectively.
3. Integrate Assurance Providers: Coordination with various assurance mechanisms can help in a more holistic approach to risk management.
4. Transparent Communication: Organizations must effectively communicate any gaps in assurance capabilities to better prepare for known risks.

Conclusion

The evolving risk landscape demands a proactive approach from organizations and their internal audit functions. As rates of digital disruption and geopolitical risks continue to rise, understanding their interconnectedness and enhancing governance structures will be key to navigating future uncertainties. As companies heed these findings, a collective effort toward refining risk management processes will be paramount. The Internal Audit Foundation remains committed to providing essential insights and resources to support organizations in enhancing their internal capabilities for a more resilient future.