New Year’s resolutions typically are made in the midst of good feelings surrounding the holidays as we look back at the past year’s accomplishments. That’s what makes them tricky. We set lofty personal goals for weight loss or quitting bad habits or being more productive at work at a time when we are most nostalgic and well-rested. I try to approach my resolutions related to work realistically, understanding the limitations of time, resources, and energy. That’s not to say they are made without some ambition and optimism.
This is the mind-set I used to identify “5 Resolutions for Every Internal Auditor in 2016.” Each was considered in light of the growing workload most internal audit functions are experiencing, the anticipation of modest gains in budgets, and the growing challenge of finding qualified internal auditors.
Each New Year brings with it a bevy of new business regulations, deadlines, and extensions of existing rules. We must familiarize ourselves with these in order to assist the organizations we serve to mitigate compliance risks.
These will vary depending on business sector, but some regulations apply broadly, such as wage-and-hour regulations defining exempt vs non-exempt employees. Others on the horizon involve Financial Accounting Standards Board rules on accounting for deferred revenue, and lease accounting standards. Executive compensation ratio reporting under the Dodd-Frank Act won’t kick in until 2017, though the groundwork will have to be laid this year.
Whatever sector you work in, endeavor to know the rules and regulations that apply to your organization and your industry, and develop relationships with sources outside of your team who can help you stay abreast of changes.
In September, The IIA sent a letter to the U.S. Securities and Exchange Commission seeking mandatory internal audit for all publicly traded companies. Such a mandate, in my view, is long overdue. In light of many spectacular corporate scandals in 2015, one would expect the presence of an independent and well-financed internal audit function to be a welcome addition to any organization.
Every internal auditor should be ready to make the case that strong and competent oversight of governance, risk, and compliance issues is not a challenge to management. Instead, it is a powerful and useful tool for management and the board that can help improve efficiency and effectiveness, boost profit and competitiveness, and provide transparency and assurance to investors.
Critics might characterize such a mandate as another regulatory burden, but as counter-intuitive as it may seem, such a mandate might mitigate the need for further regulation in the long run. A strong internal audit function discourages and deters fraudulent acts and corruption that can lead to crises that invariably are followed by waves of new regulations (e.g. the Sarbanes-Oxley Act, Dodd-Frank, and others).
In my previous blog, I referred to an internal report on the Toshiba scandal that placed some of the blame on the company’s internal audit function. I warned that, as internal audit’s scope of work has evolved and expanded, so has the risk of overwhelming the internal audit function.
As individual auditors, we must approach this challenge in two ways: First, understand your own limitations and the limitations of your team. Whether in specialized areas, such as IT auditing, or in taking on new roles, such as auditing culture, we must be honest and aware of our skills and limitations. Second, we must make the commitment to invest in training to strengthen those weak areas.
There is a growing labor shortage in internal audit (more on that below), which means we cannot rely solely on hiring new talent to strengthen our teams.
Throughout 2015, there were growing signs that organizations were struggling to fill internal auditor positions, placing a premium on keeping the talent we have on staff. Poaching the best of the best is not uncommon, especially in sectors where internal auditors are most in demand, such as financial services.
A new Practice Guide from The IIA, Talent Management: Recruiting, Developing, Motivating, and Retaining Great Team Members,offers a comprehensive approach to the matter as it relates to IIA Standards, as well as a step-by-step approach to talent management, from understanding stakeholder needs to outsource and co-sourcing.
While the Practice Guide offers solid, practical advice for CAEs, individual auditors also can help to expand and strengthen their contributions to the audit team by investing in themselves. Professional development through additional training, certifications, networking, and more supports the internal audit function’s ability to meet new and growing stakeholder expectations.
This may be the best resolution you can make this year – or any year. The demands being placed on internal audit will continue to grow as business risks expand and accelerate. New technologies, increased global market opportunities, cybersecurity, and other factors influencing business demand that internal audit and internal auditors venture outside of their safe zones. The upcoming North American Pulse of Internal Audit report will examine this concept in depth, but for now, it is important to consider changing our mind-sets.
I’m not encouraging reckless behavior or strategies that conflict with internal audit’s long-established core principles or ethics. However, internal audit professionals should be open to examining how internal audit can help their organizations in nontraditional areas.
I hope you’ll take these resolutions to heart in 2016. Each will help you contribute to strengthening your skills and improving the value internal audit offers its stakeholders.
If 2016 follows the lead of recent years, we will be looking back a year from now reflecting on the extraordinary developments that we didn’t see coming. Until these events develop, I encourage you to adopt a set of professional resolutions for the New Year that will enhance your chances for success.
I welcome your thoughts.