logo-newlogo-newlogo-newlogo-new
  • Home
  • Blog
  • Audit Trail Academy
  • Advisory Services
  • Books
✕
  • Home
  • Chambers on Internal Audit
  • Uncategorized
  • Seven Signs You Might Be a Jurassic Auditor

Seven Signs You Might Be a Jurassic Auditor

Ratings in Audit Reports: Lights or Lightning Rods?
October 9, 2017
When Auditing Compliance, Look to Health Care
October 23, 2017
October 16, 2017

Every profession evolves as the body of knowledge expands and new tools and technology become available. The best and brightest professionals embrace evolution and leverage new strategies and tactics to enhance their effectiveness. The same is (or should be) true of internal audit professionals.

Several years ago, I adopted a term to describe internal auditors who were not very progressive, who tended to cling to outdated practices. I called them “Jurassic Auditors.” The term Jurassic derives from the geologic period that spanned more than 50 million years and ended about 145 million years ago. The vast majority of species from that period are long extinct, because they were unable to adapt. The same could ultimately be true of internal audit professionals who fail to evolve and adapt to changing practices and the environment around them.

It is important to stress that Jurassic Auditor does not denote the age of professionals. Many veteran internal auditors are extremely progressive. At the same time, many younger internal auditors leverage practices from a bygone era. I am referring to those who are simply reluctant to change.

I have maintained my own informal list of obsolete characteristics/practices. Here are seven signs that you might be a Jurassic Auditor:

1. ​​​You obsess over the past. In its infancy, the internal audit profession was largely focused on hindsight — what happened last month or last year. Eventually, we began focusing on insight — what is happening now. Increasingly, we are providing foresight — what could happen in the future if key risks are not adequately mitigated. From my experience, Jurassic Auditors dwell on hindsight despite the limited value it often provides. Hindsight is the service that is most susceptible to disintermediation by artificial intelligence (AI). Like the species from the Jurassic period, internal auditors who dwell on only the past are likely doomed to extinction. 

2. You build audit plans based on cycles, rather than risks. Another professional practice from the past is the use of predetermined cycles to schedule audits. When I was a young auditor for the U.S. military, I knew full well that we were required to audit the officers’ clubs every three years — regardless of how well or how poorly they might be managed. Eventually, risk-based auditing was introduced to the profession. Yet, some internal audit departments still use the outdated practice of conducting audits based on a schedule, rather than a risk assessment.​

3. You develop an annual audit plan and stick to it all year. I have written extensively about the imperative to “audit at the speed of risk.” Yet, many audit departments still develop a comprehensive annual audit plan and use it as an unwavering road map to guide them through the upcoming year’s internal audit coverage. Just as dwelling on the past can undermine internal audit’s value, so can failure to undertake a continuous approach to risk assessment.

4. You avoid using technology. As I have written before, technology is the great capacity multiplier for internal auditors. Whether for internal audit management (including electronic work papers), data analytics, or continuous auditing/monitoring, technology is an enabler. It enhances both efficiency and effectiveness, yet some internal audit departments are not just late adopters — they are non-adopters. They cling to 20th century paper-and-pencil methodologies.

5. You avoid auditing technology. Far too many internal auditors are unwilling or unable to audit technology risks within their organizations. Whether cybersecurity, cloud computing, or mobile technology, there is a reluctance to assess the risks and include coverage in audit plans. But these are among the most significant risks that many organizations face. Avoidance of technology audit coverage increases the possibility of hearing those five dreaded words when things go wrong: “Where were the internal auditors?”

6. You enjoy writing about the condition more than recommendations. As a young internal auditor, I found the identification and communication of a problem (condition) to be exhilarating. I felt that I had truly demonstrated my value when I was able to point out a control failure or waste, inefficiency, or mismanagement. In time, I came to appreciate that a finding isn’t truly complete unless it also includes cause, effect, and recommendations for corrective action. I sense there are still too many internal auditors who get more satisfaction out of identifying the problem rather than how to solve it.

7. You still call audit clients “auditees.” Okay, I admit this one might seem a bit petty compared with the other signs on this list. However, it often denotes an outdated mindset. The IIA hasn’t used the term “auditee” in decades. Instead, it refers to those we audit as “clients.”

This list represents my personal views on characteristics of the Jurassic Auditor. I know there are many more. While compiling my list, I vetted the idea with several colleagues, and these were some other signs that were offered:

  • You talk about internal controls instead of risks.
  • You use standard audit programs.
  • You think of risk only in terms of impact and likelihood.
  • You consider culture something to be addressed through an HR survey.
  • You’re content sitting on the sidelines (not seeking trusted advisor status).
  • You’re content with existing resources/skill sets.
  • You’re satisfied meeting expectations rather than exceeding (or driving) them.
  • You think data analytics involve a few extra charts and graphs in your audit report.
  • Your audit report is a 60-page summary of everything you’ve done for the past six months.

I am sure the list could go on and on. I welcome your views.

Share

Related posts

March 13, 2023

New IIA Report Is a Timely Benchmarking Resource for Internal Auditors


Read more
May 16, 2022

THE STAGGERING TOLL OF COVID RELIEF FRAUD: WHERE WERE THE THREE LINES?


Read more
February 3, 2022

To Live a Life in Color, You May Have to Change Channels


Read more

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

What’s Trending

03-20-23

New Report Reveals Surprising Insights from Internal Audit Executives


03-13-23

New IIA Report Is a Timely Benchmarking Resource for Internal Auditors


03-02-23

6 Things Audit Committee Members Often Won’t Say to Internal Audit


Read More

Archive

  • March 2023
  • February 2023
  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • February 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • September 2019
  • August 2019
  • July 2019
  • June 2019
  • May 2019
  • April 2019
  • March 2019
  • February 2019
  • January 2019
  • December 2018
  • November 2018
  • October 2018
  • September 2018
  • August 2018
  • July 2018
  • June 2018
  • May 2018
  • April 2018
  • March 2018
  • February 2018
  • January 2018
  • December 2017
  • November 2017
  • October 2017
  • September 2017
  • August 2017
  • July 2017
  • June 2017
  • May 2017
  • April 2017
  • March 2017
  • February 2017
  • January 2017
  • December 2016
  • November 2016
  • October 2016
  • September 2016
  • August 2016
  • July 2016
  • June 2016
  • May 2016
  • April 2016
  • March 2016
  • February 2016
  • January 2016
  • December 2015
  • November 2015
  • October 2015
  • September 2015
  • August 2015
  • July 2015
  • June 2015
  • May 2015
  • April 2015
  • March 2015
  • February 2015
  • January 2015
  • December 2014
  • November 2014
  • October 2014
  • September 2014
  • August 2014
  • July 2014
  • June 2014
  • May 2014
  • April 2014
  • March 2014
  • February 2014
  • January 2014
  • December 2013
  • November 2013
  • October 2013
  • September 2013
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • December 2012
  • November 2012
  • October 2012
  • September 2012
  • August 2012
  • July 2012
  • June 2012
  • May 2012
  • April 2012
  • March 2012
  • February 2012
  • January 2012
  • December 2011
  • November 2011
  • October 2011
  • September 2011
  • August 2011
  • July 2011
  • June 2011
  • May 2011
  • April 2011
  • March 2011
  • February 2011
  • January 2011
  • December 2010
  • October 2010
  • September 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • December 2009
  • November 2009
  • October 2009
  • September 2009
  • August 2009
  • July 2009
  • June 2009
  • May 2009
  • April 2009
  • March 2009
  • February 2009

Contact Us

PO Box 1441
New Smyrna Beach, FL 32170

+1-407-463-9389
rchambers@richardchambers.com

About AuditBeacon.com

AuditBeacon.com is a resource center for internal auditors and risk professionals from around the world. In addition to more than 500 blogs authored by Richard Chambers, the site includes links to news and insights on internal audit and other information that illuminates the value of this important profession. AuditBeacon.com is provided as a service by Richard F. Chambers and Associates, LLC.

Copyright © 2023 Richard F. Chambers & Associates. All Rights Reserved.
  • Home
  • Blog
  • Audit Trail Academy
  • Advisory Services
  • Books