近年、内部監査部門においてデータ分析活動の利用が急増しています。 データの収集および保存管技術の進歩に加えて、データ分析技術もますます高度化しており、データ分析機能の構築を検討する内部監査部門が増えています。 しかし、本当に実のあるデータ分析を実施するためには、テクノロジーを導入してデータを収集するだけでは十分ではありません。 データ分析機能の導入を成功させるには、内部監査スキルの向上、内部監査の運用モデルの調整、監査のスタイルやアプローチ全般の変更など内部監査部門全体にわたる包括的な変更が必要となります。
この記事では、内部監査におけるデータ分析戦略の開発と実行を成功に導く方法について、実際の経験に基づいて詳述します。データ分析の実行を成功に導くための10のヒントをご紹介します。
It is important that you ensure people are held accountable for pushing your use of data analytics forward. If you are to achieve wide-ranging use of analytics it is important to integrate reward and recognition of this into your performance management system. One organization I worked with ensured everyone, right through the internal audit function, had a clear objective around the use of data analytics in audit work and the function as a whole had targets for the percentage of audit work that deployed simple analytics and more complex audit work that was reviewed and signed off by the QA function. Whilst this is relatively crude it emphasized the point that this mattered and everyone should be looking for ways in which they could make the use of data analytics endemic in the function’s activities. It had considerable success and now data analytics is integrated into all that the function does and is delivering considerable results in terms of audit findings, continuous business monitoring, and the deployment of audit developed analytic capabilities into the first and second line for them to use as part of their day-to-day control management activity.
There are many ways in which you can celebrate your achievements and every organization will have its own culture and approach to sharing success. At one organization I worked for we prepared a six-monthly set of case studies of audit successes. We presented at our six-monthly audit leadership event a handful of these, that had been voted as our proudest moments by the whole team, to the chief executive, chairman, and members of the audit committee as 3–5-minute vignettes of success. A great evening for the team, but also a chance for the audit committee and executives to see a collective view of the value we were adding and the energy with which we brought to our work. These case studies were not all data analytics-driven, but what we did see over time was an increasing number of them becoming analytics-led as momentum and support for the data analytics initiative took hold.
It is important that you truly make using data analytics an ‘opt out’ not ‘opt in’ part of your audit methodology. Auditors should, at key stages of the audit process (tollgates), have to show why data analytics cannot be used rather than how they can. This opt-out approach will focus the mind of the internal audit team on looking for data analytics opportunities at all stages and increase the proportion of audits using analytics.
It is very easy, audit by audit, to throw together a spreadsheet to analyse some data. However, this won’t be reusable in the future. Encourage your auditors when developing analytics, whether that be through Excel, in TeamMate, or using other software such as PowerBi and Python, to build with reuse in mind. This will take a bit longer, as will require setting up in a way that someone can pick it up in the future, but the benefits will pay off for the function longer term. Consider giving time at the end of each audit for the team to clean up the analytics and store it in a well-organized data analytics library. Central data analytics teams can really help here if you have the scale to do this. They can take the lead in ensuring this systematization is carried out when analytics are used and also develop pre-configured testing scripts and ensure the libraries set up are well maintained and useful.
This is all about how you set up your operating model to deliver your data analytics. Some larger functions have dedicated well-resourced teams to deliver analytics, but increasingly functions are taking a hybrid approach where a small group of specialists work alongside front-line auditors who have been trained and encouraged to use analytics. This blend allows capability built to be widespread and penetration of analytics work to be deeper into more audit activity than if the work is done in a separate central unit.
There is no silver bullet for the successful development and implementation of a data analytics strategy, but hopefully, the series of tips outlined will be a useful catalyst to your work as you consider the conditions that need to be right for you to achieve momentum around your data analytics work. Good luck!
