Technology
Cyber Security Ranks as Top Risk for Enterprises in 2024
Organizational risks keep accelerating and evolving, becoming more complex and interconnected than ever — but risk and assurance teams’ capacity to manage risk are not keeping pace.
Nov. 17, 2023
AuditBoard, the leading cloud-based platform transforming audit, risk, IT compliance, and ESG management, has released its 2024 Focus on the Future report based on an annual survey of risk management and internal audit leaders across North America. The report reveals a growing gap between risk and assurance teams’ capacity to effectively manage risks and the reality of today’s state of “permacrisis,” an extended period of instability and insecurity marked by one disruptive crisis following another.
In a continuation of a trend identified by the 2023 Focus on the Future survey, the top 2024 risk cited by internal audit leaders is cyber and data security, with more than 80% of respondents not only rating this risk highly but also giving it the top spot for expected audit efforts in 2024.
However, the survey also found risk and internal audit teams are still dedicating fewer resources to addressing some key risks, including two top-ranked risk areas — changing economic conditions (ranked #2), and the ability to attract and retain talent (ranked #3) — that received insufficient audit focus in 2023. This misalignment is expected to continue in 2024.
Other key findings of the report include:
- Some internal audit leaders are delaying critical technology investments in generative artificial intelligence (AI) and automation: 75% have yet to implement generative AI in internal audit, only 40% have a clear understanding of how AI is used in their organizations, and as few as 25% have defined the risks of or created guidelines for the use of AI.
- While previously seen as urgent, ESG risks are now ranked 13th out of 14. This decreasing sense of immediate concern may put auditors in a precarious position if they fail to adequately address increasing ESG risks and anticipated regulatory activities.
- Internal audit leaders are optimistic about receiving more resources in 2024, with over 60% of respondents forecasting increased internal audit budgets, and 31% planning for larger staff.
The survey also reveals the use of internal audit strategic plans is lagging, with only one in five functions reporting comprehensive, well-documented strategic plans. Without a strategic view of the future, including a clear assessment of strengths, weaknesses, opportunities, threats, priorities, and areas of vulnerability, internal audit may struggle to recognize the necessary actions to ensure organizational success.
“The 2024 Focus on the Future report sounds a clear call to action for organizations confronted with the widening risk exposure gap,” said Richard F. Chambers, AuditBoard Senior Internal Audit Advisor, who authored the report. “Internal audit, with its capacity for foresight and understanding, is uniquely positioned to help organizations navigate these challenges. However, to do so effectively, internal audit leaders must embrace transformational opportunities — prioritizing strategic planning, AI technology adoption and governance, cross-functional collaboration, and high-impact communications.”
To produce the 2024 Focus on the Future report, AuditBoard collected data from 453 respondents to an online survey conducted in August and September 2023. Respondents were risk leaders, chief audit executives, and internal audit directors in organizations based primarily in North America, representing a diverse group of industries and company sizes.
To see the full report, please visit AuditBoard.com.