Audit functions that fail to adapt well to hybrid auditing risk a loss of effectiveness and influence at a time when real-time assurance has never been more vital to the wider organisation, said Gartner recently.
With hybrid auditing—emerging as remote audits become necessary during the pandemic—is here to stay for the foreseeable future given the many benefits, audit leaders must ensure audit processes are still effective and staff remain engaged, according to the advisory firm.
“Now is the time to codify best practices when it comes to hybrid auditing and ensure audit leaders have a plan in place to capture those new benefits, while compensating for the lost benefits of a full-time, in-person audit practice,” said Malcolm Murray, chief of research in the Gartner Risk & Audit practice.
Hybrid auditing best practices
According to Gartner, it has identified the best practices to solve the challenges of a hybrid audit environment relating to overall audit effectiveness, technology considerations and staff engagement and training. Below are some of the best practices
Hybrid audit timeliness and effectiveness
A persistent challenge of remote auditing has been completing audit engagements on time, in part due to a slower level of responsiveness and the lack of urgency drivers that accompany in-person engagements. To keep audit engagements on track, audit leaders need to take a more proactive approach and build in structured communications with stakeholders on expectations for turnaround time from auditees.
Audit leaders attempting to address the timeliness challenge must essentially over-communicate their expectations by placing additional emphasis on turnaround times, conducting additional meetings with stakeholders, and develop communication plans that follow best practices and address common questions from auditees.
Gartner experts recommend that audit leaders leverage remote audits as much as possible while still conducting in-person engagements for audits of high-risk areas or where relationship building is key. Audit leaders should set up a system for grading audits by ability to conduct remotely, this should include triggers for such as management changes, previous poor audit results and new acquisitions.
Technology enablement
Audit leaders embraced new technologies when confronted with the prospect of remote auditing. These technologies include video technologies, drones, smart glasses, and mobile phone use. Data analytics has also enabled better remote and continuous audits.
However, the widespread adoption of new technologies in a short timeframe presents new challenges and risks that require standardised procedures which are still a work in progress in many organizations.
“The key to successful use of new technologies is to have mitigation strategies and clear communication between auditors and auditees on processes,” said Murray. “Many teams are now conducting test trials well ahead of engagements and learning to match the best type of technology to the auditing environment, such as the use of smart glasses in more rigorous physical environments such as construction sites.”
Staff engagement and talent retention
Audit leaders are grappling with providing staff with more flexible work conditions while balancing issues of engagement and adequate face time with stakeholders.
“Internal auditors rely on in-person interactions with stakeholders to uncover critical information and improve their skills, while also communicating the value of their work to the business. Diminished in-person opportunities in this area can lead to issues with engaging and retaining staff,” said Murray.
Gartner experts recommend that audit leaders develop plans to compensate for a lack of learning opportunities on the job. Audit leaders need to create a hybrid training system, that includes formalised coaching opportunities and senior stakeholder interaction.
