Why internal auditors are automating control testing
Compliance activities are increasingly complex and time-consuming. Yet, compliance is just as essential today as it’s ever been.
Recently, Grant Thornton and the Institute of Internal Auditors (IIA) hosted an innovation session during their General Audit Management (GAM) conference where attendees discussed the growing complexities they face today. At the top of the list was the excessive time required on control testing and other manual compliance activities.
![Is your organization facing any of the following challenges](/insights/articles/advisory/2021/shift-control-test-automation/_jcr_content/root/main-par/grid-container/grid/section-left/section-par/image_v2/desktopImage.coreimg.jpeg/1719307431950/is-your-organization-facing-any-following-challenges-1.jpeg)
![Is your organization facing any of the following challenges](/insights/articles/advisory/2021/shift-control-test-automation/_jcr_content/root/main-par/grid-container/grid/section-left/section-par/image_v2/mobileImage.coreimg.jpeg/1719307431950/is-your-organization-facing-any-following-challenges-1.jpeg)
“For every hour spent by an outside auditor, internal audit staff spend 4 – 12 hours,” said Grant Thornton Advisory Services Partner Ethan Rojhani. He explained that testing itself typically accounts more than half of an internal auditor’s time. Yet, there is little business return on testing – and traditional testing examines only a sample that might not be statistically representative of the total transactions.
The growing shift to automation
That’s why so many internal auditors have begun automating control testing. In our survey during the IIA innovation session, 65% of respondents said that they were currently using, implementing or evaluating automation for use in the next 12 months.
![Automation to test operational effectiveness for internal controls](/insights/articles/advisory/2021/shift-control-test-automation/_jcr_content/root/main-par/grid-container/grid/section-left/section-par/image_v2_630925094/desktopImage.coreimg.jpeg/1719307502636/automation-test-operational-effectiveness-for-internal-controls-.jpeg)
![Automation to test operational effectiveness for internal controls](/insights/articles/advisory/2021/shift-control-test-automation/_jcr_content/root/main-par/grid-container/grid/section-left/section-par/image_v2_630925094/mobileImage.coreimg.jpeg/1719307502636/automation-test-operational-effectiveness-for-internal-controls-.jpeg)
The barriers to automation
However, the shift to automating control testing can present barriers. Survey respondents indicated that the top hurdle they faced was not leadership support or guidance – it was simply a lack of skills in their current workforces.
![Automating control testing in your organization](/insights/articles/advisory/2021/shift-control-test-automation/_jcr_content/root/main-par/grid-container/grid/section-left/section-par/image_v2_630925094_c/desktopImage.coreimg.jpeg/1719307549018/automating-control-testing-your-organization-1.jpeg)
![Automating control testing in your organization](/insights/articles/advisory/2021/shift-control-test-automation/_jcr_content/root/main-par/grid-container/grid/section-left/section-par/image_v2_630925094_c/mobileImage.coreimg.jpeg/1719307549018/automating-control-testing-your-organization-1.jpeg)
Automation can bring greater efficiency and assurance to monitoring operational effectiveness of your internal controls. But developing the related technical skills can be a significant undertaking – and might not be practical for many organizations. To accelerate the path to automation benefits, those organizations can find partners with the expertise and experience they need. “The right technology can help streamline automation so that an organization’s auditors can avoid learning to code and instead focus their skills on logical analysis for better business value,” said Grant Thornton Risk Advisory Manager Wes Luckock.
“There are some important benefits to control test automation, but to fully realize them you need to have the experience and knowledge to do it correctly,” said Grant Thornton Advisory Services Senior Manager Greg Haberer.
Contacts:
![Headshot of Ethan Rojhani](/content/dam/grantthornton/website/assets/Images/HS-Headshots/R/hs-rojhani-ethan.jpg)
![Headshot of Ethan Rojhani](/content/dam/grantthornton/website/assets/Images/HSP-Headshots-Profile/R/HSP_Rojhani_Ethan/hsp_rojhani_ethan.jpg)
![Headshot of Ethan Rojhani](/content/dam/grantthornton/website/assets/Images/Partner-blocks/r/rojhani-ethan-370x200px.png)
Ethan Rojhani
Principal, Risk Advisory Services
Grant Thornton Advisors LLC
Mr. Rojhani is a principal in Grant Thornton’s Risk practice with experience leading the full lifecycle of risk management and consulting engagements.
Denver, Colorado
Service Experience
- Advisory
- Transaction advisory
![Headshot of Gregory Haberer](/content/dam/grantthornton/website/assets/Images/HS-Headshots/H/hs-haberer-gregory.jpg)
![Headshot of Gregory Haberer](/content/dam/grantthornton/website/assets/Images/HSP-Headshots-Profile/H/hsp-haberer-gregory.jpg)
![Headshot of Gregory Haberer](/content/dam/grantthornton/website/assets/Images/Partner-blocks/h/haberer-gregory-370x200.jpg)
Greg Haberer
Managing Director, Risk Advisory Services
Grant Thornton Advisors LLC
Greg is a managing director in Grant Thornton’s Risk Advisory practice and leads Grant Thornton's national Compliance Automation capabilities, helping to drive better risk management outcomes through technology enablement.
Denver, Colorado
Industries
- Healthcare
- Media & entertainment
- Services
- Retail & consumer brands
- Technology, media & telecommunications
Service Experience
- Advisory
- Risk advisory
- cta.x
More cta.x insights
![Loading Spinner](/etc.clientlibs/grantthornton/clientlibs/clientlib-site/resources/other/loading-spinner.png)
No Results Found. Please search again using different keywords and/or filters.