Saturday, February 28, 2015

Internal Auditors : Beware of the "Risk Management" Syndrome !

When I am asked  what brought Arthur Andersen down ( I am a former AA partner) , I always say : "The Andersen Consulting " Syndrome!The start of the end of the firm began when the AA leadership decided that they want to be consultants rather than traditional auditors!This happened as a  result of the divorce with Andersen Consulting. The idea was simple: we have created Andersen Consulting and we are capable of creating another consulting arm ! The catastrophic result of this policy was to convert the partners to "salesmen" and for the firm to lose its professional compass and to head for disaster !

With that in mind and with the ever increasing importance of risk management , some internal auditors may get too excited and try to act as risk managers! This could happen because ,among other things :

  - they think they can do a better job in managing risks
  - filling a vacuum in the risk management process ,
  - asked by management to do so
  - lack of understanding of the internal audit boundaries when it comes to risk management

Although this is not happening at an alarming scale, I am just trying to give an early warning , based on my observation of few cases, that some internal auditors may fall into this trap!

As internal auditors, our job is to provide management with assurance regarding the effectiveness and efficiency of its risk management process and not to duplicate or replace it. While this is obvious to the vast majority of internal auditors ,this post is directed at the very few who suffer from the risk management syndrome !

No comments:

Post a Comment

Takeaways from my 2023 ethics CPEs

 As you are aware, licensed CIA's are required to take at least two hours of training in the field of ethics. I have just completed mine...