KPMG Internal Audit: Top 10 key risks in 2016

Six years after the financial crisis, internal auditors at banks, insurance companies and capital markets firms continue to face increased pressure internally and externally. Internally, the pressure comes from the board of directors, executive management, and business unit stakeholders. Externally, it originates from many regulatory authorities.

Political, regulatory, and legal authorities and the media continue to highlight shortcomings in the industry, and regulatory agencies are growing increasingly impatient with failures to invest adequate resources to address their concerns.

Internal auditors are considered part of the solution, and they must continue to:
• Improve the risk identification and assessment process
• Take a forward-looking and proactive approach to internal audits/reviews
• Effectively challenge the first and second lines of defense
• Identify relevant issues and provide value added recommendations to business unit stakeholders—all while maintaining the independence and objectivity expected of an organization’s third line of defense.

This report highlights what should be top of mind for chief auditors and their teams during the upcoming year. It is based on conversations with chief audit executives at banks, insurance companies and capital markets firms and internal audit executives at our share forums, as well as insights from KPMG partners and professionals who work in the industry.

The result are the 'Top 10 in 2016'-key considerations that internal auditors at banks, insurance companies and capital markets firms should evaluate as part of their overall strategy, risk assessment, and internal audit plan.

1. Increased regulatory expectations
2. Culture and conduct
3. Regulatory reporting
4. Stress testing
5. Model risk management
6. Cybersecurity
7. Third-party relationships/vendor management
8. Continuous risk assessment
9. Use of data analytics and continuous auditing
10. Internal audit talent recruitment and retention

Download KPMG Internal Audit: Top 10 key risks in 2016