To meet increased demands, prioritize audit committee communication, department productivity and assurance around AI risks.
To meet increased demands, prioritize audit committee communication, department productivity and assurance around AI risks.
By Tim Berichon | April 1, 2025
Stakeholder pressure is mounting for chief audit executives (CAEs) to deliver more thematic insight and greater risk coverage — all while managing limited resources with greater efficiency. Defining an effective multiyear functional strategy will require renewed focus on communication, productivity and assurance.
Start by asking:
How can I tailor communications to better support the audit committee’s risk oversight responsibilities?
How do I determine the most effective productivity and efficiency investments?
How does audit provide assurance over the organization’s use of AI?
This year, CAEs must support the audit committee’s risk oversight responsibilities, achieve audit department productivity and performance goals, and scope coverage of AI risks.
Boards are prioritizing enterprise risk management more highly than they have in years past, with an 85% increase in board members reporting it as a top 5 priority. To effectively support the board in overseeing risk management, audit committees need information from CAEs on high-impact and emerging risks and risk themes.
However, many audit committee members report the current information they receive is insufficient. Thirty-five percent of them say they need more information about systemic governance risks; 29% say they need more information about the highest-impact emerging risks; and 20% say they need more information about thematic views on risks across the organization.
Stakeholders are pressuring audit to provide greater risk coverage — often with the same or fewer resources. Forty-one percent of CAEs facing increased coverage expectations are focused on increasing productivity and performance in audit execution to do so.
But thus far, efforts aimed at productivity and efficiency gains have yielded limited returns. Half of CAEs say their departments are missing opportunities for efficiency due to insufficient automation, and 39% report their auditors struggle to effectively project-manage their engagements, leading to delays and cost overruns.
Almost half of boards list AI or machine learning as one of the top 3 technologies that have come up for discussion at the board level in the past year.
In response to this increased focus, 86% of CAEs plan to provide coverage over AI risks in the next 12 to 18 months. But AI risks, which include behavioral, security and data, and transparency risks, are varied and complex. Only about one-fifth of CAEs feel confident providing assurance over AI governance, and only 5% feel confident providing assurance over AI model explainability and misaligned investment strategies.
To set a successful strategy for 2025, ensure communications help audit better manage risks; align productivity investments to outcomes; and develop ways to identify and prioritize the most critical AI risks.
The Gartner Leadership Vision for Chief Audit Executives outlines CAEs’ vision for 2025. It offers strategic guidance on audit priorities, trends, goals, challenges and actions. Based on data-driven research, it helps CAEs and their teams focus discussions, diagnose priorities swiftly and develop their 2025 audit strategy.
Attend a Conference
Join Gartner experts and your peers to accelerate growth
Gather alongside fellow leaders on September 8–9 in Grapevine, TX to gain insight on emerging trends, receive one-on-one guidance from Gartner experts and create a strategy to tackle your priorities head-on.
Gartner Enterprise Risk, Audit & Compliance Conference
Grapevine, TX
Drive stronger performance on your mission-critical priorities.