27
Internal Audit. Expected More. www.pwc.com /vn Xavier Potier Director, Risk Assurance Services Managing your risk, creating value: The role of Internal Audit and emerging technologies 13 th April 2018

Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

  • Upload
    others

  • View
    0

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Internal Audit. Expected More.

www.pwc.com/vn

Xavier Potier

Director, Risk Assurance Services

Managing your risk, creating value: The role of Internal Audit and emerging technologies

13th April 2018

Page 2: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

With us today

2PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

France, Denmark, Belgium, Singapore, Vietnam

Internal Audit

Risk Management

Internal Control

Corporate Governance

Financial Services

Industry Public Sector

Insurance, Manufacturing, Consumer, Logistic, Big 4 Firms

CEO, CFO, Financial Controller, Legal, Risk Advisor

Different level of risk management and Internal Audit experience / expertise

Page 3: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

3

Agenda

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Setting the scene

01

What does the market say?02

How talent and technology can help Internal Audit?03

Page 4: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

4

Section 1

Setting the scene

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 5: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

The foundational concept of Risk Management

5PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Enterprise Risk Management (ERM) is as "a process, effected by an entity's board of directors, management and other personnel, applied in strategy-setting and across the enterprise, designed to identify potential events that may affect the entity, and manage risk to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives”

Source: COSO

Page 6: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

The definition of Internal Audit

6

Internal Audit is an independent, objectiveassurance and consulting activity designed to add value and improve an organisation’s operations.

It helps an organisation accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control and governance processes.

Source: Institute of Internal Auditors

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 7: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

All successful enterprises take risks!

7

No Risk, No Reward

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 8: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

8

Section 2

What does the market say?

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 9: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Risks are changing: how and why?

9

“Today’s fast changing world creates more uncertainty for organisations – and makes it harder for them to understand where new risks are going to come from.”

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 10: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Disruption – A source of challenge and opportunity

10

58%New regulation

44%Changes in business model

or strategy

37%Cybersecurity and

privacy threats

36%Financial challenges

34%Technology advancement

The top five disruptions experienced by global companies in the last 2 years.

Source: PwC, 2017 State of the Internal Audit Profession Study, 2017

Specifically in Vietnam, investors should beware of the following top 5 challenges

Emerging country with developing regulatory landscape

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Transparency and Visibility

Risk management awareness

Changing Banking system landscape

Adaptation of infrastructure and technology

Page 11: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Regulatory landscape in Vietnam

11PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Insurance Banking Securities Investment Fund

Public Companies

Joint Stock Companies

• Decree 73/2016/ND-CP Implementation of the Law on insurance business and certain amended articles

• Circular 50/2017/TT-BTC on guidelines for Decree 73

• Law on Credit Institution 47/2010/QH

• Circular 44/2011/TT-NHNN on Internal Control system and Internal Audit of credit institutions, foreign bank's branches

Circular 210/2012/TT-BTC guidance on the establishment and operation of securities company

Circular 212/2012/TT-BTC guiding the establishment, organization and operation of fund management company

Decree 71/2017/ND-CP on Corporate Governance applicable to public companies

• Law on Enterprise 68/2014/QH13

• Draft Decree on Internal Audit

Page 12: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

12

Section 3

How Talent and Technology can help Internal Audit?

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 13: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

What defines a strong Internal Audit in the eyes of stakeholders?

13

Position

Vision

Business Alignment

Communication

Business understanding

Manage change

Strategic plan

Collaborate

ProactiveAdding value

Mandate

Unwavering Strategic thinker

Courage

Stakeholder expectation

Trust

Relationships

Integrity

NegotiateTalentTeam building

SourcingTalent development

Mentor

Flexible

Executive presence

RespectListenConfident

ConvictionInterpersonal skills

Business knowledge

Business acumen

Influence

Passion

Motivate

Key challenges of Internal Audit in Vietnam

Potential overlap in scope of workbetween Internal Audit, Internal Control, Risk Management and Compliance

Need for consolidation of 1st & 2nd

line of defence

Compliance vs added value

Emerging legal framework over Internal Audit and Risk Management

Internal Audit maturity

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Talent shortage, specifically in non-FS sectors and need for training

Need for tools and technology capabilities

Page 14: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

The Agile IA function

14

Source: PwC, 2017 State of the Internal Audit Profession Study, 2017.

18%of the nearly 1,900 respondents to the survey report that their internal audit function plays a valuable role in helping their companies anticipate and respond to disruptive events.

We call these Agile IA functions.

Agile =Distinctive behaviors

1. Build the likelihood of disruption into planningand risk assessment

2.Meaningfully collaborate with other lines of defense

3.Invest in and elevate business and technical IQ

Prepared Adaptive+Distinctive behaviors

1. Create more flexible processes and reporting mechanisms

2.Drive the use of data analytics and technology

3.Implement flexible talent models

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 15: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Key considerations for optimising the talent management

15

Source: PwC, 2016 State of the Internal Audit Profession Study, 2016.

1

Rethink talent

acquisition strategies

4

32

Focus on mentoring and

development

Transform performance management

Re-evaluatesourcing

relationships

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Of very effective leaders develop people with business acumen to create future business leaders vs. 48% of effective leaders

Of very effective leaders co-source to supplement internal talent vs. 59% of effective leaders

Of very effective leaders are agile in resourcing so as to complement the organization’s strategic direction vs. 52% of effective leaders

71%

84%

73%

Page 16: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Facing a technology inflection point

16

Source: PwC, How can boards tackle the Essential Eight and other emerging technologies?, 2017.

Robotics

Internet of Things

Augmented Reality

Virtual Reality

Blockchain

Artificial Intelligence

3D printing

Drones

“PwC’s 21st Global CEO Survey finds that the speed of technological change is a top concern among CEOs. And risk professionals must help their organizations make sure that processes and controls are effective while not slowing the pace of innovation.”

The essential eight

emerging technologies

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 17: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Link between Technology and Talents

17

Source: PwC, 2018 State of the Internal Audit Profession Study, 2018.

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 18: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Evolutionary or Revolutionary? Leap forward when possible

18

Source: PwC, 2018 State of the Internal Audit Profession Study, 2018.

Le

ve

l o

f a

do

pti

on

Collaboration tools Data tools Analytics Automation PredictiveTime to adoption

Today’s future is tomorrow’s foundation

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 19: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Evolvers – Successfully fusing Technology and Talent

19

Source: PwC, 2018 State of the Internal Audit Profession Study, 2018.

Evolver Traits

90%

Technology Talent

73%

Use advanced technology collaboration tools and rate well in cost optimization

Utilize analytic and monitoring tools

Experiment with predictive risk indicators

82%

28% 66%

72%

Invest specifically on technology training

Have correct mix of technology, operational and financial skills

Have team members with advanced technology skills

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 20: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Action to take today!

20

Source: PwC, 2018 State of the Internal Audit Profession Study, 2018.

Assess where Internal Audit stands with its tech-nabled foundation

Fuse technology and talent into a single strategy

Consider revolutionary over evolutionary whenever possible

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 21: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Discussion

21PwC Vietnam | Eurocharm

Discussion

Page 22: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

22

Appendices

PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Page 23: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

PwC’s 2018 State of the Internal Audit Profession Study

23PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Click here to access the full report

PwC’s 14th Annual State of the Internal Audit Profession Study

2,500+ survey respondents,

including CAEs, CFOs, Audit Committee members, and more than 1,200 stakeholders across 92 countries

More than 50 stakeholder and CAE interviews conducted across North

America, Europe, Australia, Africa and Asia to gain further insights.

North America

Europe

Australia

Africa

Asia

Page 24: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Internal Audit & Risk Management International Standards

24PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

The COSO “Enterprise Risk Management-Integrated Framework” is one of

the world’s most widely used risk management frameworks, developed by COSO co-ordinated with PwC.

The International Professional Practices Framework (IPPF) is the conceptual framework that organizes authoritative guidance promulgated by The IIA. A trustworthy, global, guidance-setting body, The IIA provides internal audit professionals worldwide with authoritative guidance organized in the IPPF as mandatory guidance and recommended guidance.

Page 25: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

The PwC Global Network is at your service

25PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Imagine the power of more than 236,000 people sharing a common purpose: building relationships that create value for you and yourbusiness. This is PwC. Every day, our people work with you to build the value you are looking for. PwC is one of the world’s largestproviders of advisory, assurance, tax and legal services. Our work with leading companies across multiple industries helps make businesshappen in over 158 countries around the world.

PwC VietnamVietnam Audit Firm of the YearAcquisition International, 2016

PwC GlobalRanked Number One

Financial Consultants GloballyKennedy’s Financial Consulting

Marketplace, 2010-2013

PwC VietnamTax Controversy Leaders

International Tax Review, 2013-2017

PwC Vietnam OfficesHo Chi Minh City8th Floor, Saigon Tower29 Le Duan Street, District 1Ho Chi Minh City, VietnamTelephone: + 84 28 3823 0796

Ha Noi16th Floor, Keangnam Hanoi Landmark Tower72 Pham Hung Street, Nam Tu Liem DistrictHanoi, VietnamTelephone: + 84 24 3946 2246

Page 26: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

PwC Risk Assurance Services

26PwC Vietnam | Eurocharm | Managing your risk, creating value: The role of Internal Audit and emerging technologies

Risk Assurance Services

Help you make well-informed decisions

The world of risk is changing. Challenging economic times, volatile world events and fast-changing technology are leaving organisations more vulnerable than ever. It’s much harder to predict where new risks will come from. But, you are adapting and so have we, helping the world's leading businesses to create value in a turbulent world. Many organisations have processes in place to manage risk. But, they are often not as robust as they need to be or they are more focused on yesterday’s risks rather than being forward looking. Our view is that boards need to start taking a holistic approach to risk, moving from being reactive and compliance-driven to being proactive, and using risk as a strategic driver of performance.

Risk Assurance helps management make well-informed decisions. The insight and independent assurance we bring provides an invaluable safeguard in today’s complex operating environment. We look at your processes, policies, systems and controls with a fresh eye. Internal audit, Business Resilience, Business Control Advisory, Performance Assurance, Corporate Treasury and Commodity Solutions - We cover it all with a focus on the details of your risks.

Explore further

IT risk assurance

Business control advisory

Corporate treasury and comodity solutionsInternal audit

Business resilience Performance assurance

Cybersecurity & data privacy services

PwC's Academy

Page 27: Managing your risk, creating value: The role of Internal ... · Different level of risk management and Internal Audit experience / expertise. 3 Agenda ... including CAEs, CFOs, Audit

Thank you for your kind attention!

This publication has been prepared for general guidance on matters of interest only, and does not constitute professional advice. You should not act upon the information contained in this publication without obtaining specific professional advice. No representation or warranty (express or implied) is given as to the accuracy or completeness of the information contained in this publication, and, to the extent permitted by law, PwC does not accept or assume any liability, responsibility or duty of care for any consequences of you or anyone else acting, or refraining to act, in reliance on the information contained in this publication or for any decision based on it.

© 2018 PwC (Vietnam) Ltd. All rights reserved. “PwC” refers to the PwC network and/or one or more of its member firms, each of which is a separate legal entity. Please see www.pwc.com/structure for further details.

Xavier Potier

Director, Risk Assurance Services

Email: [email protected]

Tel: +84 28 3823 0796 Ext. 1010

DID: +84 938 131 446