The 12th Annual Global Technology Audit Risks Survey: A Deep Dive into Cybersecurity and AI Threats

In an era where technology is evolving at an unprecedented pace, organizations are grappling with the dual-edged sword of innovation and risk. The 12th Annual Global Technology Audit Risks Survey, conducted by Protiviti and The Institute of Internal Auditors (IIA), sheds light on the pressing concerns surrounding cybersecurity and the transformative role of artificial intelligence (AI) in shaping these risks. With 68% of IT audit teams perceiving high threat levels for cybersecurity over the next 12 months, the findings of this survey are both timely and critical.

The Rising Tide of Cybersecurity Concerns

Cybersecurity has emerged as the foremost technology risk for the second consecutive year, with a staggering 68% of survey respondents identifying it as a high-level threat. This statistic underscores the growing anxiety among organizations regarding their vulnerability to cyberattacks. The rapid digitization of business processes, coupled with the increasing sophistication of cybercriminals, has created a perfect storm for potential breaches.

Interestingly, the integration of AI into auditing practices is amplifying these concerns. Organizations that leverage AI tools in their audits report a heightened perception of cybersecurity risks. Among these organizations, 76% perceive significant cybersecurity threats, compared to 65% of those not utilizing AI. This trend suggests that while AI can enhance auditing processes, it also exposes new vulnerabilities that must be addressed.

AI: A Double-Edged Sword

The survey reveals that AI is not just a tool for efficiency; it is reshaping the landscape of technology auditing. A significant 59% of IT audit leaders anticipate that advanced AI systems, including generative AI, will pose substantial risks in the next two to three years. This perception highlights the dual nature of AI: while it offers enhanced insights and risk assessments, it also introduces complexities that organizations must navigate carefully.

Angelo Poulikakos, the global leader of Protiviti’s Technology Audit and Advisory practice, emphasizes the importance of adopting AI responsibly. He states, "Internal audit has a unique opportunity to guide the business in adopting AI responsibly by advising on effective risk and control governance." This proactive approach is essential for organizations to stay ahead of emerging risks and capitalize on the opportunities that AI presents.

Data Privacy and Compliance: A Growing Concern

Following cybersecurity, data privacy and compliance emerged as the second-largest perceived technology risk over the next 12 months. The survey indicates that 71% of organizations using AI tools perceive a high level of data privacy and compliance risk, compared to 58% of those not using AI. This disparity highlights the critical need for organizations to bolster their data governance frameworks, especially in light of stringent regulations like the General Data Protection Regulation (GDPR) and the recent cybersecurity rules imposed by the SEC.

The implications of data breaches are profound, with 52% of auditors viewing data breaches and leaks of sensitive information as the most significant cybersecurity-related threats. As organizations increasingly rely on digital platforms, the stakes are higher than ever, necessitating a robust approach to data security.

The Role of Internal Audit in Risk Mitigation

As cybersecurity remains a top priority for organizational leadership, the role of internal audit functions becomes increasingly vital. Anthony Pugliese, President and CEO of The IIA, asserts, "As cybersecurity continues to be viewed as the most significant technology threat facing organizations, internal audit functions will continue to play a key role in assisting their organizations in identifying and mitigating these threats."

Internal audit teams are uniquely positioned to provide insights into risk management strategies, ensuring that organizations are not only aware of potential threats but are also equipped to address them effectively.

Conclusion: Navigating the Complex Technology Risk Landscape

The findings of the 12th Annual Global Technology Audit Risks Survey serve as a clarion call for organizations to reassess their approach to technology risks. As AI continues to permeate various sectors, the need for a balanced perspective on its benefits and risks is paramount. Organizations must prioritize cybersecurity and data privacy while leveraging AI to enhance their auditing processes.

For those interested in delving deeper into the survey’s findings, the full research report, titled "From AI to Cyber – Deconstructing a Complex Technology Risk Landscape," is available for complimentary download. This comprehensive resource provides valuable insights into the evolving technology risk landscape and offers guidance for organizations seeking to navigate these challenges effectively.

In a world where technology is both a catalyst for growth and a source of risk, the imperative for organizations is clear: stay informed, stay prepared, and stay vigilant.