17 Virtual Brochure – March 2025 The ECIIA report notes a number of trends in relation to internal audit practice: • Dynamic audit planning: most internal audit functions are now using dynamic audit planning to respond to changing and more uncertain operating conditions. This approach employs an annual planning exercise to identify potential audit themes, which are refined and assigned on a quarterly basis. Uniac supports its HE clients in this way responding to changing needs throughout the year. • Increased investment in automating audit testing and analysis: this frees up auditor time to concentrate on conversations with individuals and testing risks and controls where data is not readily available. Uniac has an established approach and protocol to deploying data analytics techniques which incorporates, for example, whole population testing and data trend assessment. • Using AI to support internal audit: Internal audit teams are exploring how to use generative AI tools to realise efficiency benefits in audit practice, for example to support testing. However, it was noted that some businesses have prohibited the use of generative AI over concerns about data security, potential bias, and the accuracy and effectiveness of existing tools. Uniac is currently testing a number of approaches to using AI to improve the efficiency of its service to customers. • Developing methodologies to audit the use of AI: many CAEs reported that their initial focus is on developing approaches to provide assurance on AI governance processes and small, specific AI use cases. These approaches are likely to consider compliance with data governance and privacy, equality and diversity, and reputational risks. Uniac is developing a specific methodology for auditing use of AI in HE settings.
RkJQdWJsaXNoZXIy NTI5NzM=