Cyber risks & digital internal auditing

Florian Habel
Jan 12
2 min read

Updated: Jan 15

How does auditing really cope with AI, cloud computing, and cybersecurity?

Digital transformation is fundamentally changing business models, processes, and thus also the risk landscape of organizations. Artificial intelligence, cloud services, and increasing connectivity open up enormous opportunities, but at the same time create new risks, some of which are difficult to grasp.

This raises a key question for internal audit: Is it sufficiently prepared for digital risks in terms of methodology, organization, and expertise?

This article highlights which digital risks are particularly relevant today, how traditional audit approaches need to be adapted, and which specific audit trails are emerging for modern internal audit.

1. Digital risks: From IT support to core business

Digital technologies are no longer purely an IT issue. They influence strategic decisions, virtually all operational processes, and the overall compliance structure of every organization.

Today, the key digital risk areas include:
Artificial intelligence (AI)
Cloud computing
Cybersecurity & ransomware

2. New requirements for internal auditing

Digital risks cannot be captured with traditional checklists alone. New methods, skills, and audit logic are required. The issue is particularly challenging because not only is IT the focus of the audit, but IT is also required for the audit activity itself.

This raises a key question for internal audit: Is it sufficiently prepared for digital risks in terms of methodology, organization, and expertise?

This article highlights which digital risks are particularly relevant today, how traditional audit approaches need to be adapted, and which specific audit paths are emerging for modern internal audit.

3. Specific audit trails for AI, cloud, and cybersecurity

The audit must examine whether governance in the IT context, ongoing controls, and responsibilities are effectively designed. Documentation is particularly important, as these are rapidly evolving areas.

4. Skills & collaboration

A basic understanding of digital technologies, the ability to collaborate across disciplines, and the targeted use of external expertise are essential.