Internal audit involvement in Enterprise Risk Management (ERM): The case of Zimbabwean public universities

Abstract

Several business failures culminated in the necessity to improve overall risk management for different corporates. Educational organisations also began to realise the exigency for efficient risk management in the sector and embarked on tracking Enterprise Risk Management (ERM) related advances in the corporate world and seeking ways to apply these for higher education. This study sought to assess the involvement of internal auditors in ERM in Zimbabwean public universities. This study is quantitative and employed a survey to collect data from heads of internal audit sections in public universities. The main findings of the study indicated that 64.78 percent of the internal auditors were performing their core and permissible roles as promulgated by the Institute of Internal Audit in risk management while 35.22 percent were performing some prohibited roles. The study recommends engaging qualified internal auditors who are aware of their specific roles in risk management or providing some training for the officers in the internal audit sections. The study further recommends that these universities should institute risk management sections headed by qualified Chief Risk officers to complement internal auditors’ efforts and improve the effectiveness and efficiency of ERM in Zimbabwean public universities. Chief Risk officers should become champions of risk management in these institutions to avoid tempering the internal auditors’ objectivity.

Keywords: {'name': 'Enterprise Risk Management, Internal Audit, Institute of Internal Auditors, Public universities, Risks, Zimbabwe.'}

Authors & affiliations

Varaidzo Denhere
Affiliation not supplied

Deposited references

Supplied references, not a list of publications citing this article.

DOI: 10.1177/0047281617692067

Association of Governing Boards of Universities and Colleges (AGB) and United Educators (UE). (2014). A Wake-up Call: Enterprise Risk Management at Colleges and Universities Today. www.ue.org.

Beasley, M. S., Branson, B. and Hancock, B. (2018). The state of risk oversight: An overview of Enterprise Risk Management practices. 9th edition, AICPA.

Beasley, M. S., Branson, B. and Hancock, B. (2019). The state of risk oversight: An overview of Enterprise Risk Management practices. 10th edition, AICPA.

Beasley, M. S., Clune, R. and Hermanson, D. R. (2006). The Impact of Enterprise Risk Management on the Internal Audit Function. Journal of Forensic Accounting, (2006), 1-20.

Coetzee, P. and Lubbe, D. S. (2011). Internal audit and risk management in South Africa: adherence to guidance. Acta Academica, 43(4), 29-60.

Daniel, D. (2023). Employee experience. https://www.techtarget.com/searchhrsoftware/definition/employee-experience [Accessed February 17, 2023]

de Zwaan, L., Stewart, J. and Subramaniam, N. (2009). Internal audit involvement in Enterprise Risk Management. Griffith University Business School, Discussion Papers Accounting. No. 2009-02. Editor: Lamminmaki, D. Griffith University.

DOI: 10.6007/IJARBSS/v10-i1/6860

Enterprise Risk Management Initiative Staff (2004, September 1). COSO’s Enterprise Risk Management – Integrated Framework. https://erm.ncsu.edu/library/article/coso-erm-framework [Accessed February 11, 2023]

ERM Initiative Faculty NC STATE Poole College of Management (2007, September 1). ERM in Higher Education. https://erm.ncsu.edu/library/article/erm-higher-education [Accessed February 17, 2023]

Halim, K. A. (2007). Developing a Formal and Integrated Risk Management Framework in the Higher Education Sector: A case study on University of Nottingham.

IRM, I. o. (2018). From the cube to the rainbow double helix: A risk practitioner's guide to the COSO ERM Frameworks. England. IRM.

Karagiorgos T., Drogalas, G., Eleftheriadis, O. and Christodoulou, P. (2009). Efficient Risk Management and Internal Audit. International Journal of Management Research and Technology, 3(2), 429-436.

Lundquist, A. E. (2013). Enterprise risk management in higher education: There’s still a lot to learn. Risk Management Today, No. 29, (Ed): Rosenthal, H.

Marks, N. (December 6, 2018). Why is internal audit not seen positively? https://normanmarks.wordpress.com/2018/12/06/why-is-internal-audit-not-seen-positively/ [Accessed, January 29, 2023]

McNaughton, D. (2022a). Enterprise risk management in higher ed part 1: An Overview Of The Planning Process. https://changinghighered.com/enterprise-risk-management-in-higher-ed-part1/ [Accessed January 17, 2023]

McNaughton, D. (2022b). Enterprise risk management in higher ed part 2: Risk Planning And Its Critical Role In Higher Education https://changinghighered.com/enterprise-risk-management-part-2/ [Accessed January 17, 2023]

Mihret, D. G. and Khan, A. (2013, December 24). The Role of Internal Auditing in Risk Management. Paper presented at Seventh Asia Pacific Interdisciplinary Research in Accounting Conference, 26-28 July. Kobe, Paper k224. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2280212 [Accessed January 16, 2023]

Morgan, L. (October 12, 2021), Enterprise risk management team: Roles and responsibilities. https://www.techtarget.com/searchcio/feature/Enterprise-risk-management-team-Roles-and-responsibilities [Accessed February 13, 2023]

Odoyo, F. S., Omwono, G. A. and Okinyi, N. O. (2014). Analysis of the Role of Internal Audit in Implementing Risk Management – a Study of State Corporations in Kenya. International Journal of Business and Social Science, 5(6), 169-176.

Papas, A. (1999). Introduction in Auditing, Benos ed.

DOI: 10.2308/aahj-10549

Ramamoorti, S. (2003). Chapter 1 Internal Auditing: History, Evolution, and Prospects. The Institute of Internal Auditors Research Foundation. Professional Practices Framework for Internal Auditing. Florida.

Roslan, A. and Dahan, H. M. (2013). Mediating Effect of Enterprise Risk Management Practices on Risk Culture and Organisational Performance. https://www.semanticscholar.org/paper/MEDIATING-EFFECT-OF-ENTERPRISE-RISK-MANAGEMENT-ON-RoslanDahan/96a03ad3990fe4e7dcf3a6514b1443e2495d5811 [Accessed January 17, 2023]

Rudhumbu, N. (2014). Enterprise Risk Management (ERM) Practices of Private Higher Education Institutions in Botswana: A Critical Analysis. Journal of Education and Practice, 5(9), 42-50.

DOI: 10.3390/jrfm14050195

Spikin, I. C. (2013), Risk Management theory: the integrated perspective and its application in the public sector. Estado, Gobierno, Gestión Pública, 21, 89 – 126

Staciokas, R. and Rupsys, R. (2005). Application of Internal Audit in Enterprise Risk Management. Economics of Engineering Decisions, 2(42), 20-25.

DOI: 10.1108/02686900610634775

The Institute of Internal Auditors (2004, September 29) The Role of Internal Auditing in Enterprise-wide Risk Management. https://www.iiajapan.com/pdf/data/erm/ERM.pdf

The Institute of Internal Auditors (2009). IIA Position Paper: The Role of Internal Auditing in Enterprise-wide Risk Management

The Institute of Internal Auditors. (2011, March). Internal Auditing’s Role in Risk Management. The IIARF White Paper/ March 2011. https://na.theiia.org/iiarf/Public%20Documents/Internal%20Auditings%20Role%20in%20Risk%20Management.pdf [Accessed January 17, 2023]

The Institute of Internal Auditors. (2016). Definition of Internal Auditing. https://na.theiia.org/standards-guidance/mandatory-guidance/Pages/Definition-of-Internal-Auditing.aspx [Accessed January 12, 2023]

University Risk Management and Insurance Associations (URMIA). (October 17, 2015). Highlighting innovative and effective higher education risk management solutions. https://higherlogicdownload.s3.amazonaws.com/URMIA/9bb778ba-2379-4027-b70ad7c1dfa28128/UploadedImages/documents/URMIAJournal_2015.pdf [Accessed January 17, 2023]

VComply Editorial. (September 3, 2018). What is internal auditing and why it is important for success. https://blog.v-comply.com/internal-audit/ [Accessed January 17, 2023]

DOI: 10.58458/ipnj.v07.01.01.0045

DOI: 10.1108/02686909710173885