Based on our survey responses, we can infer that on
one hand, ERP systems lead to a significant
improvement in internal auditors’ ability to assess
and manage risk in most risk categories. On the other
hand, we see an increases levels for in technology
risk factors and operational risk factors, a decrease in
financial risks, and wider variation in miscellaneous
risk factors. The survey also indicates that internal
auditors are spending more time in quality assurance
in processes rather and less time in managing crises.
However, we were surprised that internal auditors did
not play a more important role in implementation,
particularly in defining internal control or being part
of the reengineering effort necessitated by ERP
adoption.