Legal & Compliance

Cybersecurity holds top spot on audit risk list as technical skills gap widens

As global organizations navigate an increasingly volatile economic and geopolitical landscape, internal audit functions are struggling to reconcile expanding mandates with persistent resource constraints. The latest data from professional services firm Sikich underscores a critical tension in corporate governance: while budgets for 2026 are rising, the technical expertise required to manage modern risks—specifically in cybersecurity and artificial intelligence—remains in short supply. This misalignment is occurring at a moment when boards and executives are simultaneously grappling with the complexities of strategy execution, trade policy instability, and the persistent inefficiency of foundational financial processes.

Internal Audit: The Growing Chasm Between Mandate and Capacity

The internal audit function is no longer merely a check-the-box compliance exercise. According to the 2026 Sikich Internal Audit Priorities Survey, 64% of internal audit leaders report increased budgets for the upcoming year, and 43% plan to expand their headcount. However, the survey results suggest these investments may be insufficient.

Cybersecurity remains the preeminent risk identified by internal audit leadership, cited by 43% of respondents—an increase from 41% in 2025. This focus is mirrored by the integration of emerging technologies into audit plans; 77% of internal audit functions now include specific AI assessments in their annual scope. Yet, the ability to execute these audits is hampered by a widening skills gap. Approximately 64% of respondents identified the lack of technical talent in cyber and AI as their most significant hiring and retention hurdle.

The divergence between Chief Audit Executives (CAEs) and their oversight committees highlights a secondary challenge: strategic alignment. While CAEs are focused on tactical and technical risk mitigation, audit committees are increasingly pushing for a broader focus on strategic risk, with 29% flagging it as a top priority compared to just 13% of CAEs. This friction suggests that as audit functions evolve, they must not only secure the budget for specialized talent but also bridge the communications gap between technical auditors and board-level strategists.

The Strategic Oversight Crisis at the Boardroom Level

The challenge of strategy execution is not confined to the audit department; it has reached the highest levels of corporate governance. The National Association of Corporate Directors (NACD) 2026 Blue Ribbon Commission report reveals that approximately 60% of public and private company directors consider strategy execution their most significant oversight gap.

This finding is a sharp critique of the traditional "review and concur" model of board governance. In an era defined by rapid technological disruption and geopolitical volatility, directors are finding that their existing oversight mechanisms are insufficient. The NACD report notes that 55% of public company directors believe their boards must increase scrutiny of strategic assumptions and scenario testing.

The structural barriers to effective oversight are rooted in legacy processes. Many boards remain overly tethered to retrospective financial metrics, which offer little guidance in a forward-looking, AI-driven economy. Compounding this issue is the realization among directors that their collective skill sets may not be fit for purpose. With only about 30% of directors expressing full confidence in their board’s current ability to support long-term growth strategies, a wave of board refreshment and composition reassessment is likely on the horizon for 2026 and 2027.

Shifting Geopolitical Winds in M&A Markets

While boards focus on internal strategy, external market forces are significantly altering the trajectory of global dealmaking. Data from the law firm Dykema indicates that the M&A landscape is bracing for a period of profound uncertainty, driven not by the cost of capital, but by trade policy and regulatory shifts.

For three consecutive years, interest rates held the top position as the primary risk factor for dealmakers. That trend has been decisively broken in 2026. Nearly half of the respondents to the Dykema survey identified tariff and trade policy volatility as the primary threat to transactions over the next year. As nations move toward more protectionist stances, dealmakers are forced to model for a wider range of political outcomes.

Despite these headwinds, the appetite for deal activity remains robust. Private equity “dry powder” and the strengthening of strategic balance sheets provide a cushion against macroeconomic volatility. Furthermore, the rise of the private credit market continues to alter the financing landscape, providing a flexible alternative to traditional bank lending. This shift signifies a maturation of the mid-market deal environment, where agility and regulatory sophistication are becoming as important as the underlying deal valuation.

The Persistent Inefficiency of Financial Close Processes

Underlying these high-level strategic and risk concerns is a fundamental operational challenge: the month-end financial close. A recent survey by Vena suggests that the promise of finance automation has yet to be fully realized. Despite significant investment in financial technology, 78% of finance teams report that they must still perform manual corrections during the month-end close process.

This persistent reliance on manual intervention is a symptom of fragmented data environments. Organizations are frequently layering sophisticated automation tools over legacy systems that lack integration, leading to a "garbage in, garbage out" scenario. For a third of finance teams, this results in spending over a week each month solely on reconciliation and data entry, time that could be better spent on the strategic analysis that boards and audit committees are now demanding.

The adoption of AI in the finance function is accelerating, with two-thirds of organizations currently evaluating or deploying AI tools for the close process. However, the survey warns that confidence in these outputs remains uneven. Without addressing the underlying data quality issues, the introduction of AI may simply automate existing inefficiencies rather than eliminating them.

Implications and Future Outlook

The convergence of these four reports paints a comprehensive picture of the corporate landscape as it moves toward 2027. Several cross-cutting themes emerge:

  1. The Talent Paradox: Across audit, finance, and boardroom strategy, the primary constraint is not capital, but the availability of the right expertise. Organizations are spending more money, but they are struggling to acquire the specific technical skills necessary to manage the digital transition.
  2. The Data-Strategy Gap: Whether in the audit room or the finance office, companies are struggling to transform raw data into actionable strategic intelligence. The prevalence of manual error in financial reporting suggests that foundational data hygiene remains a significant barrier to the adoption of advanced technologies like AI.
  3. The End of Passive Oversight: The shift in board focus from "review and concur" to active scenario testing marks a permanent change in corporate governance. Boards are no longer satisfied with lagging indicators; they are demanding a more rigorous approach to identifying and testing the assumptions that underpin corporate strategy.
  4. Regulatory and Geopolitical Resilience: The move away from interest-rate concerns to trade-policy anxieties suggests that the "easy money" era of corporate strategy has been replaced by an era of "hard navigation." Companies that succeed in the coming years will be those that build resilience into their supply chains and deal structures to account for a less predictable global trade environment.

As these organizations prepare for the remainder of the decade, the focus must shift from pure technology adoption to the integration of technology with organizational culture and human expertise. The tools for better audit, faster financial closes, and more robust strategy execution exist, but they are only as effective as the human capacity to govern them. The coming 18 months will likely see a period of intense organizational realignment, as companies attempt to close the gap between their ambitious, high-tech goals and their current, often fragmented, operational realities.

Related Articles

Back to top button