Drive a Connected GRC Program for Improved Agility, Performance, and Resilience
Power Business Performance and Resilience
Discover ConnectedGRC Solutions for Enterprise and Operational Resilience
Explore What Makes MetricStream the Right Choice for Our Customers
Discover How Our Collaborative Partnerships Drive Innovation and Success
Find Everything You Need to Build Your GRC Journey and Thrive on Risk
Learn about our mission, vision, and core values
A step-by-step guide to building a ROI-based business case for implementing an audit management solution
Audit managers are critical, contributors to business performance providing an independent assessment and view of state of the business. As a leader in Governance, Risk Compliance (GRC) and Quality Management solution, MetricStream engages with a large number of audit managers accountable for monitoring risks and ensuring compliance across organizational units. Increasingly, the role is evolving into a horizontal function and companies are trying to implement a common framework for all types of audits - financial, risk, operations, internal, suppliers, and compliance -such that auditing priorities are determined by a enterprise-level risk-based approach and not departmental and tactical imperatives.
With increasing business complexity and the rising number and types of audits that companies need to conduct, audit managers are realizing that point-solutions and spreadsheet-based systems are no more suitable for managing audit programs and they are seeking comprehensive audit management solution designed to help companies manage a wide range of audit-related activities, data and processes. And like most enterprise software projects, the audit management solution also requires its champion to build a business case to justify the capital spend. This paper provides a methodology to compile an ROI (Return on Investment) analysis for an integrated audit management solution examines the main drivers for implementing such a system.
Effective risk management and compliance with industry standards and government regulations drive the need for ongoing auditing in organizations. For example, companies that are regulated by the FDA or are following quality standards such as ISO 9000/14000, regular audits are also essential to reduce the risk of noncompliance. Similarly companies in sectors like banking, financial services and energy rely on a variety of audits to comply with a vast number of national and international regulations as well as to get a clear visibility into risk exposures and mitigation plans.
The main drivers behind implementation of an audit management solution today are:
The Shifting Internal Audit Landscape: The survey, by Ernst and Young, reveals that there is an opportunity for Internal Audit to better leverage technology and knowledge collection/sharing tools to improve effectiveness and efficiency significantly In a survey conducted by Ernst and Young in 2007, nearly 84% of respondents held audits as a primary factor in company's fraud prevention and investigation program Automated Tools and technologies implemented by most Audit departments typically support
Source:Ernst & Young |
A savvy project will always conduct a detailed ROI analysis of a project as it determines the success or failure of the project. ROI answers the question "What do I get in return for the time and money I'm investing?" It is an accounting method used to evaluate the investment by comparing the magnitude and timing of expected gains to the investment. Some organizations compute ROI based on measure of time it takes to recover the cost of an investment (e.g., the software pays for itself within 2 years) while others calculate it as a percent of return over a specific period of time (e.g., 120% return on investment in 3 years).
Earlier, project management and IT decision makers considered direct quantifiable benefits as the only factor in the ROI analysis. But today, they are taking into account the non-financial benefits of IT investments, to facilitate the achievement of broader corporate goals.
The quantitative or the financial consideration for ROI is a business case that enquires whether or not an investment is justified purely in measurable financial terms. It answers questions like:
Quality norms are the benchmark for most companies. Analysts today go beyond direct cost savings and consider intangible benefits like business scalability, employee competency and enhanced productivity. The main factors considered while enumerating the qualitative benefits of a project are:
Base-lining Costs and Benefits of an Audit
The ROI analysis starts with the identification of the potential benefits due to overall implementation of the project. This helps in developing a consensus regarding revenue boosters, labor efficiency improvements, cost savings and business process change. This involves identifying the measurable variables and quantifying them into actual gains.
But the first step is to estimate total costs and benefits associated with auditing. While gathering the factors, count everything that is directly associated to the project including the infrastructure items. Here, we take a look at the time and cost of a generic audit procedure.
|
Using this matrix, you will be able to estimate of costs and benefits of the auditing program. You can calculate the cost of each audit and how much is the organization spending annually on auditing programs based on the total number of audits being conducted.
The benefits resulting from audits are the remediation and corrective/preventive actions that the company can implement for audit findings that add value to the existing business processes in terms of reduced cost. While not all remediation and corrective/preventive actions will lead to direct savings, a percentage of such value adding outcomes can be assumed. If an audit management solution plays a role in successful implementation of such remediation and corrective/preventive action plans, the benefits can be quantified with reference to this amount. If there are other tangible benefits that result from an audit and can be impacted by the system being considered, those can be considered in a same way.
With this frame of reference for current costs and savings, we can analyze how implementing an audit management solution reduces costs and improves savings.
The next step is analyzing the impact of the audit management solution on the current auditing process. Identify the key areas, like audit activities and processes that will be impacted by the audit management solution and then quantify the potential savings by percentage or an absolute.
|
This model allows quantifying the saving from on improved productivity that will be achieved by implementing the system.
As the audit management system streamlines tracking and implementing remediation and corrective/preventive actions, savings from reduced opportunity costs is a key benefit that can be quantified. The illustration here shows how the benefit of faster implementation and fail-proof follow through on audit findings.
|
|
With this estimate of savings due to an automated audit management solution, you can now move onto the costs associated with its implementation.
|
The initial investment, when correlated with the overall annual savings, gives an accurate picture of the ROI of the solution. You can calculate the future benefits of the investment using Net Present Value (NPV) estimated at an appropriate discount rate. The table shows the NPV of the saving the project will deliver in 3 years.
ROI can also be estimated as the percentage of investment that is returned in a specific period like ROI in 1 year and ROI in 3 years.
|
Another measure of ROI is payback - the period of time at the end of which the original investment in the project is redeemed to the company with savings and associated benefits or the time at which cumulative savings will exceed cumulative costs. Assuming the investment has to be made upfront at the beginning of the project, the benefits start accruing after the project is fully implemented and the benefits are uniformly spread over each month, the payback period is the break-even point at which the cumulative savings cross the cumulative costs.
|
Taking the analysis further, audit managers need answer more difficult questions that discuss immeasurable yet increasingly important productivity related benefits. For example, "how do you measure indirect savings?" or, "What's the worth of an employee's time or increased productivity that directly boosts the company's output?" Examples of indirect savings include "the time saved by audit manager will utilized for more value-added tasks" or "the compliance audit will take 1 week rather than 3 weeks."
Even though there are no comprehensive tools to gauge these benefits, yet the extensive advantages of non-quantifiable factors cannot be ignored. This process requires a look at the larger picture of an audit management system - from department level improvements to company-wide benefits. This will help the audit managers to define what to evaluate and how to measure it. Some suggestions include:
The auditing process is inherently complex as it involves multiple internal and external stakeholders. Existing audit systems have evolved from the bottom up, and organizations lack a single system of record preventing top down visibility and control. MetricStream solutions are helping companies with a federated way of handling quality, operational and compliance audits through a single system.
Today's increasingly intense competitive environment coupled with constant demand for accountability has put intense pressure on the companies to increase spending efficiency across the entire enterprise. Building a ROI-based business case puts audit managers on a strong ground to justify budgets for implementing an audit management solution. An exhaustive ROI analysis provides a transparent view of the profitability of the project - giving the requisite insight to negotiate and make right investment decisions.
Subscribe for Latest Updates
Subscribe Now