top of page

Risk in Focus 2023

Hot Topics for Internal Auditors
102721 - CIIA - Risk in Focus 2023 - Cover.jpg


  • Cybersecurity tops annual business risk survey, with 8 in 10 (82%) citing it a top five risk, reflecting the rapidly weaponised cyberattack landscape.

  • Half cite human capital, diversity, and talent management a top five risk making it the second biggest risk faced by organisations, up two positions from fourth place last year - reflecting the severe recruitment and retention challenges facing organisations.

  • Geopolitical and macroeconomic uncertainty is the risk that has increased in severity the most according to Chief Audit Executives, elevating it from 7th to 3rd place in the risk rankings (a 44% year on year increase) – but despite the severity of this risk around 9 in 10 (92%) are not spending major time or effort preparing for this threat now.

  • With the perfect storm of high-impact interlocking risks intensifying with a looming recession and an accelerating cost of living catastrophe, the Chartered Institute of Internal Auditors is urging businesses to harness their internal audit functions to navigate more risky, uncertain, and volatile times ahead.

A new business risk survey released today has found that the War in Ukraine, coupled with the cost-of-living crisis, has significantly changed business attitudes on the risks they face with geopolitical tensions exacerbating and intensifying a wide range of business-critical risks.

The research is revealed in the annual Risk in Focus 2023 report, which has been published by the Chartered Institute of Internal Auditors, in partnership with thirteen other Institutes of Internal Auditors across Europe. The report tracks the risks faced by organisations year-on-year and this year received a record-breaking 834 responses from Chief Audit Executives (CAEs) working in all sectors of the economy across Europe.

Cybersecurity has topped the business risk poll for the 5th year running, but the big story coming out of this year’s Risk in Focus research is that geopolitical and macroeconomic uncertainty is the newest and most dynamic risk rising-up the agenda. Rising four positions from seventh most severe risk last year, to third place this year. Yet despite its growing prominence and severity, only around one in ten (8.15%) are spending any major time or effort auditing the impacts of this risk on their business.

With the War in Ukraine raging on, the spike in global energy prices, soaring inflation, as well as growing tensions between the West and China, the Chartered Institute of Internal Auditors is alarmed by the gap between awareness and action taken on this rising risk and is urging business leaders to act now to mitigate the risk of further unforeseen major geopolitical disruption in the future.

Other key findings from Risk in Focus 2023 include the following:

  • Changes in laws and regulations was cited as a top five risk by 44%, slightly down on the 46% that said the same a year ago.

  • Digital disruption, new technology and AI was cited by 38% as a top five risk, down from 45% a year ago, moving it from third to fifth biggest risk, as the aftermath of the Covid-19 pandemic and the War in Ukraine continued to push it down the risk rankings. Rocketing inflation, pressure to increase pay and supply chain disruption, may mean that in 2023 many businesses do not have the funds to carry out their digitalisation plans.

  • With record-breaking temperatures recorded across Europe this summer and the consequent drought, 37% of CAEs now cite climate change a top five risk, compared to 31% last year – marking the fifth year in a row that this risk has risen the risk rankings.

Download the full report here: 

bottom of page