Building societies, banks and insurers are facing growing pressure on resilience and navigating constant change heading into 2026. In this short video, Charlotte Kendal Parker, Senior Manager at DCR Partners, covers three key risk areas Internal Audit teams should be focused on right now:
-
Cyber security - recent major UK incidents have exposed weaknesses in identity and access management and incident detection and response. Just because these areas have been on audit plans for years, doesn't mean controls are operating effectively.
-
Change fatigue - with multiple major programmes running back to back, Internal Audit needs to step back and assess how change is being managed across the organisation and how day to day operations are being protected.
-
Resilience - Internal Audit must reframe how it looks at the business, moving away from individual processes and systems to provide a joined up view of risk across the most important business services.
Getting these right means Internal Audit can truly support organisational sustainability through a challenging period.
