This article examines the modernization of internal control systems within Brazilian public administration, emphasizing the need to overcome the historically fragmented and reactive approach to this function. Grounded in international frameworks such as COSO and the Three Lines Model of the Institute of Internal Auditors (IIA), the study proposes a systemic, integrated, and risk-oriented approach. It highlights conceptual challenges embedded in current legislation, such as Law No. 14,133/2021, and the need for a shift in organizational culture. Additionally, it presents concrete opportunities for improvement, including inter-unit integration, the adoption of technology, and best practices implemented by institutions such as CGU, TCU, and TCE/PA. The central proposal is to transform internal control into a strategic tool for governance and the creation of public value.

The success of every organisation depends on her financial capacity, which plays a fundamental role in production. In recent time, poor financial capacity among industries in the Nigerian productive sector has resulted into poor internal Control policies. This study investigated the impact of internal control and financial performance on small and medium scale enterprises in Kebbi State, Nigeria. A descriptive survey design research was adopted. The estimated workers’ population of all respondents selected as of 2025 were 2,200 which consist of CEO’s, Managers, and Internal control units of the various SMEs in Kebbi State, Nigeria. A total of 338 respondents were sampled for the study using simple random sampling technique. A self-designed questionnaire was administered. The Pearson Product Moment Correlation Coefficient Analysis was employed to test the five hypotheses with a two-tailed test of significance at P<0.01 level. The results revealed that there is a significant relationship between individual internal control components and financial performance of small and medium enterprises in Kebbi state Nigeria. There also exists combined relationship between the internal control components (control environment, risk assessment, control activities, monitoring, information, and communication) and financial performance of small and medium enterprises in Kebbi state NNigeria. The study recommends regular and timely financial audits to help SMEs detect any gaps in their financial systems and financial performance. The management of the SME should conduct an annual evaluation of the financial reporting process and implement an internal audit system that permits monitoring of operational efficiency. The study also suggests that a frequent risk assessment be conducted so that SME management may determine whether or not their goals will be reached. In addition to implementing proper controls in the custody and disposal of assets, the management of a small to medium-scale enterprise (SME) should consider; control activities and information, and communication in order to improve financial performance.

The research aimed to examine the effectiveness of both the assurance and consulting roles of internal auditing in managing cybersecurity risks from the perspective of internal auditors in joint-stock companies. This was achieved by assessing the effectiveness of the internal audit’s assurance role in managing cybersecurity risks in joint-stock companies listed on the financial market, as well as the effectiveness of their consulting role in the same context. To achieve the research objective, the researcher employed the deductive approach to derive research hypotheses by analyzing previous studies related to the topic, along with the inductive approach to examine practical realities, test the validity of the hypotheses, and draw conclusions. A purposive sample of 200 internal auditors from Saudi joint-stock companies listed on the financial market was selected. Out of these, 186 valid questionnaires were retrieved and analyzed using the Statistical Package for Social Sciences (SPSS) version 30. The study reached several key findings, most notably the high level of effectiveness of the assurance role of internal auditing in managing cybersecurity risks, as perceived by the respondents. Similarly, the results revealed a high level of effectiveness of consulting role of internal auditing in the same context. Among the most significant contributions were regular audits of cybersecurity policy compliance, use of advanced security technologies to protect data, assistance in identifying security vulnerabilities, and providing recommendations to address them. The study also revealed a statistically significant impact of the internal audit’s consulting role in managing cybersecurity risks in joint-stock companies listed on the financial market. The study recommended that internal auditing departments in joint-stock companies should actively participate in discussions on cybersecurity risks with the board of directors and relevant committees and should also evaluate the effectiveness of the cybersecurity controls implemented within the company.

The emergence of agentic artificial intelligence (AI) agents—autonomous entities that pursue objectives, execute workflows, and interact across enterprise applications—marks the advent of a digital workforce operating alongside human employees. These systems promise efficiency and innovation, but challenge established assumptions about accountability, transparency, and control within organizations. In this article, we focus on internal corporate governance, understood as the structures, processes, and practices through which organizations direct, control, and assure operational activities. We examine how governance can adapt to the rise of agentic AI through the lens of the Three Lines Model of internal auditing. Our analysis addresses three questions: (1) How does the digital workforce transform internal governance challenges? (2) How must the roles of operational management, risk and compliance, and internal audit be reconceptualized? (3) What practical recommendations can be derived from applying the Three Lines Model to the governance of agentic AI? Our analysis indicates that effective governance of this future workforce requires sustained collaboration across the three lines, as the risks posed by agentic AI systems often span functional boundaries and cannot be managed in isolation. We propose strengthening collaboration in five domains: clarifying accountability, integrating AI agents into control environments, defining the scope of assurance, building cross-functional competencies, and aligning regulatory interpretations and responses. Further research is needed to understand how these mechanisms are institutionalized in practice and how internal governance systems must evolve in increasingly AI-enabled organizations.

This study aims to examine how auditor competence, supervisory independence, and internal control systems influence internal audit quality and fraud prevention in Indonesia's public sector, with particular focus on the moderating role of auditor integrity in shaping the effectiveness of these oversight mechanisms. Using Partial Least Squares Structural Equation Modeling (PLS-SEM), this study analyzes data from 53 auditors at the Buleleng Regency Inspectorate to test six direct relationships and six moderating effects of auditor integrity on internal audit quality and fraud prevention. The study reveals three key findings. First, all direct effects prove significant: internal control systems emerge as the strongest predictor of internal audit quality (β=0.431, p<0.001), while auditor competence most powerfully influences fraud prevention (β=0.408, p=0.001). Second, auditor integrity exhibits complex and counterintuitive moderation patterns: it negatively moderates the competence-audit quality relationship (β=-0.264, p=0.034) and independence-audit quality relationship (β=-0.095, p=0.029), indicating compensatory mechanisms or contextual pressures in corrupt environments. Third, integrity does not moderate any relationships with fraud prevention nor internal control system relationships with either outcome, revealing that fraud prevention is more heavily determined by structural factors than individual ethical characteristics.

This study examined how governance factors influence the performance of firms listed on the Nairobi Securities Exchange. Adopting a positivist philosophy, it used both descriptive and explanatory research designs. The analysis focused on 61 listed firms, with heads of finance, marketing, HR, internal audit, customer relations, operations, ICT, and risk and compliance as the units of observation. The target population comprised 350 departmental heads, from which a sample of 187 respondents was selected using purposive and stratified random sampling, achieving a 97% response rate. Data collection involved semi-structured questionnaires for primary data and extraction checklists for secondary data. Qualitative data was analyzed thematically, while quantitative data was analyzed using descriptive statistics such as frequencies and percentages, and inferential statistics, including logistic regression. The Nagelkerke Pseudo R² indicated that governance factors explained 60.2% of the variance in firm performance (R² = .602), and the regression coefficient showed that governance factors significantly predicted performance (B = 3.072, p ≤ .05). The study concludes that firm performance—measured by financial outcomes, customer satisfaction, internal processes, and learning and growth—can be enhanced through the adoption of governance (ESG) practices. This study recommends that management of NSE-listed firms integrate governance practices into their core operations to improve overall performance.

This paper examines how personalised pricing on digital platforms affects consumer behaviour. This article combines research related to online price discrimination and consumer decision-making with the theory of planned behaviour and attribution theory as the main analytical perspectives. It explains why consumers are more likely to have ideas such as unfair, targeted and out of control when they find different prices for the same product, which leads to privacy concerns and trust, ultimately reduces their willingness to buy, and is more likely to turn to other platforms or spread negative word of mouth. Literature and case studies show that similar goods online can have significant price differences across regions or access paths, and that many consumers have negative attitudes towards non-transparent personalised pricing. Meanwhile, personalised discounts and dynamic pricing are also likely to improve resource allocation efficiency, reduce search costs and provide more affordable options for price-sensitive consumers. Based on this 'efficiency-equity' conflict, this paper suggests that consumer acceptance depends on the legitimacy of the pricing rules, information transparency, and controllability. Therefore, the article provides actionable recommendations at four levels: market, industry, enterprise and consumer, including strengthening regulation of algorithmic pricing, improving data governance standards, internal pricing audits and ethical boundaries for enterprises, and comparison and privacy management practices for consumers. Overall, responsible and explainable personalised pricing is more likely to stimulate demand without undermining long-term trust.

Abstract This article reconstructs the historical rise of the Big Four accounting firms as central actors in Luxembourg’s offshore financial centre. Moving beyond bank- and law-centric narratives, it traces how international audit networks embedded themselves in a small national market from the 1970s onward through alliances with leading local fiduciaries, integration into the expanding investment fund industry, and participation in regulatory and consultative arenas. Drawing on interviews, professional data, and institutional records, the study shows how these firms shifted from marginal service providers to key architects of tax structuring, fund governance, and financial legislation. Their dominance in fund auditing, growing role in tax and advisory work, and organizational model reshaped professional hierarchies, including the legal sector. The Luxembourg case highlights how global professional service firms act as intermediaries between states and mobile capital, making them structural components of contemporary offshore finance rather than merely technical advisers.

This study examins the role of internal audit (IA) in enhancing the effectiveness of risk management in the water and sanitation utilities of Zambia, which are at risk due to non-revenue water, infrastructure destruction, and regulatory pressure. Using Agency Theory, IA is conceptualised in terms of a governance and assurance service which removes information asymmetry by means of independent evaluation of controls, testing of risk responses, and exposures disclosure. These results are obtained through a cross-sectional survey of 120 audit and risk-related employees that were analysed using reliability tests, multiple regression, and correlation analysis. The instrument was found to have internal consistency with the alpha coefficients of Cronbach of 0.860 in IA, 0.872 in Risk Management, and 0.861 in Challenges. The practices that were found to have a positive relationship with the contribution of IA were the implementation of formal ERM frameworks (r = 0.405), implementation of mitigation and monitoring of the implementation (r = 0.461), and service delivery improvement (r = 0.416, p = 0.001). The regression analysis revealed that IA was the most significant predictor of effectiveness (b = 0.462, p < 0.001), overriding the effect of board oversight (b = 0.385, p < 0.001); issues challenged were negatively but non-significantly related. The model explained the 42.8% of effectiveness (R2 = 0.428). These results underscore the significance of IA in the improvement of accountability, quality, and risk responses in these utilities.

This study investigates the persistent gap between technology acceptance and actual technology adoption among internal auditors in Thai public universities. While digital technologies are widely promoted as essential to contemporary audit practice, favorable perceptions do not consistently translate into meaningful integration. Drawing on qualitative data from ten in-depth interviews, this study explores how auditors interpret and negotiate digital technology within high-accountability professional environments. The findings reveal that adoption is shaped not only by perceived usefulness but also by professional identity preservation, perceived redistribution of authority, accountability-driven anxiety, cognitive demands, and constrained self-efficacy. Digital tools are not encountered as neutral instruments; rather, they are evaluated in relation to professional legitimacy, risk exposure, and confidence under scrutiny. The study argues that prevailing technology acceptance models overemphasize cognitive determinants while underestimating identity-mediated and emotion-mediated mechanisms. By analytically distinguishing acceptance from adoption, this research advances a more critical and context-sensitive understanding of digital transformation in expert professions. Sustainable adoption requires not only technical readiness but alignment with professional identity, authority structures, and psychological safety.

Effect of Internal Audit on the Performance of Uganda Registration Services Bureau

ISO 20387:2018 is the first international standard specifically designed for biobanks, defining requirements for competence, impartiality, and operational consistency. In 2022, the Multi-Specialistic Biobank of the Azienda Ospedaliero-Universitaria Pisana became the first biobank in Italy to achieve ISO 20387 accreditation, setting a national benchmark for public-sector quality governance. The accreditation pathway followed a structured 12-month plan combining gap analysis, document harmonization, competence development, and internal audits. A multidisciplinary quality working group redesigned the quality management system and aligned managerial and operational processes with ISO 20387 requirements. Fourteen quality documents were revised or newly developed to standardize workflows, strengthen traceability, and embed risk-based principles throughout the biobank's activities. ISO 20387 accreditation was granted on July 14, 2022. Subsequent surveillance audits in 2023, 2024, and 2025 confirmed sustained compliance and progressive improvements, including expanded internal audits, enhanced risk assessment, digital competence tracking, and strengthened Corrective and Preventive Action effectiveness. Persistent challenges-including infrastructural constraints, limited information technology support, and delays in software modifications-reflected structural limitations typical of public health care settings. This article provides an integrated account of ISO 20387 implementation and long-term maintenance in a public hospital biobank. The Pisa experience offers a replicable model for institutions operating under similar constraints, demonstrating how technical rigor, coordinated governance, and a shared quality culture can sustain accreditation and advance national biobanking excellence.

This paper explores the extent, type, and characteristics of disclosure of Key Audit Matters (KAMs) in listed companies in Nigeria. The International Auditing and Assurance Standards Board (IAASB) developed KAMs to address demands for greater transparency and clarity in audit reports. This study employs an ex post facto research design, utilizing qualitative content analysis of 44 companies from various sectors and their 2024 financial statements. Findings revealed that KAMs per industry range from 1 to 4. The reported KAMs by 26 companies were 62, averaging 1.3 KAMs per company. Expected Credit Loss Allowance (ECL) on loans and advances to customers is common among all banks, accounting for 60% of the total reported issues. The predominant issue across all industries was revenue recognition. There were five instances where KAMs were not mentioned and three cases with no KAM reference. The Big Four auditing firms dominated the audits of sampled companies reporting 62 KAMs across four sectors. We recommend that issues and trends in KAM be communicated, and that regulators require auditors to provide necessary clarifications when KAMs are absent or not mentioned. Where there is a basis to modify the audit opinion, this should also be explicitly stated.

Unauthorized use of third-party bank accounts as loan collateral represents an emerging but under-examined form of financial crime in developing banking systems. This study examines the unauthorized use of third-party bank accounts as loan collateral in Nigeria and its implications for fraud risk management and consumer protection. The research aims to identify the mechanisms through which unauthorized collateralization occurs, assess the adequacy of customer consent verification and internal control systems, evaluate the effectiveness of existing regulatory safeguards, and propose risk mitigation strategies. A descriptive research design was adopted using primary data collected from 200 respondents (120 bank staff and 80 customers) through structured questionnaires and interviews. Secondary data were obtained from regulatory documents, including the Central Bank of Nigeria (CBN) Consumer Protection Framework and BOFIA 2020. Data were analyzed using descriptive statistics and multiple regression analysis at a 5% significance level. Findings reveal that weak customer authentication significantly increases unauthorized collateralization risk by over 60%, (β = 0.61, p < 0.01), while ineffective internal controls also exert a positive and significant influence by nearly 50%. (β = 0.48, p < 0.05). Although BVN-based authentication reduces risk exposure by approximately 37%, (β = –0.37, p < 0.05), it remains insufficient in the absence of integrated monitoring and real-time customer notification mechanisms. The model explains 63% of the variation in unauthorized collateral use, confirming the systemic nature of the problem. The study concludes that unauthorized collateralization is primarily a process-driven institutional failure rather than an isolated criminal act. It recommends mandatory biometric consent verification, real-time customer notifications, strengthened internal audit controls, and targeted regulatory enforcement to enhance fraud prevention and restore consumer trust in Nigeria’s banking system.

ABSTRACT In 1999, the internationally applicable role of the internal audit function was redefined to be a trusted advisor to the organization rather than a stereotypical “corporate watchdog.” However, even today there is no clear understanding of what characteristics are associated with an internal audit function’s adopting a trusted advisor role, nor of what benefits the trusted advisor role yields for the organization. Using survey data from 250 chief audit executives, we find that a mix of professional and interpersonal internal audit characteristics is associated with adopting a trusted advisor role. Additionally, we find associations between trusted advisor internal audit functions and perceived benefits to the organization such as audit effectiveness, efficiency, and usability of audit outputs. Our findings contribute to the academic knowledge on the evolution of internal audit functions and identify incentives for adopting trusted advisor roles. Data Availability: Raw data were generated at a national Institute of Internal Auditors chapter. Derived data supporting the findings of this study are available from the first author on request. JEL Classifications: M40; M42; G34; G32; M4; G3.

From dust to dose: How to use alanine/Electron Spin Resonance dosimetry in quality assurance in blood irradiation and radiotherapy.

SUMMARY Materiality is a fundamental concept in auditing. Regulatory changes and improved data availability have motivated renewed interest in research on auditors’ materiality judgments. This literature review synthesizes and summarizes empirical research on materiality related to financial statement audits, internal control audits, and sustainability assurance. Some of the more important findings include the following: pre-tax income continues to be the most common benchmark, but it is often adjusted for other factors; lower materiality thresholds lead to increased audit effort and audit quality; investors do not have a good understanding of the materiality concept; and applying materiality in a sustainability assurance engagement presents major challenges. The findings are important to audit practice, policymaking, and research. The review also identifies several avenues for future research.

This study aims to determine the effect of the role of internal audit, leadership style and level of compensation on the effectiveness of the internal control system. This study uses a quantitative approach in the form of associative causality. This research was conducted at BPRs in Denpasar City with a total population of 20 BPRs. The sampling method used in this study is the total sampling method. The research data was collected using a questionnaire which was then analyzed by multiple linear regression analysis with the help of SPSS version 22 for windows. The results of the study stated that the role of internal audit, leadership style and level of compensation had a positive effect on the effectiveness of the internal control system at BPR in Denpasar City.

Digital transformation has significantly increased data complexity and risk exposure in public companies, demanding internal audit functions that are adaptive, innovative, and technology-oriented. This study aims to analyze the implementation of Big Data Analytics (BDA) in internal auditing and examine its impact on audit effectiveness. The research adopts a qualitative approach using a case study method, focusing on PT Telkom Indonesia (Persero) Tbk through an in-depth analysis of its 2024 corporate reports and related governance documents. The findings reveal that the adoption of BDA facilitates a transition toward data-driven auditing practices, enabling more comprehensive analysis of large datasets in real time. Furthermore, BDA enhances the detection of risks, irregularities, and potential anomalies, while also improving the accuracy and efficiency of audit procedures. The implementation of analytics-based auditing strengthens the strategic role of internal audit in supporting transparency, accountability, and effective corporate governance. Overall, these results emphasize the growing importance of big data analytics in enhancing internal audit effectiveness within the rapidly evolving digital business environment.

This study identifies and measures the key governance factors influencing fraud prevention effectiveness within non-financial listed joint-stock firms in Vietnam, emphasizing the role of corporate governance in safeguarding organizational reputation and sustainability. Using a quantitative approach, data were gathered via a structured questionnaire from 467 valid respondents. Regression analyses were performed using SPSS 22 and SmartPLS 3.0 to assess the determinants of fraud prevention effectiveness. The results indicate that all five components of the internal control system, control environment, risk assessment, control activities, information and communication, and monitoring, significantly impact fraud prevention. Additionally, audit quality (AQ) and internal auditing (IA) demonstrate positive and statistically significant effects on mitigating fraud risks. The research underscores that robust internal controls, high audit quality, and active internal auditing are critical pillars for effective fraud risk management in the Vietnamese corporate context. Firms are advised to strengthen their internal control frameworks and prioritize investments in internal audit processes. Furthermore, enhancing professional training and audit quality is essential for improving fraud prevention effectiveness and long-term firm performance.