Enhanced Enterprise Risk Management and Strategic Decision-Making
Enterprise risk management has come a long way, yet many organizations still struggle to turn risk intelligence into strategic advantage. This report distills insights from a global survey of 567 professionals, conducted by Baker Tilly and The IIA’s Internal Audit Foundation from January 7th to February 7th, 2025. The study traces how ERM programs are maturing, where technology and resource gaps persist, and how leading teams embed ERM into strategic decision making while safeguarding internal audit independence. Packed with fresh benchmarking data and practical guidance, the report helps you assess your own program's maturity and chart a clear path forward.
Key takeaways include:
- Risk awareness is uneven: Fewer than half of respondents (49%) say risk awareness truly permeates their organizations, signaling plenty of room for enterprise-wide education and engagement.
- Technology remains basic: Nearly 60% still rely on word-processing files and spreadsheets for ERM, while only 21% use a dedicated GRC platform and 20% lean on in-house tools.
- AI is largely untapped: Just 6% frequently use AI to spot risks and a mere 2% heavily use it for data inputs—highlighting significant upside for more robust analytics in ERM.
