Jedi ERM: What Star Wars Can Teach Internal Auditors About Risk Management
This article draws parallels between internal auditors and the Jedi from Star Wars, highlighting their shared roles in problem-solving and providing trusted advice. However, it humorously points out the Jedi's significant failings in enterprise risk management (ERM), particularly their inability to detect and prevent major threats. The author uses these fictional shortcomings to underscore the critical importance of robust ERM and maintaining auditor independence in real-world organizations.
Internal Auditors as Organizational Jedi
The author playfully likens internal auditors to the Jedi of Star Wars, emphasizing their shared mission to navigate complex organizational 'galaxies' and solve problems. Just as Jedi follow a code and a mission, auditors adhere to an audit plan, progressing through phases of planning, fieldwork, and reporting. This structured approach, when executed effectively, allows both Jedi and auditors to become trusted advisors. The article also notes the unique independent reporting structure of internal audit, often directly to the board, drawing a humorous comparison to the Jedi Council meetings.
The Jedi's Fatal Flaw: A Lack of ERM
Despite their many strengths, the article points out a critical irony: the Jedi were remarkably poor at enterprise risk management (ERM). Their failure to adequately assess and respond to the growing threat of the Sith Lord Palpatine, even after years of warning signs, ultimately led to their downfall. This fictional oversight serves as a powerful cautionary tale for internal auditors, illustrating the dangers of ignoring red flags and failing to allocate resources to comprehensive risk assessment. The author compares the Jedi's complacency to Blockbuster's failure to adapt to emerging technologies, highlighting the consequences of inadequate risk foresight.
Lessons for Modern Internal Audit
The Jedi's missteps offer valuable lessons for contemporary internal audit professionals. The article stresses the importance of maintaining independence while providing objective and relevant insights to stakeholders. It also touches on the ethical implications of exceeding one's charter, as the Jedi did by becoming combat generals, and the need for a healthy corporate culture, which the author suggests Yoda's micromanagement style did not foster. Ultimately, the piece advocates for internal audit to champion good culture and governance, staying within its scope, and continuously learning from both successes and failures – even those from a galaxy far, far away.
Read more
