Introducing a cutting-edge, digitally driven internal audit solution

Internal Audit    

""

Embrace the new risk multiverse

As we face landscape that is more complex and connected than ever before, internal audit steps forward—builds trust. Helping you to see risk differently. Empowering faster actions and smarter decisions.

Our internal audit services combine a focus on risk with objectivity––and far-reaching expertise. We believe that internal audit can help you navigate risk, while protecting and creating value.

More than just a line of defence—internal audit is now your first call for navigating challenges.

As organisations embrace digital transformation, internal audit must evolve too. In a tech-driven environment, audit clients demand more than regulatory support; they seek innovation and value. Companies in Gibraltar aim to leverage data and new technologies to enhance audit outcomes. It's time to modernise your internal audit process to meet these expectations.

Our experience shows solving big problems needs collaboration. Our shared capabilities multiply the value.

Modern internal audit blends diverse skills to tackle complex risks.

At PwC, we combine core internal audit skills with other areas—cybersecurity, ESG, compliance, culture, forensics and tax—and bring in industry specialists with digital tools to keep internal audit aligned and efficient.

This is the multiplier effect: enabling better risk coverage, greater efficiency and meaningful insights.

We know that real value comes from fusing powerful technology with human insight.

Our internal audit services weave advanced tech with business expertise—understanding your culture, values, strategy and people—with no missing links.

Our teams integrate tech to refine your risk assessment, testing, analysis, investigation, reporting and audit lifecycle.

From robotic process automation, data analytics and artificial intelligence to enterprise resource planning, continuous monitoring, governance, risk and compliance––we can transform challenges into opportunities. 

This is internal audit—evolved.

How do you want to make a change?

We help companies worldwide set up, plan, enhance and deliver leading internal audit capabilities. What’s your goal?

I want to...

Set Up or Transform Internal Audit

Plan, develop and structure internal audit––making it the right fit for your organisation. And ready for the future.

  • Internal audit function set-up
  • Internal audit charter, strategy and vision
  • Policy and plan development
  • Restructuring internal audit (e.g. due to an IPO or merger)
  • Organisation-wide alignment and integrated assurance across the second and third line

Our perspective: A bold vision—aligned with other governance functions—positions internal audit as a leader, reduces duplication, enhances collaboration and, ultimately, strengthens your organisation’s ‘risk shield’.

Deliver the Internal Audit Plan

Combining modern audit methods, technology, industry knowledge and expertise to deliver effective internal audit services––anywhere in the world.

  • Internal audit co-sourcing and outsourcing, including:
    • Risk assessment with digital risk tools
    • Planning, scoping and work-programme design
    • Audit execution—tech-enabled and data-led
    • Global project management, coordination and communication (multi-language)
    • Reporting and stakeholder engagement with visualisation tool
    • Internal audit management, taking on roles like Chief Audit Executive or Head of Internal Audit
  • Full internal audit managed services—scalable, standardised, efficient and effective, using our technology, teams and delivery centres worldwide
  • Organisation-wide internal controls programmes, such as Sarbanes–Oxley Act (SOX) or equivalent
  • Specialist audits, such as cyber, ESG, M&A, HR and culture, media and strategy audits
  • Third-party audits, including vendor compliance and due-diligence audits
  • Forensic audits and investigations, addressing fraud and compliance breaches

Our perspective: Internal audit teams are focusing on tackling strategic risks like corporate strategy, decision-making, transformation, M&A and cost management. A clear plan is necessary to balance traditional risk coverage while equipping teams with the right tools and talent. Strong stakeholder communication is essential to meet diverse expectations.

Implement Technology in Internal Audit

Harness technology to boost the efficiency and effectiveness of internal audit, drawing valuable insights from data.

  • Internal audit technology strategy
  • System selection, implementation and configuration
  • Design and use of data analytics, robotic process automation (RPA), continuous auditing and AI
  • Alignment and integration with existing organisational technology, including risk, compliance and enterprise resource planning (ERP) tools
  • Digital training and upskilling

Our perspective: Technology is increasingly converging for use in internal audit, risk, compliance and business operations. This creates a chance for internal audit to lead in digitising governance and assurance––benefiting from improved risk data and automation. A clear internal audit technology strategy and open communication with all levels is essential to promote investments that benefit your entire organisation.

Develop My People in Internal Audit

Build confidence and new skills to unlock your team’s potential and prepare them for success.

  • Internal audit talent strategy and framework implementation
  • In-person and online training for internal audit and assurance teams, including controls programme leaders
  • Training for business teams, including risk and control owners
  • Upskilling for executives and management on corporate governance
  • Support from subject-matter specialists for knowledge transfer during audits
  • Coaching and mentoring for internal audit leadership, audit committee members and management

Our perspective: While technology is essential for modern internal audit, becoming a trusted advisor is also a human journey. It’s about having people who can turn data into insights, risks into opportunities and ideas into action. Achieving this requires a balanced mix of technical and human skills, like communication, project management and collaboration.

Assess the Maturity and Quality of Internal Audit

Enhance your capabilities to fulfil the potential of the next generation internal––and exceed your stakeholder expectations.

  • External quality assessments (EQAs) and external strategic assessments (ESA)
  • Benchmarking and health checks on internal audit maturity and performance
  • Development and evaluation of internal audit quality management framework and processes
  • Internal audit key performance indicators (KPIs), supporting alignment with corporate strategy
  • Optimising internal audit, audit committee, board and other stakeholder reporting

Our perspective: Like any system, the governance ecosystem thrives on renewal and growth. There’s a chance to reevaluate which KPIs drive internal audit excellence, supporting alignment with corporate strategies and reflecting stakeholder values. This involves balancing quantitative, qualitative and both internal and external KPIs.

Tackle a Specific Business Problem or Risk

Use internal audit’s strengths to analyse and quantify issues, advise on improvements and identify blind spots and emerging risks.

Areas where internal audit can add value:

  • Corporate transactions, including due diligence and post-merger integration
  • Addressing regulatory breaches with root-cause analysis and remediation monitoring
  • Enhancing board effectiveness, such as decision-making and delegation of authority processes
  • Navigating local laws and risks, especially during market entry
  • Evaluating culture and behaviours to mitigate workstyle reform or transformation risks

Our perspective: Organisations gain from an objective viewpoint––which an internal audit can deliver. Solutions might not always require a traditional audit; sometimes a risk position paper, executive update or simple discussion is more effective.

Outsource Internal Audit

If you have an existing internal audit function it will have evolved over time, but so too has internal audit outsourcing. It's time to reconsider whether specialist resources can give you the agility necessary to manage change and exploit the opportunities it presents.

An outsourced team aligned to your strategy, aware of the issues you're facing and armed with innovative techniques and technology can provide the insights, expertise and assurance you need to deliver against your objectives and meet the board's expectations.

If you are required to step up an internal audit function because of regulatory (PCF-13) requirements, we can help you outsource this function, including a Head of Internal Audit (HIA).

Co-sourced Internal Audit

It is increasingly necessary to provide your stakeholders with assurance over the risks that matter. Yet, many in-house teams find it challenging to address them. They should consider co-sourcing as a solution. It is an essential part of what makes many internal audit functions successful. It provides access to technology, subject matter expertise and scalability. Co-sourcing can also support you in developing your staff's potential providing important skills and experience that few in-house functions can maintain alone.

As co-sourcing providers, we provide access to the full range of our capabilities, as and when our clients need. This includes technology and data solutions as well as deep industry experience.

Internal Audit Transformation

From time to time, boards, executives or Heads of Internal Audit want to reconsider their future strategy, priorities, options and configuration of their internal audit function. We can help by:

  • Staff augmentation and secondments: We can help solve your internal audit resourcing problems by complementing your team with specialist skills, local regulatory knowledge or geographical coverage.
  • Quality assurance reviews: We can provide the impartial perspective of a third party which can be invaluable in helping you establish what good internal audit looks like for your organisation. We can provide a broad overview of the profession and marketplace as well as deep subject matter and industry experience to help shape your vision and the steps you need to take to improve your internal audit function.
  • Training: We can develop internal audit training solutions unique to you and your business using our extensive market and industry knowledge.

Sound familiar?

  • Qualitative risk assessment discussions seem too high-level
  • Control testing activities are duplicated across the three lines
  • The sample approach for audit work seems antiquated
  • Stakeholders' expectations are increasing, but budget pressures remain
  • Attracting and retaining NextGen talent is challenging
  • We need to audit differently
Internal Audit Sounds Familiar

Are you ready to:

  • Identify blind spots previously impossible to see and uncover human behavioural patterns through advanced technology
  • Provide greater coverage of risk across the organisation leveraging a data-driven approach
  • Influence the strengthening of  the first and second lines through digital collaboration and continuous monitoring
  • Shift to more rewarding and valuable opportunities and involvement for IA talent

 

Follow us

Contact us

Lalit Khatwani

Lalit Khatwani

Partner, PwC Gibraltar

Tel: 200 73520

Jackielee Urrutia-Tinca

Jackielee Urrutia-Tinca

Director, PwC Gibraltar

Tel: 200 73520

Hide