Organisations both large and small now have a vast amount of data at their fingertips, as well as increasingly advanced ways to analyse and segment it. Information on customer activity and preference, on transactions, as well as on organisations’ day-to-day running, is now quickly gathered, stored and accessed.

The question for internal audit teams is whether or not, and to what extent, this information can now be harnessed to improve the management of risk.