Internal Audit Considerations in Creating an RPA Program

March 10th, 2021

Internal Audit Considerations in Creating an RPA Program

An expert look at how internal audit programs are leveraging RPA and the challenges they are overcoming

Robotic Process Automation (RPA) is the latest frontier in the quest to automate business processes. Forward-thinking companies are implementing bots throughout their organizations – from finance to marketing to human resources.  But this rush to automate has left Internal Audit scrambling to answer one large, fundamental question: How have these changes impacted the company’s risk profile?

Like any new technology, RPA carries the potential of introducing a host of new risks into the organization. There are privacy and security risks (complicated even further if the bot is processing PII), there are access management risks, there are regulatory challenges, and there are data governance concerns. There are also “doomsday” scenarios – if a bot is misconfigured, a potential error could be replicated thousands of times, or hundreds of thousands of times, in a single day.

Watch this session to see leaders from Focal Point and Auxis, along with Rene Herrera, Director of IT Audit and Internal Audit at Office Depot, outline how Internal Auditors are wrestling with RPA and the strategies they’re using to offer visibility into RPA risk.


Key Topics for Discussion

  • General approaches for incorporating RPA reviews into your annual audit plan
  • The keys to successfully auditing a distributed RPA program
  • The biggest risks introduced by RPA, and strategies for risk mitigation


About the Speaker:

Larry Burke
Principal, Risk Consulting
Focal Point Data Risk

Larry manages Focal Point’s South Florida practice, based in Miami, and leads some of Focal Point’s largest SOX compliance and internal audit engagements for global clients, including Fortune 500 companies.

He has more than 24 years of internal audit and accounting experience. He is a licensed CPA in the state of Florida. Prior to joining Focal Point, Larry held a number of accounting positions at various companies and was the CFO of a national healthcare services firm. 


About the Speaker:

David Graff
Principal, Risk Consulting
Focal Point Data Risk

David Graff is a Principal in Focal Point’s Risk Consulting practice, specializing in Integrated Risk Management. He brings more than 20 years of experience with audit, risk management, internal control frameworks, strategic governance, and financial and operational processes within both industry and professional services roles.

Prior to joining Focal Point, David was a Director of Internal Audit and Enterprise Risk with KPMG. His varied industry experience includes serving as the Chief Audit Executive for the largest publicly traded U.S. water and wastewater utility. David is a Certified Public Accountant (CPA) and a Certified Internal Auditor (CIA).


About the Speaker:

Rene Herrera
IT Audit Director
Office Depot

Rene is the IT Audit Director at Office Depot. He leads a team of auditors to conduct IT and Operational audit projects and IT SOX testing. He is responsible for innovation initiatives including Data Analytics, RPA and GRC implementation. He was invited as speaker on the 2019 MISTI and ISACA Florida conferences to talk about RPA. Prior to Office Depot, Rene worked for Verizon for 16 years in Internal Audit, International Operations and Lean Six-Sigma Process Improvement. He led internal audit projects in Verizon International companies in Latin America, Europe and Asia. Rene serves on the Board of Directors of the non-profit organization HISPA, he launched the HISPA role model program for schools in South Florida. He also serves on the Palm Beach Hispanic Chamber of Commerce.


About the Speaker:

Eduardo Diquez
Intelligent Automation Consulting Director

Eduardo is the Consulting Director of the Intelligent Automation & RPA Practice at Auxis, including the ongoing management of its IA Center of Excellence in Costa Rica. With over 10 years of experience in process improvement and finance transformation, Eduardo has a proven track record working with CFOs in the design and implementation of back office optimization initiatives, with a deep focus on implementing long-term, scalable Automation Programs. Eduardo has successfully delivered over 200 robots to more than 30 different organizations across multiple industries including retail, financial services, hospitality, healthcare, and manufacturing. Some of Eduardo’s recent clients include Baptist Health, Revlon Cosmetics, Pandora Jewelry, Melia Hotels, and Amerant Bank.