CAQ, Deloitte Gauge Audit Committee Priorities

Why It Matters

Effective audit‑committee oversight of cyber risk and emerging technologies is critical to protecting shareholder value, while streamlined meetings boost board decision‑making efficiency.

Key Takeaways

• Cybersecurity tops audit committee priorities, driving training initiatives
• Internal audit seen as underutilized for external audit support
• AI oversight gaining traction; quantum computing still nascent
• Presentation overload limits discussion; concise briefings recommended
• Chairs urged to enforce time limits for effective engagement

Pulse Analysis

The Center for Audit Quality (CAQ) and Deloitte’s joint report provides a rare, data‑driven snapshot of how today’s audit committees are adapting to a rapidly evolving risk landscape. By surveying 27 committee chairs, the study confirms that cybersecurity has vaulted to the forefront of board agendas, prompting increased training and a reliance on specialist consultants. This shift reflects heightened regulator scrutiny and the growing financial impact of cyber incidents, making robust oversight a non‑negotiable component of corporate governance.

Beyond cyber risk, the report uncovers two emerging themes. First, internal audit functions are perceived as underleveraged, with many committees seeing opportunities for deeper collaboration with external auditors to enhance assurance quality. Second, artificial‑intelligence oversight is gaining momentum, especially in technology‑intensive sectors, while quantum computing remains largely on the periphery of board discussions. These insights suggest that audit committees must broaden their expertise, balancing immediate threats with longer‑term technological horizons.

A practical takeaway concerns meeting efficiency. Respondents noted that presentations often consume the bulk of session time, leaving little room for critical dialogue. The authors recommend that presenters assume members have pre‑read materials and focus on distilled insights, while chairs should enforce strict time limits. Streamlined briefings not only improve engagement but also enable committees to address high‑stakes topics—cybersecurity, AI, and emerging tech—more effectively, reinforcing the board’s role as a strategic risk steward.