Enterprise Risk Management Takes the Lead, AI Governance Gains Urgency for Audit Committees: Deloitte, Center for Audit Quality Survey
NEW YORK, Sept. 22, 2026 /PRNewswire/ --
What: The fifth edition of the "Audit Committee Practices Report," a joint initiative of Deloitte's Center for Board Effectiveness and the Center for Audit Quality (CAQ), provides audit committee members and governance professionals with a benchmark for priorities and peer practices in the year ahead.
Who: Krista Parsons, Audit Committee Program leader, Center for Board Effectiveness, Deloitte & Touche LLP; and Vanessa Teitelbaum, senior director, Professional Practice, Center for Audit Quality
When: September 22 at 8 a.m. EST
Details: The latest "Audit Committee Practices Report" highlights how audit committees are balancing their foundational responsibilities with an expanding oversight agenda shaped by emerging risks, cybersecurity, AI governance and expectations for stronger engagement. Based on close to 250 survey responses from audit committee chairs and members, this year's report examines not only where oversight responsibility resides, but also whether committees feel equipped with the confidence, visibility and experience needed to oversee these areas effectively.
Highlights from the report:
- Emerging risks reshape priorities:
- More than half of respondents (54%) say their audit committee has grown more focused on emerging risks over the past year.
- More broadly, enterprise risk management emerged as the No. 1 priority for audit committees, according to survey responses.
- Cybersecurity oversight calls for agility:
- Cybersecurity shows up most often among audit committees' top three priorities.
- Most audit committees overseeing cybersecurity feel confident in their ability to provide oversight (82%). However, the rapidly changing cybersecurity landscape requires sustained attention as committees work to keep pace with the evolving risk profile.
- A gap between AI responsibility and readiness:
- Seventy-five percent of respondents identified AI governance as a top three priority, up significantly from 35% last year, and 70% cited technology (including AI) as the top skill needed to enhance audit committee effectiveness.
- However, only 56% of respondents are confident in their audit committee's ability to effectively oversee AI governance.
- Engagement and consistency set the standard:
- Higher-quality discussion and challenge in meetings ranked as the top-rated opportunity to enhance audit committee effectiveness, cited by 41% of respondents.
- Engagement team leadership, experience and continuity was the top overall response for what audit committees value most when assessing the quality and performance of the independent auditor.
Key quotes:
"Audit committees are entering a new era of oversight — one defined by fast-moving risks and an expanded agenda. The committees that are likely best positioned to lead through that change are not just identifying what is emerging; they are clarifying responsibilities, strengthening communication and building the capabilities needed to keep pace with change."
— Krista Parsons, Audit Committee Program leader, Deloitte's Center for Board Effectiveness, Deloitte & Touche LLP
"The audit committee's core responsibility remains oversight, but the environment around that responsibility continues to evolve. As risks grow more interconnected and new areas of focus emerge, audit committees must regularly evaluate whether they have the structure, expertise and engagement needed to fulfill that role effectively."
— Vanessa Teitelbaum, senior director, Professional Practice, Center for Audit Quality
About Deloitte's Center for Board Effectiveness
Deloitte's Center for Board Effectiveness helps directors deliver value to the organizations they serve through a portfolio of high-quality, innovative experiences throughout their tenure as board members. Whether an individual is aspiring to board participation or has extensive board experience, the Center's programs enable them to contribute effectively and provide focus in the areas of governance and audit, strategy, risk, innovation, compensation, and succession.
About the CAQ
The CAQ champions the public interest in the capital markets by:
- Elevating the quality, credibility, and transparency of public company audits;
- Advancing critical issues affecting public company audits;
- Driving innovation in assurance; and
- Providing a collaborative forum for capital market stakeholders to address evolving needs and challenges.
As the voice of the public company audit profession, we work to instill trust in corporate reporting and the integrity of the auditing process, ultimately empowering investors, companies and society as a whole. Learn more at www.thecaq.org.
About Deloitte
Deloitte provides industry-leading audit, consulting, tax and advisory services to many of the world's most admired brands, including nearly 90% of the Fortune 500® and more than 9,000 U.S.-based private companies. At Deloitte, we strive to live our purpose of making an impact that matters for our people, clients, and communities. We bring together distinct talents, technologies, disciplines, and an ecosystem of alliances to help tackle today's most complex business challenges and drive long-term progress. Deloitte is proud to be part of the largest global professional services network serving our clients in the markets that are most important to them. Bringing more than 180 years of service, our network of member firms spans more than 150 countries and territories. Learn how Deloitte's approximately 470,000 people worldwide connect for impact at www.deloitte.com.
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee ("DTTL"), its network of member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as "Deloitte Global") does not provide services to clients. In the United States, Deloitte refers to one or more of the US member firms of DTTL, their related entities that operate using the "Deloitte" name in the United States and their respective affiliates. Certain services may not be available to attest clients under the rules and regulations of public accounting. Please see www.deloitte.com/about to learn more about our global network of member firms.
SOURCE Deloitte
Share this article