Data security, data ownership and the use of cloud technology are stirring uncertainty among global CFOs
London, 15 November 2017
- Managing data security and privacy seen as significant challenge by CFOs
- Lack of clarity over data ownership and governance has a significant impact on reporting effectiveness
- Traditional governance and board structures challenged by geopolitical risks and technology and data environment
Managing data security and privacy is the main challenge CFOs face in today’s corporate reporting environment for more than half of respondents (56%) to the latest report by EY Financial Accounting and Advisory Services (FAAS), Can innovative corporate reporting build trust in a volatile world? When looking at findings by country, CFOs in India (68%), China (65%) and the US (63%) are the most concerned about data security and privacy.
More than 1,000 CFOs or financial controllers of large organizations with revenue greater than US$500m across 25 countries participated in annual global survey. It found that lack of clarity over data ownership and governance has a significant impact on reporting effectiveness for 64% of respondents globally.
Eighty-five percent said that they found it either “very challenging” or “somewhat challenging” to actively manage data flows based upon different jurisdictions’ privacy laws. The same percentage of respondents also said that assessing the different security standards for data centers versus cloud computing was a key challenge to data protection, privacy and compliance. The survey also found that 49% of respondents say concerns over security and compliance risks of the cloud are seen as a major barrier to technology transformation and the implementation of innovative new technologies.
Peter Wollmert, EY Global and EMEIA FAAS Leader, says:
“There is a high level of uncertainty among the finance community on how to approach the issues of data security and privacy. CFOs need to ensure that they have clear governance processes in place for how they look after financial information and ensure that data is both compliant with relevant local laws and is secure – which can be a huge challenge in large and complex organizations. Responding by using advanced data analytics and integrated technologies as well as artificial intelligence, cloud computing and robotic process automation will be key to avoiding reputational and other costs that come with a mismanagement of financial data.”
CFOs respond to technological, social and political pressures
CFOs are under increasing pressure to rethink traditional approaches to corporate governance. Forty-two percent of those surveyed say their audit committees and boards are asking for more insights and information from corporate reporting on data protection and privacy, with the same percentage of respondents also saying they are providing corporate reporting on the risks from regulatory change. This increases to 60% and 61% when looking at respondents in the Middle East and North Africa and Singapore, respectively. To combat these changes, 85% of respondents globally say they are providing automated alerts to audit committees and boards about governance, risk and compliance issues, with this increasing to 95% of US respondents and 93% of UK respondents.
Wollmert says: “It is no longer a time for reactive corporate reporting. Boards are expecting management to report issues to them in real-time. These increasing demands for more insightful corporate reporting means reporting teams need to draw on the volumes of data available, as well as technology advances, to deliver new levels of insights that board members require to fulfill their governance role.”
The changing face of the audit committee
Against the heavily scrutinized environment, the oversight role of audit committees is also significantly changing, the report finds. Eighty-two percent of respondents say audit committees and boards are putting a much stronger focus on corporate culture and its impact on compliance and fraud prevention.
This is leading to the role and responsibilities of audit committees coming into focus. The survey finds that 58% of respondents say that committee members need to develop new competencies and understanding in using analytics in identifying data risks, while 57% say an understanding of legal frameworks for data hosting is increasingly important in order to provide effective oversight.
The full report can be viewed here.
Notes to Editors
EY is a global leader in assurance, tax, transaction and advisory services. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our stakeholders. In so doing, we play a critical role in building a better working world for our people, for our clients and for our communities.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. For more information about our organization, please visit ey.com.
This news release has been issued by EYGM Limited, a member of the global EY organization that also does not provide any services to clients.
About the survey
Can innovative corporate reporting built trust in a volatile world? surveyed 1,020 CFOs or heads of reporting of large organizations to understand the challenges they face in corporate reporting. More than 40% of the organizations were in excess of US$5 billion a year in revenues, with 8% in excess of US$20 billion. Respondents were split across the Americas; Asia-Pacific; Europe, Middle East, India and Africa (EMEIA); and Japan, and covered 13 main industry sectors. The survey was supplemented by in-depth interviews with CFOs and heads of reporting organizations, as well as EY subject-matter professionals.