Swiss companies are missing out on potential in their ICS
Three out of four Swiss companies today have a formally implemented internal control system (ICS). A new study by BDO in collaboration with swissaxis shows: The structural anchoring is well advanced, but there is still potential for development in terms of integration, digitalization and management involvement.
The majority of respondents rate their ICS positively. According to them, the greatest benefit lies in the clarity of processes and greater security, compliance with regulatory requirements, improved traceability and risk reduction. More than half of the participants rate the maturity level of their ICS as high or very high.
Strong focus on finances - operational risks only partially covered
Almost all of the companies surveyed cover the areas of finance and controlling with their ICS. Other areas such as IT, sales or marketing are integrated much less frequently.
Today, however, risks are increasingly arising along processes, digital interfaces and complex value chains, not just in accounting. This is precisely where there is significant development potential for many organizations.
Leadership determines effectiveness
Where management or the board of directors are actively involved in ICS issues, the system is much more frequently perceived as an integral part of the company's risk culture. By contrast, where management involvement remains low, the ICS tends to be seen as a compliance instrument.
Marc Sollberger, Head of Risk Advisory Services at BDO Switzerland, says: «An ICS is only fully effective if it is part of the management culture and is incorporated into strategic decisions.»
Christian Hafner, member of the Executive Board of swissaxis, also emphasizes the practical perspective: «Using what already exists and developing the impact of the ICS across the entire organization - in my view, that is the key lever. Many systems are formally in place, but are not used consistently as a management tool.»
Digitization remains a central construction site
Although many of those surveyed state that their ICS is partially digitalized or even see it as an integral part of digital processes, simple tools continue to dominate. Two thirds use Excel for documentation and control, one third even exclusively. Specialized software is only used in isolated cases.
Over the next five years, almost half of the companies plan to increase the digitalization and automation of controls. Other frequently mentioned goals include expanding risk management and early warning systems, training and raising employee awareness and greater integration of the ICS into existing business processes. Relief through automation and AI as well as better digital tools for control and documentation are now at the top of the wish list of the companies surveyed.
Public sector: other priorities
In the public sector, which is analyzed separately in the study, three quarters of organizations have an implemented ICS. A further 12 percent are in the process of introducing one.
In contrast to the private sector, however, the focus is less on digitalization. While respondents in the private sector cite the automation of controls as the most important strategic goal across all industries, public institutions primarily prioritize the expansion of risk management and early warning systems. Digitalization is only in second place here.
The public sector is also reluctant to use artificial intelligence. For the vast majority of respondents, AI is not an issue at all or only in theory. Active applications are hardly widespread so far.
Importance continues to grow
More than half of those surveyed expect the ICS to become even more important over the next five years. The drivers are increasing regulatory requirements, more complex business models and higher expectations of transparency.
Swiss companies therefore have a solid ICS basis. The next step lies in consistent further development. Away from isolated controls and towards an integrated management tool.
Source: BDO
