Abstract:
This study investigated the
effectiveness of Risk-Based Internal Audit (RBIA) practices
in mitigating risk within selected private banks in
Afghanistan. The findings offer substantial empirical
evidence that RBIA practices in the sampled institutions
remain weak, insufficiently developed, and generally
ineffective in producing meaningful risk reduction. Although
RBIA is widely regarded internationally as an essential
component of effective governance and risk management, the
results indicate a considerable disconnect between the
theoretical principles of RBIA and their practical
application within the Afghan banking sector. The demographic
results show that internal audit functions in the selected
banks are largely staffed by mid-career professionals who
possess bachelor’s degrees and moderate levels of
professional experience, indicating the presence of a
potentially competent workforce. Nevertheless, significant
weaknesses were identified in the actual implementation of
RBIA. Most respondents did not agree that internal audit
functions adequately concentrate on high-risk areas, employ
risk-based audit planning, distribute resources according to
assessed risk levels, or regularly revise audit plans in
response to emerging risks. These findings suggest that
internal audit practices continue to emphasize compliance and
routine procedures rather than adopting a genuinely
risk-oriented approach. The study further identifies
deficiencies in auditors’ ability to conduct complex risk
assessments, limited collaboration between internal audit and
risk management departments, and insufficient incorporation
of RBIA findings into strategic organizational decisions.
These limitations are further intensified by weaknesses in
internal control systems, corporate governance arrangements,
risk management structures, and compliance management
processes. Taken together, these institutional shortcomings
substantially reduce the capacity of internal audit functions
to contribute effectively to organizational risk mitigation.
Despite these challenges, the correlation and regression
analyses demonstrate a statistically significant and positive
association between the different dimensions of RBIA and risk
reduction. This finding suggests that RBIA can play a
meaningful role in lowering organizational risk when its
practices are appropriately designed, implemented, and
supported. The demographic analysis also indicates that
variables such as gender, professional experience,
organizational position, and departmental affiliation
significantly affect perceptions of risk reduction, whereas
educational attainment does not demonstrate a significant
influence. This implies that practical experience and
organizational responsibilities may be more important in
shaping perceptions of risk reduction than formal academic
qualifications alone. Overall, the study concludes that RBIA
has not yet resulted in substantial or observable risk
reduction outcomes within the sampled Afghan private banks,
largely because of structural, procedural, and
competency-related constraints. Nevertheless, the significant
statistical relationships identified in the study demonstrate
considerable potential for RBIA to improve risk management
and strengthen governance and financial stability. Enhancing
the implementation, competency, coordination, and strategic
integration of RBIA practices could therefore make a
substantial contribution to improving the resilience and
effectiveness of Afghanistan’s banking sector.
|