Sikich survey finds organizations increasing investment in internal audit as the function’s role expands
Sikich 2026 U.S. Internal Audit Priorities Survey highlights rising budgets, planned hiring and growing use of AI
CHICAGO, October 20, 2026--Sikich, a professional services company specializing in consulting, technology and compliance, today announced findings from its 2026 U.S. Internal Audit Priorities Survey. Leveraging a decade of trend data, the research helps audit leaders distinguish lasting shifts from short-term changes in the risk landscape and provides benchmarks to inform budgeting, staffing, talent and sourcing decisions. This year's findings show that while organizations are increasing investment in internal audit, the function's responsibilities and technical demands are expanding even faster as leaders respond to cybersecurity, artificial intelligence (AI), regulatory change and technology transformation. The survey reflects the perspectives of internal audit leaders across a broad range of industries including financial services, manufacturing, technology, healthcare and the public sector and organizations of varying sizes and revenue levels.
Organizations are balancing traditional assurance responsibilities with emerging and increasingly interconnected risks. Nearly two-thirds (64%) of respondents reported higher internal audit budgets, while more than four in 10 (43%) expect to increase headcount. Yet scarce cyber, AI and data skills continue to challenge many functions. More than eight in 10 respondents (82%) use external partners to supplement internal capabilities, reflecting a growing reliance on operating models that combine institutional knowledge with specialized expertise.
"The fact that 82% of internal audit leaders are using external partners to supplement internal capabilities signals a fundamental shift in how these functions operate. Internal audit leaders have stopped treating external partners as overflow capacity and started treating them as a permanent part of the operating model," said Jamey Loupe, principal, Risk Advisory practice leader at Sikich. "Organizations can't hire fast enough to close the cyber, AI and data skills gap, so leaders need to be deliberate about what should be built internally and where to bring in specialists. Being intentional about that balance will allow internal audit functions to strengthen their capabilities while remaining flexible as needs evolve."
Cybersecurity and AI continue to lead the risk agenda, with 77% of respondents including AI assessments in their audit plans. As AI adoption accelerates, organizations are increasing their focus on AI governance, data privacy, inventories of AI use and cybersecurity. However, the survey found many organizations have yet to expand assurance beyond governance and security controls to evaluate whether AI is producing reliable and appropriate outcomes.