The future of auditing will include AI, but hopefully not exclude the human factor

The introduction of artificial intelligence (AI) into business processes is making waves — including in the field of internal audits. In the food industry, characterized by stringent regulatory requirements, AI holds the promise of making audits more efficient and effective. But how exactly can these technologies be applied, and what are the limitations?

Potential of AI in Internal Auditing

AI technologies like Machine Learning (ML) and Natural Language Processing (NLP) can support internal audits in several key areas:

Practical Examples from the Food Industry

The use of AI in practice is already evident. For example, a major food manufacturer like Nestlé has optimized its audit processes with AI:

Another example from Japan demonstrates how a cloud-based audit solution was implemented to allow more flexible planning and quicker responses to regulatory requirements (Source: “Enhancing Internal Audit Capabilities: A Case Study on AutoAudit Cloud”, 2024).

Limits and Challenges

Despite the many advantages, organizations must address several challenges when implementing AI in their processes:

It is equally critical to select flexible AI tools that can adapt to changing business needs and integrate seamlessly with existing systems. Employees must also receive targeted training on how to use AI and machine learning technologies effectively, as these tools are only as good as the people operating them. Based on my experience, combining expertise and practical knowledge significantly enhances the outcomes of working with AI.

The notion of replacing employees with AI is, while popular in some executive circles, neither sustainable nor practical. In the long run, the greatest potential for success lies in the synergy of a well-trained team working in tandem with strategically implemented AI solutions.

Furthermore, compliance with data protection regulations such as the GDPR is non-negotiable, particularly when handling sensitive information. Organizations should conduct data protection impact assessments early on to ensure data is securely stored and processed. It is also vital to pay close attention to confidentiality settings and the security features of the chosen AI models.

Personally, I operate under the assumption that any data entered into these tools, especially free versions, can no longer be considered confidential. Many of these tools monetize by utilizing user data as training material. Additionally, data security incidents among various providers, in my view, are not a matter of “if” but “when.”