Combined assurance to enhance the efficiency and effectiveness of internal control: A study of risk management in banks

This study aims to understand perceptions of implementing combined assurance at XYZ Banking Company and evaluate its challenges and benefits. The combined assurance model integrates the company’s governance, risk management, and compliance (GRC) processes (Wibowo et al., 2022). The research method used is qualitative with a case study approach. Primary data was collected through in-depth semi-structured interviews with 24 informants selected through purposive sampling, consisting of two divisions: the internal audit division and the risk management division. The research findings indicate that the audit and risk management teams at XYZ Banking Company have a positive perception of combined assurance, although several areas still need improvement. The study also identified several obstacles in its implementation, such as differences in competencies, perspectives, and authority; overlapping duties and positions; sectoral egos; time and organizational structure constraints; lack of task segregation and dual control; and low awareness of the importance of risk management. In addition, there are other challenges, such as data security, regulatory compliance, ineffective evaluation and monitoring, and issues related to technology and infrastructure. Therefore, this study proposes a plan to overcome these obstacles and highlights the benefits of implementing combined assurance. The benefits include improved internal controls, minimized control weaknesses, and greater time and cost efficiency.