[pt] A Automação Robótica de Processos (RPA) surge como uma nova tecnologia advinda da indústria 4.0, focada na automação de tarefas humanas repetitivas, rotineiras e baseadas em regras. Ela promete eliminar esses processos que consomem mais tempo, sem substituir os sistemas de TI existentes. Consequentemente, reduziria custos e riscos operacionais; e melhoraria a eficiência, os processos internos e a experiência do cliente. Além disso, a RPA tem o potencial de revolucionar a auditoria tradicional, pois minimizaria as atividades tenocráticas, que apresentam baixo valor agregado, e permitiria que os auditores se concentrassem mais em atividades que exijam raciocínio analítico e julgamento profissional. Assim, levaria à ampliação da cobertura dos testes e do monitoramento de transações, aumentando a performance e a qualidade da auditoria contínua. Devido ao exposto, a RPA está sendo vista como um ativo estratégico para enfrentar os desafios da transformação digital. Por ser uma nova tendência, a literatura científica sobre o tema ainda é escassa, mas está crescendo rapidamente. E, nos últimos dois anos, foi amplamente adotada em muitas organizações e instituições financeiras com sucessos e fracassos. Portanto, considerando o modelo das três linhas de defesa, este estudo tem como objetivo propor um framework para implantação da RPA na auditoria interna de bancos brasileiros. / [en] Robotic Process Automation (RPA) emerges as a new 4.0 industry technology focused on the automation of repetitive, routine, rule-based human tasks. It promises to eliminate the most time-consuming processes without replacing existing IT systems. Consequently, reducing costs and operational risks as it improves efficiency, internal processes, and customer experience. Moreover, it has the potential to disrupt the traditional audit model as it minimizes mechanical low added value activities, enabling auditors to concentrate more on assignments that require thinking skills and professional judgment. Thus, it would lead to the expansion of testing and monitoring analytics coverage, enriching continuous audit quality and performance. Due to the above, RPA is being seen as a strategic asset to face the challenges of digital transformation. Since it is a new trend, there is limited literature on the subject, but growing fast. And, in the last couple of years, it has been widely adopted in many industries and financial organizations with successes and failures. Therefore, considering the three lines of defense model, this paper aims to propose an RPA framework for internal audit in Brazilian banks.

Proper records management plays a significant role in the auditing process, risk management and wider corporate governance. Despite this role, in South Africa, many governmental bodies are issued with disclaimer reports every year by the Auditor-General of South Africa (AGSA) due to a lack of supporting documentation. This problem is exacerbated by the exclusion of records management from the criteria for a sound financial management infrastructure in many governmental bodies. The other dilemma is that some records such as financial records, personnel records and electronic records usually fall outside the jurisdiction of the organisation’s records manager. Utilising the King Report III as a framework, this study sought to develop a framework to embed records management practices into the auditing process in the public sector of South Africa, with a view to entrench a culture of clean audits. The study relied on mixed methods research (MMR), with the quantitative study conducted first through informetrics analysis of audit reports, while the qualitative paradigm was used to substantiate numerical data. Data collection adopted a multi-approach with four key sources of data: a questionnaire, interviews, literature review and publicly available data from the consolidated general reports of AGSA. The study revealed that most governmental bodies have established internal audit units, audit committees and records management units, which did not work in unison. In most governmental bodies records management did not form part of the audit scope and records management professionals were not part of the audit committees. As a result, most governmental bodies continued to receive negative audit opinions from AGSA. The study recommends that records management community should utilise auditing and risk management as a springboard to propel records management to the new heights. A further empirical study on the role of auditing and risk management in records management that embraces both the private and public sectors is recommended. / Information Science / D. Litt. et Phil. (Information Science)