IT Audit Determinants and Its Impact on Firm Performance: In Ethiopian Commercial Banks Perspectives
This study of Ethiopian commercial banks reveals that IT audit effectiveness, methodology, and quality significantly influence firm performance, highlighting the strategic importance of strengthening IT auditing practices despite limitations in generalizability due to the cross-sectional design and specific sample.
Original paper licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
In the modern world, banks are not just places to store money; they are complex machines running on digital code. Every transaction, from a simple transfer to a massive loan, happens on computer systems that must be secure, accurate, and fast. Because these systems hold so much value, banks need a way to check if they are working correctly. This is where the concept of an IT audit comes in. Think of an IT audit not as a police inspection, but as a deep health checkup for a bank's digital nervous system. Auditors examine the technology to ensure it is safe from hackers, that the data is correct, and that the bank is following the rules. Two big ideas help explain why this matters. First, there is the idea that people in charge of a bank might make decisions that help themselves rather than the people who own the bank or have money there. An independent audit acts like a neutral referee to make sure everyone plays fair. Second, there is the idea that a bank's success depends on how well it uses its unique resources, like its skilled workers and its technology. If a bank can turn its technology and its people into a smooth, reliable system, it should perform better than its competitors.
A team of researchers from Addis Ababa University decided to investigate how these digital health checks actually work in the real world, specifically within the commercial banks of Ethiopia. They wanted to know what makes an IT audit successful and whether having a good audit process actually helps a bank perform better financially. To find the answers, they looked at the five largest private banks in the country. They did not just guess; they asked 122 professionals who work in these banks—people like IT experts, security specialists, and audit managers—about their daily work. These experts had at least two years of experience, and the researchers used their answers to build a clear picture of how IT auditing functions in this specific environment.
The researchers tested four main ideas to see what drives a good IT audit. They looked at whether having highly certified and skilled auditors mattered most. They also checked if the quality of the audit work, the specific methods used to do the work, and how effective the final results were played a bigger role. What they found was surprising to some. They discovered that simply having experts with certificates and advanced degrees was not the main factor that made the audits work well. In fact, the data showed that the level of expertise alone did not have a strong, direct link to how well the auditing practices were carried out. It is not enough to just hire smart people; the paper suggests that their skills must be used in the right way.
Instead, the study found that three other factors were the true engines of success. The most important driver was the effectiveness of the audit itself. This means how well the audit actually identified problems, improved the systems, and provided useful information to the bank's leaders. The second most important factor was the methodology, or the specific step-by-step plan the auditors followed to do their work. The third factor was the overall quality of the audit, which includes how professional and thorough the process was. The researchers found that when banks focused on making their audits effective, using strong methods and high standards, the auditing practice itself improved significantly.
The final and perhaps most important discovery was the link between these improved auditing practices and the bank's overall success. The study showed a strong, positive connection between having a robust IT audit system and better financial performance. When a bank's IT audits were effective and well-structured, the bank itself tended to do better. This suggests that IT auditing is not just a boring rule to follow or a cost to be managed. Instead, it acts as a strategic tool that helps the bank run more smoothly, manage risks, and ultimately make more money. The researchers concluded that for Ethiopian banks to thrive, they need to stop viewing audits as a simple checklist and start treating them as a vital part of their strategy. They must ensure that the people doing the work are supported by strong processes and effective methods, because that is what turns a good audit into a tool for real business growth.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.