Institutionalising Digital Audit Capability Framework in the Malaysian Public Sector: Technology Readiness, Digital Governance and Auditor Competency

Digital transformation is changing how governments process financial transactions, manage records, assess risk and demonstrate accountability. Public-sector internal audit functions are progressively replacing fragmented manual procedures with electronic working papers, data analytics, dashboards and audit management systems. However, technology implementation alone does not create an effective digital audit function because its value depends on reliable data, appropriate governance, competent auditors and organisational support. This qualitative study examines the development of digital audit capability in the Malaysian public-sector internal audit functions and proposes an integrated framework based on technology readiness, digital governance and auditor competency. The study draws on semi-structured interviews with senior public-sector internal audit representatives. Thematic analysis identifies system integration, data accessibility, trustworthy digital processes, multidisciplinary competency and management commitment as the main conditions supporting digital audit capability. The Malaysian context demonstrates a progressive but uneven transition among government internal audit departments towards audit management systems, online audit workflows and dashboard-based monitoring. The proposed framework positions digital auditing as an institutional capability-development process rather than a technology-acquisition exercise. The study contributes a context-sensitive framework that can guide government agencies in strengthening digital audit implementation, audit effectiveness and public accountability.

digital auditing, public sector, technology readiness, digital governance, auditor competency, Malaysia

1. Alles, M. G. (2015). Drivers of the use and facilitators and obstacles of the evolution of Big Data by the audit profession. Accounting Horizons, 29(2), 439–449. https://doi.org/10.2308/acch-51067 [Google Scholar] [Crossref]

2. Alles, M. G., Brennan, G., Kogan, A., & Vasarhelyi, M. A. (2006). Continuous monitoring of business process controls: A pilot implementation of a continuous auditing system at Siemens. International Journal of Accounting Information Systems, 7(2), 137–161. https://doi.org/10.1016/j.accinf.2005.10.004 [Google Scholar] [Crossref]

3. Almaqtari, F. A. (2024). The role of IT governance in the integration of AI in accounting and auditing operations. Economies, 12(8), 199. https://doi.org/10.3390/economies12080199 [Google Scholar] [Crossref]

4. Appelbaum, D., Kogan, A., & Vasarhelyi, M. A. (2017). Big Data and analytics in the modern audit engagement: Research needs. Auditing: A Journal of Practice & Theory, 36(4), 1–27. https://doi.org/10.2308/ajpt-51684 [Google Scholar] [Crossref]

5. Bowen, G. A. (2009). Document analysis as a qualitative research method. Qualitative Research Journal, 9(2), 27–40. https://doi.org/10.3316/QRJ0902027 [Google Scholar] [Crossref]

6. Braun, V., & Clarke, V. (2006). Using thematic analysis in psychology. Qualitative Research in Psychology, 3(2), 77–101. https://doi.org/10.1191/1478088706qp063oa [Google Scholar] [Crossref]

7. Braun, V., & Clarke, V. (2021). One size fits all? What counts as quality practice in (reflexive) thematic analysis? Qualitative Research in Psychology, 18(3), 328–352. https://doi.org/10.1080/14780887.2020.1769238 [Google Scholar] [Crossref]

8. Braun, V., & Clarke, V. (2022). Thematic analysis: A practical guide. SAGE. [Google Scholar] [Crossref]

9. Cao, M., Chychyla, R., & Stewart, T. (2015). Big Data analytics in financial statement audits. Accounting Horizons, 29(2), 423–429. https://doi.org/10.2308/acch-51068 [Google Scholar] [Crossref]

10. Creswell, J. W., & Poth, C. N. (2018). Qualitative inquiry and research design: Choosing among five approaches (4th ed.). SAGE Publications. [Google Scholar] [Crossref]

11. Earley, C. E. (2015). Data analytics in auditing: Opportunities and challenges. Business Horizons, 58(5), 493–500. https://doi.org/10.1016/j.bushor.2015.05.002 [Google Scholar] [Crossref]

12. Guest, G., Namey, E., & Chen, M. (2020). A simple method to assess and report thematic saturation in qualitative research. PloS One, 15(5), e0232076. https://doi.org/10.1371/journal.pone.0232076 [Google Scholar] [Crossref]

13. Hennink, M., & Kaiser, B. N. (2022). Sample sizes for saturation in qualitative research: A systematic review of empirical tests. Social Science & Medicine, 292, 114523. https://doi.org/10.1016/j.socscimed.2021.114523 [Google Scholar] [Crossref]

14. Institute of Internal Auditors. (2024). Global Internal Audit Standards. https://www.theiia.org/en/standards/2024-standards/global-internal-audit-standards/ [Google Scholar] [Crossref]

15. Institute of Internal Auditors. (2026a). Understanding data analytics for internal auditors. Global Practice Guide. [Google Scholar] [Crossref]

16. Institute of Internal Auditors. (2026b). Data analytics skills for internal auditors. Global Practice Guide. [Google Scholar] [Crossref]

17. Institute of Internal Auditors. (2026c). Auditing privacy and data protection risks. Global Practice Guide. [Google Scholar] [Crossref]

18. International Organization of Supreme Audit Institutions. (2019). ISSAI 100: Fundamental principles of public-sector auditing. INTOSAI. [Google Scholar] [Crossref]

19. Issa, H., Sun, T., & Vasarhelyi, M. A. (2016). Research ideas for artificial intelligence in auditing: The formalization of audit and workforce supplementation. Journal of Emerging Technologies in Accounting, 13(2), 1–20. https://doi.org/10.2308/jeta- 10511 [Google Scholar] [Crossref]

20. Kokina, J., & Davenport, T. H. (2017). The emergence of artificial intelligence: How automation is changing auditing. Journal of Emerging Technologies in Accounting, 14(1), 115–122. https://doi.org/10.2308/jeta-51730 [Google Scholar] [Crossref]

21. Kokina, J., Blanchette, S., Davenport, T. H., & Pachamanova, D. (2025). Challenges and opportunities for artificial intelligence in auditing: Evidence from the field. International Journal of Accounting Information Systems, 56, 100734. https://doi.org/10.1016/j.accinf.2025.100734 [Google Scholar] [Crossref]

22. Leocádio, D., Malheiro, L., & Reis, J. (2024). Artificial intelligence in auditing: A conceptual framework for auditing practices. Administrative Sciences, 14(10), 238. https://doi.org/10.3390/admsci14100238 [Google Scholar] [Crossref]

23. Lewis, A. C., Neiberline, C., & Steinhoff, J. C. (2014). DIGITAL AUDITING: Modernizing the Government Financial Statement Audit Approach. Journal of Government Financial Management, 63(1). [Google Scholar] [Crossref]

24. Li, Y., & Goel, S. (2025). Artificial intelligence auditability and auditor readiness for auditing artificial intelligence systems. International Journal of Accounting Information Systems, 56, 100739. https://doi.org/10.1016/j.accinf.2025.100739 [Google Scholar] [Crossref]

25. Lincoln, Y. S., & Guba, E. G. (1985). Naturalistic inquiry. SAGE Publications. [Google Scholar] [Crossref]

26. Manita, R., Elommal, N., Baudier, P., & Hikkerova, L. (2020). The digital transformation of external audit and its impact on corporate governance. Technological Forecasting and Social Change, 150, 119751. https://doi.org/10.1016/j.techfore.2019.119751 [Google Scholar] [Crossref]

27. Moffitt, K. C., Rozario, A. M., & Vasarhelyi, M. A. (2018). Robotic process automation for auditing. Journal of Emerging Technologies in Accounting, 15(1), 1–10. https://doi.org/10.2308/jeta-10589 [Google Scholar] [Crossref]

28. National Institute of Standards and Technology. (2024). The NIST Cybersecurity Framework (CSF) 2.0 (NIST CSWP 29). U.S. Department of Commerce. https://doi.org/10.6028/NIST.CSWP.29 [Google Scholar] [Crossref]

29. Organisation for Economic Co-operation and Development. (2019). The path to becoming a data-driven public sector. OECD Publishing. https://doi.org/10.1787/059814a7-en [Google Scholar] [Crossref]

30. Organisation for Economic Co-operation and Development. (2020). The OECD Digital Government Policy Framework: Six dimensions of a digital government. OECD Publishing. https://doi.org/10.1787/f64fed2a-en [Google Scholar] [Crossref]

31. Organisation for Economic Co-operation and Development. (2024). 2023 OECD Digital Government Index: Results and key findings (OECD Public Governance Policy Papers No. 44). OECD Publishing. https://doi.org/10.1787/1a89ed5e-en [Google Scholar] [Crossref]

32. Organisation for Economic Co-operation and Development. (2025). Government at a glance 2025. OECD Publishing. https://doi.org/10.1787/0efd0bcd-en [Google Scholar] [Crossref]

33. Patton, M. Q. (2015). Qualitative research & evaluation methods: Integrating theory and practice (4th ed.). SAGE Publications. [Google Scholar] [Crossref]

34. Rezaee, Z., Sharbatoghlie, A., Elam, R., & McMickle, P. L. (2002). Continuous auditing: Building automated auditing capability. Auditing: A Journal of Practice & Theory, 21(1), 147–163. https://doi.org/10.2308/aud.2002.21.1.147 [Google Scholar] [Crossref]

35. Richins, G., Stapleton, A., Stratopoulos, T. C., & Wong, C. (2017). Big Data analytics: Opportunity or threat for the accounting profession? Journal of Information Systems, 31(3), 63–79. https://doi.org/10.2308/isys-51805 [Google Scholar] [Crossref]

36. Salijeni, G., Samsonova-Taddei, A., & Turley, S. (2019). Big Data and changes in audit technology: Contemplating a research agenda. Accounting and Business Research, 49(1), 95–119. https://doi.org/10.1080/00014788.2018.1459458 [Google Scholar] [Crossref]

37. Vasarhelyi, M. A., Alles, M. G., Kuenkaikaew, S., & Littley, J. (2012). The acceptance and adoption of continuous auditing by internal auditors: A micro analysis. International Journal of Accounting Information Systems, 13(3), 267–281. https://doi.org/10.1016/j.accinf.2012.06.011 [Google Scholar] [Crossref]

• The Role of Value and Growth Stocks in Portfolio Returns: Insights From the Nigerian Stock Market
• The Impact of Environmental, Social, Governance (ESG) and Profitability on Firm Value Moderated by Firm Size
• Assessment of the Impact of Environmental Operating Costs on Return on Assets: Evidence from Listed Breweries in Nigeria
• Mobile Money and Digital Financial Services Ecosystem in Adamawa State
• A Quantitative Approach of Professional Skepticism and Fraud Detection among Malaysian Internal Auditors