Abstract
The article is devoted to a thorough study of the transformation of internal control systems in the context of digitalization of business processes, with a focus on the retail sector. The article argues that traditional control models, such as COSO and IIA standards, are not flexible enough and are not efficient enough to respond to the challenges of the digital age, in particular when processing large amounts of transactional data. In addition, modern technologies make it possible to move from fragmented control to continuous monitoring of operations in real time. In response to these challenges, the authors propose a conceptual model for integrating data flow analytics, anomaly detection algorithms, and robotic process automation (RPA) technologies to form a proactive internal control system capable of providing continuous monitoring and automated response in real time. Special attention is paid to the description of the mechanisms of flow analytics: from pattern identification to violation detection using statistical methods, machine learning, neural networks (including autoencoders and recurrent architectures) and complex event processing (CEP) algorithms. It is substantiated that the use of RPA significantly increases control productivity, providing automation of typical tasks - from evidence collection and data reconciliation to transaction blocking and reporting. The model proposed by the authors provides a five-level structure: data sources, analytical core, event dispatching, bot response and management dashboard. This approach allows real-time scanning of events, automatic response to typical risks and involving a human only in complex or atypical situations. Practical examples given in the article demonstrate that the integration of flow analytics and RPA can become not only a tool for fraud detection, but also an effective means of supporting operational efficiency in retail. The results obtained have practical significance for both internal audit practitioners and developers of digital solutions in the field of control and analytics.
References
Leland A. Fundamentals of the COSO Framework: Building Blocks for Integrated Internal Controls. Audit Board. 2024, June 20. URL: https://auditboard.com/blog/coso-framework-fundamentals
PwC. Re-inventing Internal Controls in the Digital Age. 2019, April. 34 p. URL: https://www.pwc.com/sg/en/publications/assets/reinventing-internal-controls-in-the-digital-age-201904.pdf
Bone J. Why COSO's Internal Control Framework Can't Give You Confidence. ResearchGate. 2022, January. URL: https://www.researchgate.net/publication/358247648_Why_COSO's_Internal_Control_Framework_Can't_Give_You_Confidence DOI: https://doi.org/10.13140/RG.2.2.29562.57280
Global Internal Audit Standards. Published January 9, 2024. 120 p. URL: https://www.theiia.org/globalassets/site/standards/globalinternalauditstandards_2024january9.pdf
Internal Audit’s Digital Transformation Imperative: Advances Amid Crisis. Analysing the Impact of 2020 on Internal Audit Functions’ Implementation of Technology. Internal Audit Foundation and Audit Board. 2021. 16 p. URL: https://www.theiia.org/globalassets/documents/content/research/foundation/2021-1581-fnd--ias-dig-transf-imperative-report_auditboard_fnl.pdf
Chambers R., O'Reilly T. The New IIA Standards Are Raising the Bar for CAEs on Technology Strategies. Audit Board. August 1, 2024. URL: https://auditboard.com/blog/the-new-iia-standards-are-raising-the-bar-for-caes-on-technology-strategies/
Guttenplan A., Connor Y. The impact of the new Global Internal Audit Standards. Cohn Reznick. 04/25/2024. URL: https://www.cohnreznick.com/insights/impact-of-new-global-internal-audit-standards
Lu T., Wang L., Zhao X. Review of Anomaly Detection Algorithms for Data Streams. Applied Sciences. 2023. № 13(10). P. 6353. DOI: https://doi.org/10.3390/app13106353
Tan S. C., Ting K. M., Liu T. F. Fast Anomaly Detection for Streaming Data. Proceedings of the Twenty-Second International Joint Conference on Artificial Intelligence. 2025. P. 1511–1516. URL: https://www.jcai.org/Proceedings/11/Papers/254.pdf
Світельський І. Реальні витрати ручної обробки документів у бізнесі в Україні: аналіз та рішення. Innora. 12 May 2025. URL: https://www.innora.com.ua/blog/realni-vitrati-ruchnoyi-obrobki-dokumentiv-u-biznesi-v-ukrayini-analiz-ta-rishennya_1
Kush Tapas. The Rise of Robotic Process Automation (RPA) in Auditing. LinkedIn Pulse. 2025, April 2. URL: https://www.linkedin.com/pulse/rise-robotic-process-automation-rpa-auditing-ca-kush-tapas-qkpnf
Childs К., Abel T. Accelerating RPA Maturity: 3 Ways Consumer Products and Retail Companies Can Step Up Their Game. Protiviti. July 19, 2019. URL: https://blog.protiviti.com/2019/07/19/accelerating-rpa-maturity-3-ways-consumer-products-and-retail-companies-can-step-up-their-game/
Robotic process automation: A primer for internal audit professionals. PwC. 2017. 4 p. URL: https://www.pwc.com/us/en/risk-assurance/publications/assets/pwc-robotics-process-automation-a-primer-for-internal-audit-professionals-october-2017.pdf
Leland A. Fundamentals of the COSO Framework: Building Blocks for Integrated Internal Controls. Audit Board. 2024, June 20, available at: https://auditboard.com/blog/coso-framework-fundamentals
PwC. Re-inventing Internal Controls in the Digital Age. 2019, April. 34 p., available at: https://www.pwc.com/sg/en/publications/assets/reinventing-internal-controls-in-the-digital-age-201904.pdf
Bone J. Why COSO's Internal Control Framework Can't Give You Confidence. ResearchGate. 2022, January., available at: https://www.researchgate.net/publication/358247648_Why_COSO's_Internal_Control_Framework_Can't_Give_You_Confidence. DOI: https://doi.org/10.13140/RG.2.2.29562.57280
Global Internal Audit Standards. Published January 9, 2024. 120 p., available at: https://www.theiia.org/globalassets/site/standards/globalinternalauditstandards_2024january9.pdf
Internal Audit’s Digital Transformation Imperative: Advances Amid Crisis. Analysing the Impact of 2020 on Internal Audit Functions’ Implementation of Technology. Internal Audit Foundation and Audit Board. 2021. 16 p., available at: https://www.theiia.org/globalassets/documents/content/research/foundation/2021-1581-fnd--ias-dig-transf-imperative-report_auditboard_fnl.pdf
Chambers R. and O'Reilly T. The New IIA Standards Are Raising the Bar for CAEs on Technology Strategies. Audit Board. August 1, 2024, available at: https://auditboard.com/blog/the-new-iia-standards-are-raising-the-bar-for-caes-on-technology-strategies/
Guttenplan A. and Connor Y. The impact of the new Global Internal Audit Standards. Cohn Reznick. 04/25/2024, available at: https://www.cohnreznick.com/insights/impact-of-new-global-internal-audit-standards
Lu T., Wang L. and Zhao X. (2023). Review of Anomaly Detection Algorithms for Data Streams. Applied Sciences, № 13(10), p. 6353. DOI: https://doi.org/10.3390/app13106353
Tan, S. C. Ting, K. M. and Liu, T. F. (2025). Fast Anomaly Detection for Streaming Data. Proceedings of the Twenty-Second International Joint Conference on Artificial Intelligence, p. 1511–1516, available at: https://www.jcai.org/Proceedings/11/Papers/254.pdf
Svitelskyi I. Realni vytraty ruchnoi obrobky dokumentiv u biznesi v Ukraini: analiz ta rishennia. Innora. 12 May 2025, available at: https://www.innora.com.ua/blog/realni-vitrati-ruchnoyi-obrobki-dokumentiv-u-biznesi-v-ukrayini-analiz-ta-rishennya_1
Kush Tapas. The Rise of Robotic Process Automation (RPA) in Auditing. LinkedIn Pulse. 2025, April 2, available at: https://www.linkedin.com/pulse/rise-robotic-process-automation-rpa-auditing-ca-kush-tapas-qkpnf
Childs K. and Abel T. Accelerating RPA Maturity: 3 Ways Consumer Products and Retail Companies Can Step Up Their Game. Protiviti. July 19, 2019, available at: https://blog.protiviti.com/2019/07/19/accelerating-rpa-maturity-3-ways-consumer-products-and-retail-companies-can-step-up-their-game/
Robotic process automation: A primer for internal audit professionals. PwC. 2017. 4 p., available at: https://www.pwc.com/us/en/risk-assurance/publications/assets/pwc-robotics-process-automation-a-primer-for-internal-audit-professionals-october-2017.pdf