Development of a Framework of Key Internal Control and Governance Principles for Robotic Process Automation (RPA)

Although robotic process automation (RPA) usage is growing rapidly in accounting, concerns are emerging regarding the internal controls and overall governance structure surrounding RPA. To help address these concerns, we use a design science research approach and work with a Fortune 500 company to develop an RPA governance framework. The framework consists of four governance areas and 14 control requirements, which help maximize the benefits and minimize the risks associated with the use of RPA. We validate that the framework is useful and generalizable to many organizations by presenting the framework to and subsequently interviewing and surveying 86 professionals at different organizations, including internal and external auditors, chief audit executives at several multinational corporations, academics, accounting and finance professionals, and other RPA stakeholders. Their feedback suggests the framework is successful in achieving its objectives.