Going through an Audit and risk assessments feels redundant. Leadership has allowed risk, compliance, and audit functions to become inefficient and disconnected from how the business actually operates. Internal audit lacks operational understanding, which results in unrealistic and burdensome requests. Risk, compliance, ERM, data governance, and model risk processes are outdated and heavily manual, relying on spreadsheets and Word documents well into 2026. There are a flurry of emails and meetings that don't improve anything. These approaches add unnecessary workload to business units and slow everything down. Risk teams attempting to dictate self risk assessments without understanding operations only worsens the issue. If it's a self assessment how do they get to dictate what I choose to rate it as and document. Employees are constantly pulled away from their core responsibilities to respond to audit, SOX, risk, vendor, compliance, and exam requests. I have to deal with IT System issues, projects, and vendor issues, I don't have time for all of the requests that I receive. There should be a team to handle these requests. Management refuses to properly staff or resource to support these functions, instead pushing the burden onto already stretched teams. The result is burnout, frustration, and declining effectiveness.