
Chartered IIA warns of heightened risk of collapse in broadband sector due to lack of internal audit
- Amid growing concerns about the financial health of some broadband providers — the Chartered Institute of Internal Auditors has written to Ofcom Chief Executive Dame Melanie Dawes, urging the regulator to introduce a clear expectation for broadband companies to have internal audit.
- New research has revealed that six of the UK’s thirteen major broadband providers — serving around two million customers — currently operate without internal audit.
- The Chartered IIA warns that without independent assurance on internal controls and risk management, these companies could be more vulnerable to collapse, as seen in the energy sector, where none of the 30 failed suppliers — including Bulb — had internal audit.
- In June, it was reported that one of these companies operating without internal audit, CityFibre, has entered talks about a rescue deal to avoid a cash crunch — raising questions about its financial controls and whether the board is receiving sufficient independent assurance around capital, liquidity, and cash flow risks.
The Chartered Institute of Internal Auditors (Chartered IIA) has issued a stark warning to the telecommunications regulator Ofcom, highlighting that the absence of internal audit functions across several major broadband companies could leave firms at heightened risk of collapse. In an open letter to Ofcom Chief Executive Dame Melanie Dawes, the Chartered IIA urges the regulator to introduce a clear expectation that broadband providers maintain internal audit functions to ensure robust governance, risk management, and internal controls.
The letter highlights six major broadband companies — Community Fibre, Hyperoptic, Utility Warehouse, YouFibre, Glide, and CityFibre — that currently operate without internal audit. These companies collectively serve around two million customers and, in some cases, build and maintain their own infrastructure networks. CityFibre, for example, is the UK’s third-largest ISP infrastructure provider, supporting major ISPs such as Vodafone, TalkTalk, and Zen Internet.
Anne Kiem OBE, Chief Executive of the Chartered IIA, said: “Broadband companies are now essential to daily life and the economy. Yet, nearly half of the UK’s major broadband providers are operating without internal audit. This is a serious audit and governance weakness. We’ve seen time and again the damage caused when companies collapse due to failures that might have been prevented with proper internal controls. We cannot afford to make the same mistakes with broadband companies.”
The Chartered IIA notes in its letter that there is currently no regulatory requirement or guidance from Ofcom that reflects the critical role of internal audit in ensuring effective governance, internal control, and risk management.
The letter draws comparisons with other regulators that have acted decisively. Ofgem now requires energy suppliers to report on their internal audit capability in its updated Financial Responsibility Principle Guidance, while the Prudential Regulation Authority and the Financial Conduct Authority mandate internal audit in financial services.
Meanwhile, only last month, Sir Jon Cunliffe, Chair of the Independent Water Commission, recommended the abolition of Ofwat, calling for stronger governance and oversight across the water sector. The Chartered IIA argues that Ofcom should now take urgent action to bolster governance and oversight for broadband companies, given their strategic importance to the UK’s digital economy.
The letter concludes: “Setting a clear regulatory expectation for broadband companies to have appropriate internal audit arrangements would strengthen independent oversight of how key risks are managed, improve organisational resilience, build investor confidence, and support the growth of the UK’s digital economy.”
--ENDS--
FOR MORE INFORMATION / FURTHER COMMENT CALL GAVIN HAYES ON +44 7900 195591
Notes to editors
Download the full letter to Ofcom
About the Chartered Institute of Internal Auditors
The Chartered IIA represents over 10,000 internal audit professionals in organisations spanning all sectors of the economy, across the UK and Ireland. It champions the contribution internal audit makes to good corporate governance, strong risk management and a rigorous control environment leading to the long-term success of organisations, including those in the public sector.