Consulting Firms Pivot to High-Growth Verticals
Major consulting firms, including the Big Four, are pivoting toward high-growth verticals as artificial intelligence transforms traditional client services. The shift is driving demand for specialized advisory offerings in areas like cybersecurity, ESG, and digital supply chain risk. For internal audit functions, this trend is increasing the use of co-sourcing with external specialists to fill knowledge gaps.
- The global supply chain risk management market is projected to grow from $5.12 billion in 2026 to $9.48 billion by 2031, with cybersecurity being the fastest-growing risk domain. This growth is partly driven by regulations like the European Union's Corporate Sustainability Due Diligence Directive, which makes multi-tier supplier mapping a board-level concern. - Escalating trade tensions in early 2025 led to the United States imposing tariff increases of up to 125% on Chinese goods, with the current effective tariff rate at 34%. In response, China's exports to the U.S. fell by $104 billion in 2025, a decline that was largely offset by increased exports to ASEAN countries. - The United States remains heavily dependent on foreign sources for the 50 minerals deemed critical for economic and national security, with China being the primary source for twenty-one of them. To counter this, the U.S. and private investors have launched a $1.8 billion initiative to expand access to and diversify the sourcing of these materials. - The SEC's climate disclosure rule, which would have required registrants to report on climate-related risks and greenhouse gas emissions, has been voluntarily stayed by the agency pending judicial review. This has created uncertainty, although companies doing business in California are already subject to its more stringent state-level climate disclosure laws. - In mid-2025, OSHA withdrew its proposal to add a Musculoskeletal Disorders (MSD) column to the OSHA 300 Log. However, employers are still required to record and report these injuries if they meet other existing criteria. The agency also expanded penalty relief for small employers, with businesses having up to 25 employees now eligible for a 70% penalty reduction. - The cybersecurity consulting market is expected to grow from $20.34 billion in 2026 to $48.33 billion by 2031. This surge is driven by the need to counter quantum-enabled threats and address expertise gaps that internal teams cannot fill. - While the ESG consulting market is projected to reach $36 billion, corporate ambition has cooled, with only 23% of companies aiming to exceed minimum ESG standards, a significant drop from 52% in 2022. The focus has shifted from ambitious goals to auditable outcomes and regulatory assurance. - Co-sourcing of internal audit functions is gaining traction as it allows companies to blend in-house teams with external specialists, providing access to expertise in areas like cybersecurity and data analytics without full outsourcing. This model offers flexibility to scale resources based on specific needs and emerging risks.
