Ch.A, Topic 2: Define Purpose, Authority, and Responsibility of the Internal Audit Activity Flashcards
What can add significant value to an organization’s internal control, risk management, and governance process?
The objectivity, skills, and knowledge of competent internal auditors.
An effective internal audit activity can provide…
Assurance to other stakeholders such as regulators, employees, providers of finance, and shareholders.
The purpose, authority and responsibility of the internal audit activity MUST be understood for the internal audit activity:
to best support management and board of directors in accomplishing overall organizational goals and objectives and strengthen internal controls and corporate governance.
Purpose of Internal Audit Activity (5)
- Provide an independent, objective assurance and consulting activity.
- Add value and improve an organization’s operations.
- Support organizational objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control and governance process.
- Determine if organizational risk management, control, and governance processes are in place and functioning properly.
- communicate any opportunities for improvement or risk exposures to the appropriate management level.
Authority of the Internal Audit Activity (3)
- Provide appropriate UNFETTERED ACCESS to records, personnel, and physical properties.
- Maintain FULL AND OPEN ACCESS with the audit committee, board of directors, or other appropriate governing authority.
- Secure necessary internal and external RESOURCES to accomplish audit activity objectives as planned.
Responsibility of the Internal Audit Activity (1-2 of 5)
- Document the objectives & scope of engagement + the methodology to be used.
- Ensure that audit activity STAFF HAVE SUFFICIENT KNOWLEDGE, skills, experience and/or professional certifications to fulfill ENGAGEMENT CHARTER.
Responsibility of the Internal Audit Activity (3 - 5 of 5)
- COMMUNICATE results of the IA Activity or other matters that the CAE determines necessary to management, audit committee, the board, or other governing body.
- Consider coordination of external/internal audit work to increase economy, efficiency, and effectiveness of the overall audit process.
- Do NOT perform management activities!!!!