Chapter 2 Flashcards
3 MANDATORY PROFESSIONAL PRACTICES FRAMEWORK GUIDANCE
- DEFINITION
- INTERNATIONAL STANDARDS
- CODE OF ETHICS
3 STRONGLY RECOMMENDED INTERNATIONAL PROFESSIONAL PRACTICES FRAMEWORK GUIDANCE
- POSITION PAPERS
- PRACTICE ADVISORIES
- PRACTICE GUIDANCE
WHAT IS THE ULTIMATE GOAL OF INTERNAL AUDIT PROFESSION AS A WHOLE
ADD VALUE TO THE ORG BY PROVIDING ASSURANCE AND CONSULTING SERVICES
HOW DO IA SERVICES PROVIDE VALUE
EVALUATION AND IMPROVEMENT OF THE EFFECTIVENESS OF THE ORGANIZATIONS RISK MANAGEMENT, CONTROL, AND GOVERNANCE PROCESSES
WHAT ARE THE TWO ASPECTS OF THE IIA CODE OF ETHICS
- PRINCIPLES
2. RULES OF CONDUCT
WHAT ARE THE FOUR IDEALS (PRINCIPLES) IN THE CODE OF ETHICS
- INTEGRITY
- OBJECTIVITY
- CONFIDENTIALITY
- COMPETENCY
4 RULES OF CONDUCT ASSOCIATED WITH THE IDEAL OF INTEGRITY
- PERFORM WORK WITH HONESTY, DILIGENCE, AND RESPONSIBILITY
- OBSERVE THE LAW AND MAKE DISCLOSURES EXPECTED BY THE LAW
- NOT KNOWINGLY BE A PART OF ILLEGAL ACTIVITY
- RESPECT AND CONTRIBUTE TO ETHICAL OBJECTIVES OF THE ORG
ESTABLISHES TRUST AND PROVIDES THE BASIS FOR RELIANCE ON INTERNAL AUDITOR’S JUDGEMENT
INTEGRITY
INTERNAL AUDITORS ARE NOT UNDULY INFLUENCED BY THIER OWN INTERESTS OR BY OTHERS IN FORMING JUDGEMENTS
FREEDOM FROM BIAS
OBJECTIVITY
4 RULES OF CONDUCT ASSOCIATED WITH THE IDEAL OF OBJECTIVITY
- SHALL NOT PARTICIPATE IN ACTIVITY THAT MAY CREATY BIAS
- SHALL NOT ACCEPT GIVE THAT MAY CAUSE COI
- DISCLOSE ALL MATERIAL FACTS KNOWN
DO NOT RELEASE INFORMATION RECEIVED WITHOUT PROPER AUTHORITY
CONFIDENTIALITY
2 RULES OF CONDUCT ASSOCIATED WITH THE IDEAL OF CONFIDENTIALITY
- PRUDENT IN THE USE AND PROTECTION OF INFORMATION RECEIVED
2. SHALL NOT USE INFORMATION FOR PERSONAL GAIN
INTERNAL AUDITORS APPLY KNOWLEDGE SILLS AND EXPERIENCE NEEDED TO PERFORM AUDIT ACTIVITIES
COMPETENCY
THE 3 RULS OF CONDUCT ASSOCIATED WITH THE IDEAL OF COMPETENCY
- ONLY ENGAGE INSERVICE IN WHICH THEY HAVE NECESSARY EXPERIENCE
- PERFORM AUDITS IN ACCORDANCE WITH INTERNATIONAL STANDARDS FODR THE PROFESSIONAL PRACTICE OF INTERNAL AUDIT
- CONTINUALLY IMPROVE PROFICIENCY AND EFFECTIVENESS
4 PURPOSES OF THE STANDARDS
- DELINEATE BASIC PRINCIPLES THAT REPRESENT THE PRACTICE OF INTERNAL AUDIT
- PROVIDE A FRAMEWORK FOR PROMOTING A BRAOD RANGE OF VALUE ADDED INTERNAL AUDITING
- ESTABLISH BASIS FOR THE EVALUATION OF INTERNAL AUDIT PERFORMANCE
- FOSTER IMPROVED ORGANIZATIONAL PROCESSES AND OPERATIONS
3 TYPES OF STANDARDS
- ATTRIBUTE STANDARDS
- PERFORMANCE STANDARDS
- IMPLEMENTATION STANDARDS
WHAT ARE INCLUDED IN THE ATTRIBUTE STANDARDS
1000 SEQUENCE
ADDRESS THE ATTRIBUTES OF ORGANIZATIONS AND INDIVIDUALS PERFORMING INTERNAL AUDITING
WHAT ARE INCLUDED IN THE PERFORMANCE STANDARDS
2000 SEQUENCE
DESCRIBES THE NATURE OF INTERNAL AUDIT AND PROVIDES CRITERIA FOR PERFORMANCE OF IA SERVICES
WHAT ARE THE IMPLEMENTATION STANDARDS
(3000 SEQUENCE)
“A” FOR ASSURANCE
“C” FOR CONSULTING
EXPAND UPON OTHER STANDARDS BY PROVIDING CRITERIA FOR PERFORMING AUDIT SERVICES (CONSULTING OR ASSURANCE)
OBJECTIVE EXAMINATION OF EVIDENCE FOR THE PURPOSE OF PROVIDING AN INDEPENDENT ASSESSMENT ON GOVERNANCE, RISK MANAGEMENT, AND CONTROL PROCESSES FOR THE ORGANIZATION
ASSURANCE SERVICES
ENGAGEMENT EXAMPLES: FINANCIAL, PERFORMANCE, COMPLIANCE, SYSTEM SECURITY, AND DUE DILIGENCE
WHO AGREES ON THE SCOPE OF A CONSULTING ENGAGEMENT?
THE CUSTOMER AND THE AUDITOR
INTENDED TO ADD VALUE AND IMPROVE AN ORGANIZATION’S GOVERNANCE, RISK MANAGEMENT, AND CONTROL PROCESSES WITHOUT THE INTERNAL AUDITOR ASSUMING MANAGEMENT RESPONSIBILITY
CONSULTING SERVICES
ENGAGEMENT EXAMPLES: COUNSEL, ADVICE, FACILITATION, AND TRAINING
3 STAKEHOLDERS OF ASSURANCE SERVICES
USER (CLIENT, MGMT)
INTERNAL AUDITOR
AUDITEE
2 STAKEHOLDERS OF CONSULTING SERVICES
INTERNAL AUDITOR
CUSTOMER (CLIENT)
WHICH IMPLEMENTATION STANDARDS ARE MORE STRINGENT AND NUMEROUS
ASSURANCE
4 MAIN SECTIONS OF ATTRIBUTE STANDARDS
1000 - PURPOSE, AUTHORITY AND RESPONSIBILITY
1100 - INDEPENDENCE AND OBJECTIVITY
1200 - PROFICIENCY AND DUE PROFESSIONAL CARE
1300 - QUALITY ASSURANCE AND IMPROVEMENT PROGRAM