Module 6 Flashcards

1
Q

What is internal auditing?

A

An independent, objective assurance and consulting activity designed to add value and improve an organisations operations

Helps accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve risk management, control and governance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Difference between internal and external audits?

A

Internal audits are reported within the organisation. Relates to management

External reports a publicly published and shared to shareholders

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the key elements of an internal audit function?

A
Independent 
Measures and evaluates
Within organisation
Integral part of controls 
Service to all levels
Effectiveness and efficiency 

IM WISE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the main objectives of the internal audit function?

A

To provide reasonable assurance to board on adequacy of risk management and control systems

To assist all members to effectively discharge their responsibilities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

The internal audit function should report to who?

A

The audit committee if there is one
CEO if not

Shoulder review scope of work
IAF has to be independent of operational parts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Internal auditors are not required to have what?

A

The same qualifications as external auditors
There are some available
CIIA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the general rule for the need for an internal audit?

A

No statutory requirement

Some entities are required under statute or due to regulatory arrangements e.g public sector

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What does the UK Corporate Governance code recommend about internal audit?

A

Where a company has an IAF the audit committee should monitor and review

Where one does not exist, the audit committee should consider annually whether there is a need for an IAF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Why choose to have an internal audit function?

A

To gain assurance that the management and control of the organisation is robust

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Responsibilities and relationships of internal audit to directors?

A

NEDs on audit committee have a duty to oversee activities of execs

IAF has a responsibility to provide the directors with objective assurance over that quality of controls exercised by management (by reporting to audit committee)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Responsibilities and relationship of internal audit to shareholders?

A

Provide shareholders with a degree of assurance regarding the effective operation and control of company

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Responsibilities and relationships of internal audit to management?

A

Provide with an independent view on the quality of internal control exercised by then

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Who has the responsibility of overall risk management?

A

The directors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the role of internal audit?

A

To challenge processes and controls and identity and respond to risks
Monitor progress to resolve issues
Assist in facilitating risk workshops designed to increase awareness

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the types of internal audit? 11

A
Financial
Systems 
Management 
Value for money 
Contract
Post implementation review
Investigations 
Inspection and quality control 
Compliance 
Follow up 
Culture
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is a financial audit?

A

Carried our prior to statutory f/s audit

17
Q

What is a systems audit?

A

Review and evaluation of the systems (manual and computer) by which an org regulates and controls activity

IAF would evaluate design and test operations

18
Q

What is a management audit?

A

Evaluates and appraises the process and policies of management to ensure functioning optimally

19
Q

What is a value for money audit?

A

More common in public sector

Audit review of
Key business systems to achieve VFM
Investigate specific incidents
Identify scope for improved VFM and savings

20
Q

What is a contact audit?

A

More common in public sector

Review activity involving high value and potentially high risk contracts

21
Q

What is an operational audit?

A

Systematic review and evaluation of an organisation to determine effectiveness and efficiency

22
Q

What is a post implementation review?

A

An objective appraisal of the success or otherwise of a business initiative

Improve quality of future decisions and learn from mistakes

23
Q

What are investigations?

A

Undertake investigation into internal or external fraud, operational losses, breaches of security or serious concerns

Due diligence of potential takeover targets

24
Q

What is inspection and quality control audit?

A

Continuous, periodic examination of procedures applied and transactions to ensure their operation complies with instructions

25
Q

What is a compliance audit?

A

Reviews adherence to laws and regs, policies, gov requirements and restrictions

26
Q

What is a follow-up audit?

A

Conducted after an internal or external audit report has been issued

Evaluate corrective action

27
Q

What is a culture audit?

A

Cultural considerations can be integrated into some audits or conduct stand alone examinations of cultural values and attitudes

28
Q

What contributes to the effectiveness of internal audit?

A
Process 
Audit committee
Resources and competence 
Independence 
Status of IA
Standards
29
Q

An organisation can help to ensure independence of IAF by?

A
  1. Having them report direct to audit committee
  2. Audit plan approved by committee
  3. Remuneration to support independence
  4. Not involved with operational areas