Module 6: Internal Audit Flashcards
What is internal auditing?
An independent, objective assurance and consulting activity designed to add value and improve the organisations operations.
It helps an organisation accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control and governance processes.
What are the key elements of the audit function? IM WISE
- Independent of the day to day operations of the business
- Measures and evaluates objectively
- Within the organisation
- Integral part of the framework of business controls
- A service to all levels of the organisation
- Looks at effectiveness and efficiency of operations
What are some of the internal audit functions (IAF) main objectives?
- To provide reasonable assurance to execute management and the board on the adequacy and effectiveness of risk management and control systems of the company
- To assist all members of an organisation to effectively discharge their responsibilities.
Do internal auditors need the same qualifications as external auditors?
Also explain the composition of internal auditors, who do they report to?
No internal auditors do not need the same qualifications as external auditors. However, there is internal audit qualifications available. Can also join the chartered institute of internal auditors.
The IAF should report to the audit committee, if there isn’t one then it is the CEO. It is also important that the auditor is independent of the various operational parts of the company.
Do all companies need to carry out internal audit?
No, there is no statutory requirement. Some require internal audit by statute or due to regulatory arrangements.
What does UK Corporate Governance Code recommend in relation to IAF?
- Where the company has an IAF, the audit committee should monitor and review the effectiveness of the company’s internal audit function
- Where an internal audit function does not exist, the audit committee should consider annually whether there is need for an IAF
What are the responsibilities and relationships of IAF to:
- Directors
- Shareholders
- Management
- The NEDs who sit on the audit committee have a duty to oversee the activities of their executive colleagues who operate the business on behalf of shareholders.
The IAF has responsibility to provide the directors objective assurance over the quality of control exercised by management. - IAF should also provide assurance regarding the effective operation and control of company to shareholders
- IAF provides management with an independent view on the quality of internal controls. Management gain assurance that systems are operating effectively.
In the interest of maintaining independence, it is important to recognise that it is the responsibility of directors to manage the overall risk management of organisation and to identify risks. What should role of internal audit be?
- To challenge the processes and controls established by management to identify and respond to risks
- Monitor progress to resolve issues and action points raised
- Assist the organisation in facilitating risk workshops and other such activities designed to increase awareness of risk and controls.
Types of audit?
- Financial audit - may conduct a financial audit prior statutory financial statement audit
- Systems audit - Review and evaluation of the systems by which an organisation regulates and controls its activities. Evaluate the design of controls and conclude on its effectiveness and efficiency.
- Management Audit - Evaluates and appraises the processes and policies of management of the organisation used to control the resources available for achieving its business requirements.
- Value for money audit - Common in the public sector. Takes various forms; Review of business activities to identify the scope for improved VFM, investigations of specific incidents where VFM was not secured, reviews of systems necessary to achieve VFM.
- Contract audit - Common in public sector. Involves review of high value and potentially high risk contracts.
- Operational audit - Systematic review and evaluation of an organisation, determining its effectiveness in pursuing its objectives. E.g. construction company compliance with health and safety
More types of internal audits?
- Post implementation review - An objective appraisal of the success or otherwise of a business initiative. Measures achievement against original objectives.
- Investigations - Undertake investigations in relation to fraud or operational losses, even breaches of security.
- Inspection and quality control - periodic examination of procedures applied and transactions to ensure their operation complies with laid down set of instructions
- Compliance audit - Adherence to particular laws, regulations, policies, government restrictions
- Follow-up audit - conducted after an internal or external audit report has been issued.
- Culture audit - Checks values and attitudes.
What are the aspects that contribute to an effective internal audit function? PARISS
- Process - There should be an internal audit programme or internal audit plan which is created by the internal audit manager and approved by the audit committee.
- Audit committee - The IAF should report to and be overseen, monitored and reviewed by audit committee.
- Resource and competence - Sufficient resources to effectively carry out internal audit. Audit team should be competent.
- Independence - Internal auditors should be independent of the operations they are examining.
- Status of internal audit - Should have appropriate standing within organisation and are taken seriously.
- Standards - Auditors must undertake their work with due professional care. International internal audit standards can be used.
How can an organisation help ensure independence in IAF?
- Having an internal audit function report directly to the audit committee
- Having the internal audit plan approved by the audit committee
- Having the audit committee appoint the internal audit manager
- Remunerating internal audit staff to support independence
- Ensuring internal audit staff are not involved in operational areas.
