Proficiency and Due Professional Care Flashcards
Standard 1200 - Proficiency and Due Professional Care
Engagements must be performed with proficiency and due professional care.
Performing engagements with proficiency and due professional care is the responsibility
of every internal auditors
Internal auditors who have attained professional certifications need to
be aware of the continuing education requirements to keep their certifications current.
Due professional care requires
understanding the IPPF’s systematic and disciplined approach to internal auditing, which is supplemented by organization-specific policies and procedures established by the CAE.
The CAE is responsible for (Standards)
ensuring conformance with this standard by the internal audit activity as a whole.
As part of managing the internal audit activity, The CAE
establishes policies and procedures that enable internal auditors to perform engagements with proficiency and due professional care. This involves the CAE’s recruitment and training of internal auditors, as well as the proper planning, staffing, and supervising of engagements.
Secondment
Obtaining an individual from another function in the organization
Subcontracting
Obtaining an external individual for an engagement, e.g., a subject matter expert
Co-sourcing
A mix of internal staff and external outsourcing
Out-sourcing
1) Fully outsourced to an external service provider, or 2) Outsourced to a group internal audit function (considered as outsourced at the local level)
In-house auditing
Dedicated audit team: usually full time and from within the organization.
Standard 2030 Resource Management
The CAE must make that the resources of internal audit are sufficient, appropriate and are used effectively to achieve the objectives of internal audit plan.
Appropriate: refers to the mix of knowledge, skill and competencies needed to achieve the objectives of internal audit plan,
Specific skill exceptions (Fraud & IT)
Fraud: internal auditors must be able to evaluate fraud, but are not expected to have specialized expertise.
IT: internal auditors must know key risks, controls and CAAT’s (Computer Assisted Audit Tools), but are not expected to have specialized expertise.
The internal audit activity must have knowledge
(Assurance)
the internal audit activity must collectively have or acquire the knowledge, skills and competencies needed to perform its work.
Consulting (not have all the required competencies)
The CAE must decline the proposed consulting engagement or obtain assistance if the current internal audit team does not have all the required competencies to perform the engagement.
Shows due professional care
Performing internal audits which conform with the Standard. Not identifying a significant risk can be a major failure in an internal audit.
Continuing professional development may lead to additional professional competencies that could enhance internal audit work in specific areas. Opportunities to pursue professional development include participating in:
- Conferences
- Seminars
- Training programs
- Online courses and webinars
- Self-study programs
- Classroom courses
- Conducting research projects
- Volunteering with professional organizations
- Pursuing professional certifications, such as the CIA
The internal auditor is ultimately responsible for conforming with standard 1230. Internal auditors may want to reflect on:
- Their job requires
- Training policies
- Professional education requirements of their profession, organization, or industry
- Any certifications or areas of specialization
- Feedback from recent performance reviews
- Assessment results regarding conformance with the Mandatory Guidance of the IPPF
- Results of self-assessments
Implementation standard 1220.C1 (must exercise - consulting)
Internal auditors must exercise due professional care during a consulting engagement by considering the:
- Needs and expectations of clients, including the nature, timing, and communication of engagement results
- Relative complexity and extent of work needed to achieve the engagement’s objectives
- Cost of the consulting engagement and in relation to potential benefits