What are the relevant Standards that provide guidance to Internal Auditors
Many of us in the accounting profession are familiar with and required to comply with accounting standards developed, issued, and enforced by the American Institute of Certified Public Accountants (AICPA). Did you know the internal audit profession is also governed by standards established by The Institute of Internal Auditors (IIA)? The IIA’s International Standards for the Professional Practice of Internal Auditing (Standards) provide internal auditors with a roadmap for planning and performing the internal audit function for their organization. They also provide the Board of Directors and Audit Committee with a method to evaluate the internal audit function. Show The Standards include two categories: Attribute and Performance standards. The Attribute standards relate to the characteristics of the organization and the persons performing the internal audit function. The Performance standards address the nature of internal auditing and the criteria to evaluate the performance of the internal audit function. The Standards and Code of Ethics, both set by the IIA, include the mandatory requirements of the International Professional Practices Framework. All IIA members and Certified Internal Auditors are required to conform to the Standards and Code of Ethics. Often an organization’s internal audit charter will define the internal audit standards to be followed, whether that be the IIA Standards or some other standards. Management, the Board of Directors, and the Audit Committee are responsible for ensuring the internal audit function does comply with the Standards, if they have been adopted or are required, even if the internal audit function is outsourced. Compliance With the StandardsSo why should you comply with the Standards? Just as the accounting standards provide CPAs with the requirements to comply with accounting rules and professional conduct, the IIA Standards provide internal auditors with the tools and expectations for conducting internal audits. Compliance with the Standards ensures that your internal audit function is effective, the quality of the function is consistent, and the internal audit function is providing value to your organization. When the Standards are not followed, risks may not be identified and therefore controls may not be put in place and tested. The internal audit function provides assurance to your Board of Directors, Audit Committee, and other stakeholders that risks are controlled and the controls are operating as intended. Complying with the Standards could lessen the risk of audit failure or using audit resources inefficiently. Overall the Standards provide the profession with credibility. Changes to the StandardsDid you know the Standards changed in 2017? The International Internal Audit Standards Board (IIASB) issued revised Standards effective January 1, 2017. The changes included two new standards relating to the Chief Audit Executive’s (CAE’s) role, alignment of the Standards to the Core Principles, and updates to existing standards relating to communications and reporting on the quality assurance and improvement program. The new standards relating to the CAE include the following:
The Standards were also updated to reflect language relating to two Core Principles. The IIA has established ten Core Principles, which are listed below:
These Core Principles should be in place in an effective internal audit department. The Core Principles relating to alignment with the strategies, objectives, and risks of the organization and insightful, proactive, and future-focused were added to the Standards. In addition, Standard 2060 – Reporting to Senior Management and the Board was updated to include specific information on what the CAE must provide to senior management and the Board in reports and communication. The information required to be provided includes:
Standard 1320 – Reporting on the Quality Assurance and Improvement Program (QAIP) has been enhanced to define the items the CAE must communicate regarding the results of the QAIP. The CAE must provide the scope and frequency of internal and external assessments, qualifications and independence of the individual(s) performing the assessment and any conflicts of interest, conclusions of the assessors, and corrective action plans. Quality AssuranceHow do you know your internal audit function is in compliance with the IIA Standards and provide assurance to your Board and Audit Committee regarding the level of compliance? Standard 1300 – Quality Assurance and Improvement Program requires the CAE to development and maintain a QAIP that covers all aspects of the internal audit function. As part of the QAIP requirements, both internal and external assessments must be performed. Internal assessments include ongoing monitoring and periodic self-assessments to evaluate compliance with the Standards. Ongoing monitoring addresses the activities of the internal audit function which would include planning and supervision, work practice standards, procedures for workpapers, review of workpapers and reports, and the process for identifying areas for improvement and how they will be addressed. A periodic self-assessment is a validation that ongoing monitoring is taking place and is effective. The self-assessment also provides an evaluation of the internal audit’s compliance with the Standards and the Code of Ethics. External assessments are required to be completed at least once every five years by an independent party from outside the organization. Conformance with the Standards is validated through the completion of an external assessment and provides the Board, Audit Committee, and other stakeholders with assurance the internal audit function is on the correct path. The IIA Standards provide the roadmap for internal auditors to follow. Internal and external assessments allow the Board of Directors and/or Audit Committee to be confident the roadmap has been followed. Where can you go if you have additional questions on internal audit standards or need an internal or external assessment completed? Wipfli offers internal audit consulting and quality assurance assessments for organizations of different types and sizes. Please contact us if you would like more information on the benefits of ensuring your internal audit function is on the correct path. WHO provides guidance and standards for internal auditing?Standards and Guidance - IPPF
A trustworthy, global, guidance-setting body, The IIA provides internal audit professionals worldwide with authoritative guidance organized in the IPPF as mandatory guidance and recommended guidance.
Are there standards for internal audit?The Standards on Internal Audit (SIAs) establish uniform evaluation criteria, methods, processes and practices. The Standards are pronouncements which form the basis for conducting all internal audit activity. These pronouncements are designed to help the internal auditor to discharge his responsibilities.
What are auditing guidelines standards?Auditing Standards constitute the criteria or yardstick against which the quality of the audit results are evaluated.” 4.3 Auditing standards are particularly important in cases where there is a matter of material importance and its interpretation is of a technical nature.
How many standards are there in internal audit?Till date 18 SIAs have been issued under the authority of the Council.
|