Internal Auditing AUDB433
Special Semester, 2014-2015 2014-20 15
INTRODUCTION TO INTERNAL AUDITING Overview of Internal Auditing
Introduction Although the internal audit proession is ancient, man! people associate the "#irth$ o modern internal auditing %ith the esta#lishment o &he Institute o Internal Auditors 'IIA( in 1)41*
Changing Roles of Internal Auditing +er the last 0 !ears, the roles pla!ed #! internal auditors hae changed chang ed dramaticall!. Tradi aditio tional Role oles ===
Transit nsitiiona onal Roles les === ===
/nsu /nsuri ring ng accu accura rac! c! o the the /merg /mergence ence o operat operation ional al inancial records. auditing. IA %as merel! an • IA more ocu ocused on • etension o the controls %ithin the Accounts Department organiation IA assumed a • IA perormed • "management acco accoun untting ori orient ented consultant$ role tass ocused on chec checi ing ng accu accura rac! c! hece heced d compli complianc ancee %ith %ith relia#ilit! o compan! policies historicalpast procedures. perormance 'e*g*, • /aluated /aluated the eecti eectiee coun counti ting ng ine inent ntor orie ies, s, eicient use o eri eri! !in ing g pett pett! ! cash cash,, resources auditing pa!roll records, • Ine Inest stig igat ated ed rau raud d audit #! re-doing tass( othe otherr speci pecial al een eentts such as mergers IA acti acting ng as in-h in-hou ouse se • 6eie%er • o assist assistant antss assis assistin ting g the managem management ent proces processes ses eternal auditors 'pla!ing the role ole o "poli "police cema man$ n$ chec checin ing g on management(
Current Role oles === !!
IA seres the entire orga organi niat atio ion n 'IA 'IA %or %or is ocused on ensuring that the orga organi niat atio ion7 n7ss curr curren entt uture perormance helps it achiee its o#8ecties 9 see main tet#oo, page 1( Independent rom operating management* :artne :artners rs %ith %ith manage management ment 'IA acting as #usiness cons consul ulttant ants pro proid idiing a serice to the organiation(* :articipates %ith Improement &eams &as ;orce :rocesses* Uses &echnolog!*
&hese changing roles re
1
Internal Auditing AUDB433
Special Semester, 2014-2015
"olding #orces ircumstances eents orces %hich hae helped to uel increased demand or internal audit serices and helped shape internal auditing into %hat it is toda!. •
• • •
orporate scandals 'or e*g*, /nron, =orldom, and :armalat( %hich hae #rought a#out ne% la%s and regulations 'or e*g*, latest amendments to >ala!sian os Act 1)?5 and amended Bursa >ala!sia7s @isting 6e
&hese orces #ring a#out ne% and dierent t!pes o riss that can preent an organiation rom achieing its #usiness o#8ecties* &o help an organiation7s senior management and B+Ds understand and address these riss, internal auditors are increasingl! #eing called upon to help organiations strengthen their corporate goernance, ris management, and internal control processes*
Definition of Internal Auditing The Institute of Internal Auditors$ 'IIA% current deinition o internal auditing. Internal auditing is an independent, objective, assurance and consulting activity designed to add value and improve an organization’s operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve effectiveness of risk management, c ontrol, and governance processes.
@et7s loo at the e! components o the a#oe deinition in turn.
&el'ing the Organi(ation Acco)'lish its O*+ectives &he oerarching o#8ectie o the internal audit unction is to help an organiation achiee its #usiness o#8ecties*
An organiation eists or a num#er o purposes or #usiness o#8ecties, e*g*, mae proits, increase shareholder %ealth, add gro%th to staeholders7 alue, etc* Its success depends on the accomplishment o these o#8ecties* But eents taing place ma! preent a compan! rom achieing its o#8ecties* Understanding an organiation7s #usiness o#8ecties helps an internal auditor understand the riss o eents arising that can potentiall! "side-trac$ or hinder o#8ecties #eing met helps deine the internal auditor7s o%n audit engagement o#8ecties 'i*e* %hat it needs to do( in order to help the organiation accomplish its #usiness o#8ecties. ,-ee E.hi*it /0/1
2
Internal Auditing AUDB433
Special Semester, 2014-2015
Evaluating and I)'roving the Effectiveness of Ris2 "anage)ent3 Control3 and Governance 4rocesses
All 3 processes ocus on the achieement o the organiation7s o#8ecties* Governance process 9 the process conducted #! the B+D to authorie, direct, and oersee management to%ards achieement o the organiation7s o#8ecties* Risk management process 9 the process conducted #! management to understand and deal %ith uncertainties 'i*e* riss( that could aect the organiation7s a#ilit! to achiee its o#8ecties 'e*g* emplo!ee raud(* Control processes 9 the process conducted #! management to reduce riss to accepta#l! lo% leels to a leel accepta#le to the organiation 'ris appetite(* &he internal audit unction pla!s a prominent role in ealuating and improing these processes* Assurance and Consulting Activit5 Designed to Add 6alue and I)'rove O'erations 2 t!pes o serices internal auditors proide to add alue and improe operations.
ssurance services 9 an o#8ectie eamination o eidence or the purpose o proiding an independent assessment on ris management, control, or goernance processes or the organiation* EauditeeF EauditorF EuserF Consulting services 9 adisor! and related serices, the nature and scope o %hich are agreed to %ith the customer and %hich are intended to improe an organiation7s goernance, ris management, and control processes %ithout the internal auditor assuming management responsi#ilit!* EauditeeF EauditorF &he! dier in three respects. '1( purpose '2( %ho determines nature and scope o engagement, and '3( the parties inoled*
dding !alue 9 a %ell run internal audit unction adds alue in a num#er o %a!s, or eample. •
• • • •
It acts as a training ground or uture line managers, #! eposing ast trac mem#ers o the department to a ariet! o situations, actiities and unctions %ithin the organisation* It proides a "one stop shop$ or #est practice adice* It proides an independent, o#8ectie opinion as to the
3
Internal Auditing AUDB433
•
•
•
Special Semester, 2014-2015
It proides specialist proessional independent opinions on a ariet! o situationsG such as due diligence eercises* It reports on raudulent actiit! %ithin the organisation, %ith a ie% to understanding ho% it happened and ho% to preent it occurring again* It ensures that the compan! %ide initiaties, such as a code o conduct, are #eing adhered to*
Inde'endence and O*+ectivit5
Independence reers to the organiational status o the internal audit unction* Independence 9 the reedom rom conditions that threaten o#8ectiit! or the appearance o o#8ectiit!* Such threats to o#8ectiit! must #e managed at the indiidual auditor, engagement, unctional and organiational leels* ;or the internal audit unction to #e independent, the hie Audit /ecutie must report to a leel %ithin the organiation that has suicient authorit! to ena#le it to carr! out its unction properl! %ithout undue inluence rom other parties* &he IIA recommends that the A/ reports unctionall! to the B+D and %here it eists, to the audit committee, and administratiel! to the organiation7s chie eecutie oicer '/+( ':ractice Adisor! 1110-1, +rganiational Independence(* +#8ectiit! reers to the mental attitude o indiidual auditors* Individual objectivity 9 an impartial, un#iased mental attitude and aoidance o conlicts o interest, allo%ing internal auditors to perorm engagements in such a manner that the! hae an honest #elie in their %or product and that no signiicant
A -5ste)atic and Disci'lined A''roach
Speciicall!, this reers to the internal audit engagement process itsel. planning the engagement, perorming the engagement, and communicating engagement outcomes* :lanning the engagement inoles 9 o#taining an understanding o the auditee7s #usiness riss and o#8ecties, auditee7s personnel, resources, operations, etc*
4
Internal Auditing AUDB433
Special Semester, 2014-2015
:erorming the engagement inoles 9 application o speciic audit procedures, or e*g*, maing en
+perational audit :rogramme audit ;raud audit /thical #usiness practices audit ompliance audit Inormation technolog! audit ontrol sel-assessment audit ;inancial audit
';or eplanation o a#oe, see main tet#oo, pages 4-5(
Differences and -i)ilarities *etween Internal Auditing and E.ternal Auditing The Different O*+ectives &he starting place is to clearl! set out the dierent o#8ecties o internal and eternal audit* &he e.ternal auditor sees to test the underl!ing transactions that orm the #asis o the Hnancial statements* &he internal auditor , on the other hand, sees to adise management on %hether its ma8or operations hae sound s!stems o ris management and internal controls*
The "ain -i)ilarities Both the eternal and internal auditor carr! out testing routines and this ma! inole • eamining and anal!sing man! transactions* •
Both the internal auditor and the eternal auditor %ill #e %orried i procedures %ere er! poor andor there %as a #asic ignorance o the importance o adhering to them*
•
Both tend to #e deepl! inoled in inormation s!stems since this is a ma8or element o managerial control as %ell as #eing undamental to the Hnancial reporting process*
•
Both are #ased in a proessional discipline and operate to proessional standards*
•
Both see actie co-operation #et%een the t%o unctions*
5
Internal Auditing AUDB433
Special Semester, 2014-2015
•
Both are intimatel! tied up %ith the organiation7s s!stems o internal control*
•
Both are concerned %ith the occurrence and eect o errors and misstatement that aect the Hnal accounts*
•
Both produce ormal audit reports on their actiities*
The "ain Differences &he eternal auditor is an eternal contractor and not an emplo!ee o the organiation • as is the internal auditor* ote, ho%eer, that there is an increasing num#er o contracted-out internal audit unctions %here the internal audit serice is proided #! an eternal #od!* •
&he eternal auditor sees to proide an opinion on %hether the accounts sho% a true and air ie%, %hereas internal audit orms an opinion on the ade
•
/ternal audit is a legal re
•
Internal audit ma! #e charged %ith inestigating rauds and, although the eternal auditors %ill %ant to see them resoled, the! are mainl! concerned %ith those that materiall! aect the Hnal accounts*
•
Internal auditors coer all the organiation7s operations %hereas eternal auditors %or primaril! %ith those Hnancial s!stems that hae a #e aring on the Hnal accounts*
•
Internal audit ma! #e charged %ith deeloping alue-or-mone! initiaties that proide saings andor increased eHciencies %ithin the organiation*
•
&he internal auditor reie%s s!stems o internal control in contrast to the eternal auditor %ho considers %hether the state o controls %ill allo% a reduced amount o testing*
•
Internal audit %ors or and on #ehal o the organiation %hereas the eternal auditor is technicall! emplo!ed #! and %ors or a third part!, the shareholders*
•
&he internal audit coer is continuous throughout the !ear #ut the eternal audit tends to #e a !ear-end process een though some testing ma! #e carried out during the !ear*
'See also main tet#oo, pages 5-?(
?
Internal Auditing AUDB433
Special Semester, 2014-2015
Evolution of the Internal Auditing 4rofession
See article. "#he mericas literature revie$ on internal auditing%* &he purpose o this article is to sho% ho% the roles pla!ed #! the internal audit unction hae changed and ho% its scope has epanded in response to shits in glo#al #usiness practices*
Discussion 7uestions for Tutorial Class
1* Deine the ormal deinition o internal auditing* Using this deinition, %hat in !our opinion %ould #e the #eneits that might accrue rom resourcing such a sericeJ 2* Deine goernance, ris management, and control* 3* /plain the dierence #et%een internal assurance serices and internal consulting serices* 4* Deine independence and o#8ectiit! as the! pertain to internal auditors* 5* Ko% should the internal audit unction #e positioned %ithin the organiation so that it maintains its independenceJ ?* =hat roles that !ou carr! out in !our capacit! as the compan!7s internal auditor might compromise !our o#8ectiit!J * @ist the t!pes o procedures an internal auditor might use to test the design and operating eectieness o ris management, control, and goernance process* * =hat are the three undamental phases in the internal audit engagement planJ )* =hat is the association #et%een the client7s #usiness o#8ecties, riss, and controlsJ =hat is the internal auditor7s role in thisJ 10* Ko% does an internal audit unction add alue to the organiationJ 11* Discuss the dierences and similarities #et%een internal and eternal auditing* 12* Identi! some o the signiicant change actors that hae led to increasingl! more signiicant roles #eing carried out #! the internal audit unction oer the past 30 !ears*
Internal Auditing AUDB433
Special Semester, 2014-2015
13* &he changing roles re