AUI3703 The Internal Audit Process: Specific Audit Assignments and reporting

AUI3703 The Internal Audit Process: Specific Audit Assignments and reporting Topic 1: International Standards for the Professional Practice of Internal Auditing (IPPF) Mandatory:  The Definition of Internal Auditing  The Code of Ethics  The International Standards for the Professional Practice of Internal Auditing Strongly recommended guidance:  Practice Advisories (Implementation Guidance)  Practice Guides (Supplemental Guidance, guidance on internal audit tools and techniques)  Position papers The Definition of Internal Auditing: Internal auditing is an independent, objective assurance and consulting activity designed to add value to and improve an organisation's operations. It helps an organisation to accomplish its objectives by bringing a systematic, disciplined approach, to evaluate and improve the effectiveness of risk management, control and governance processes. Assurance services Traditional auditing services at various levels such as compliance, investigating & testing, performance evaluation Assurance services involve the internal auditor's objective assessment of evidence to provide an independent opinion or conclusions regarding an entity, operation, function, process, system, or other subject matter. The nature and scope of the assurance engagement are determined by the internal auditor. There are generally three parties involved in assurance services: (1) the person or group directly involved with the entity, operation, function, process, system, or other subject matter – the process owner, (2) the person or group making the assessment – the internal auditor, and (3) the person or group using the assessment – the user. EXAMPLES: • The assessment that management's policies and procedures are adhered to. • Examining whether control procedures are mitigating the risks identified. Consulting services: Objective is to support management in achieving their objectives Consulting services are advisory in nature, and are generally performed at the specific request of an engagement client. The nature and scope of the consulting engagement are subject to agreement with the engagement client. Consulting services generally involve two parties: (1) the person or group offering the advice – the internal auditor, and (2) the person or group seeking and receiving the advice – the engagement client. When performing consulting services the internal auditor should maintain objectivity and not assume management responsibility. EXAMPLES:  Conducting control self-assessment training.  Providing advice to management on risk management, control and governance issues.  Assisting in developing and drafting policies.  Process development  Training  Provision of advice 1 AUI3703 The Internal Audit Process: Specific Audit Assignments and reporting Principles – Code Of Ethics Internal auditors are expected to apply and uphold the following four principles: 1. Integrity The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment. 2. Objectivity Internal auditors exhibit the highest level of professional objectivity in gathering, evaluating, and communicating information about the activity or process being examined. Internal auditors make a balanced assessment of all the relevant circumstances and are not unduly influenced by their own interests or by others in forming judgments. 3. Confidentiality Internal auditors respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so. 4. Competency Internal auditors apply the knowledge, skills, and experience needed in the performance of internal audit services. Rules of Conduct – Code of ethics 1. Integrity Internal auditors: 1.1. Shall perform their work with honesty, diligence, and responsibility. 1.2. Shall observe the law and make disclosures expected by the law and the profession. 1.3. Shall not knowingly be a party to any illegal activity, or engage in acts that are discreditable to the profession of internal auditing or to the organisation. 1.4. Shall respect and contribute to the legitimate and ethical objectives of the organisation. 2. Objectivity Internal auditors: 2.1. Shall not participate in any activity or relationship that may impair or be presumed to impair their unbiased assessment. This participation includes those activities or relationships that may be in conflict with the interests of the o