Internal Audit On Ethio Telecom
Internal Audit On Ethio Telecom
Advisor: Abdurahman A.
OCTOBER, 2022
DIRE DAWA, ETHIOPIA
DECLARATION
Declaration by candidate:
This research paper is my original work and has not been presented for a degree in any other
University
Declaration by supervisor:
I confirm that the work in this research paper was done by the candidate under my/our
supervision
TABLE OF CONTENT
I
ACKNOWLEDGEMENT.......................................................................................................I
TABLE OF CONTENT..........................................................................................................II
LIST OF TABLES.................................................................................................................IV
ACRONYMS...........................................................................................................................V
ABSTRACT............................................................................................................................VI
CHAPTER ONE.......................................................................................................................1
INTRODUCTION....................................................................................................................1
1.1 Background of the Study......................................................................................................1
1.2 Statement of the Problem.....................................................................................................3
1.3 Research Questions..............................................................................................................4
1.4 Objective of the Study..........................................................................................................4
1.4.1 General Objective..........................................................................................................4
1.4.2 Specific Objective..........................................................................................................4
1.5 Scope of the Study...............................................................................................................4
1.6 Limitation of the Study........................................................................................................4
1.7 Significance of the Study.....................................................................................................4
1.8 Organization of the Study....................................................................................................5
CHAPTER TWO.....................................................................................................................6
REVIEW OF RELATED LITERATURE.............................................................................6
2.1 Theoretical Review..............................................................................................................6
2.1.2 Overview of Internal Auditing......................................................................................6
2.1.2 The History and Evolution of Internal Auditing...........................................................7
2.1.3 Establishment and History of Internal Audit in Ethiopia..............................................8
2.1.4 The Roles of Internal Auditors......................................................................................9
2.1.5 Types of Audits Performed by Internal Auditors........................................................12
2.2 Assessing Internal Audit....................................................................................................14
2.2.1 The Internal Audit Quality..........................................................................................14
2.2.2 The Internal Audit Charter..........................................................................................14
2.2.3 The Management Support...........................................................................................15
2.2.4 The Resource availability............................................................................................16
2.3 Empirical Reviews.............................................................................................................16
2.4 Summary............................................................................................................................20
CHAPTER THREE...............................................................................................................21
II
3. RESEARCH METHODOLOGY.....................................................................................21
3.1 Research Design.................................................................................................................21
3.2 Research Approach............................................................................................................21
3.3 Data Source and Type........................................................................................................22
3.4 Data Collection Instrument................................................................................................22
3.5 Population of the Study......................................................................................................23
3.6 Method of Data Analysis and Presentation........................................................................23
3.7 Ethical Considerations........................................................................................................23
CHAPTER FOUR: RESEARCH FINDINGS AND DISCUSION....................................24
4.1 Introduction........................................................................................................................24
4.2 Demographic Characteristics of Respondents....................................................................24
4.3 Presentation of Findings.....................................................................................................25
4.3.1 Internal Audit Quality..................................................................................................25
4.3.3 Approved Audit Charter..............................................................................................27
4.3.4 Management Support...................................................................................................27
4.3.5 Availability of Resources............................................................................................29
CHAPTER FIVE: SUMMARY, CONCLUSIONS, AND RECOMMENDATIONS......31
5.1 Introduction........................................................................................................................31
5.2 Summary of the Study........................................................................................................31
5.3 Conclusion..........................................................................................................................32
5.4 Recommendations..............................................................................................................32
5.5 Suggestion for Future Research.........................................................................................33
REFERENCES.......................................................................................................................34
Appendix A: Questionnaires for IA Staffs...............................................................................41
Appendix B: Interview for IA Head and Management............................................................43
III
LIST OF TABLES
Table 1 Demographic Characteristics of respondents..............................................................25
Table 2 Descriptive statistics of Internal Audit Quality...........................................................27
Table 3 Descriptive statics of Approved Audit Charter...........................................................28
Table 4 Descriptive statics of Management Support...............................................................29
Table 5 Descriptive statics of Resource Availability...............................................................30
IV
ACRONYMS
CPA Certified Public Accountants
IA Internal Audit
V
ABSTRACT
Internal Audit has an important role in assisting a firm to achieve its objective when it is
implemented, operated, and managed effectively. Organizations that effectively implemented,
operated, and managed Internal Auditing were better able to identify their business risks and
system inefficiencies for the sake of taking corrective actions and improvement in the process.
The overall objective of the study is to assess the Internal Audit Procedures and Practices of
Ethio-telecom Dire Dawa Branch. The study adopted a descriptive research design and
covered the Internal Auditors of Ethio-telecom Dire Dawa Branch. The study adopted a
mixed research method by employing quantitative and qualitative research methods. The
quantitative research method was used through 15 self-administered questions. The
qualitative research method was used through the interview with the Internal Audit director
of Ethio-telecom Dire Dawa Branch and selected documents review. According to the results
of the study; the quality of Internal Audit is as per the International Audit Standards. Ethio-
telecom Dire Dawa Branch has an approved Internal Audit charter and it is reviewed
regularly as required. The researcher mainly recommended; the Ethio-telecom Dire Dawa
Branch management shall revise its organizational structure so that the Internal Audit
Department reports to the Board of Directors, the management of the Ethio-telecom Dire
Dawa Branch shall give serious attention to give adequate training to the internal audit staff,
for better audit coverage and better assurance of control, risk management and good
governance, the adequate number of staff shall be fulfilled for the Internal Audit department.
Key Words: - Internal Audit Procedures and Practices, Ethio-telecom Dire Dawa Branch
VI
CHAPTER ONE
INTRODUCTION
1.1 Background of the Study
Internal auditing is an impartial, independent assurance and consulting activity that adds
value and improves the operation of a company. It aids businesses in achieving their goals by
implementing a systematic, disciplined approach to assessing and improving the efficacy of
risk management, control, and governance processes. Internal auditing is a catalyst for
improving an organization's governance, risk management, and management control by
providing insight based on analyses and assessments of data and business processes. Internal
auditing adds value to governing bodies and senior management as an objective source of
independent advice with a commitment to integrity accountability (Institute of Internal
Auditors, 2015).
Internal auditors don't have any statutory responsibilities; hence they don't have a specific
role. According to Aguolu (2017), an internal auditor's responsibilities are defined by the
management that appointed him or by an audit committee if one exists. They are responsible
for reviewing the data and information provided to management for decision-making
purposes.
The internal auditor is not responsible for establishing an internal control system. This is still
management's responsibility. Internal auditors, on the other hand, are expected to make
significant contributions in the establishment of a competent system of internal control,
which, once established, becomes his job to assure its efficiency and effectiveness. The
control system used in every economy has a significant impact on its development and
growth. Controls are necessary to ensure that money; materials, machinery, time, resources,
and manpower management are all optimized. Many companies, especially banks, use these
controls to see how effective and efficient they are with their resources (Ahlawat & Lowe,
2016).
Internal auditing is one of the most popular controls used to reduce waste and lead programs
toward completion. Auditing has been around for a long time, dating back to ancient Egypt
and the middle Ages' big mercantile establishments. This demonstrates that internal auditing
cannot be overlooked or undervalued in today's economy, as it arose from the intricacies of
1
today's company atmosphere and transactions. Internal auditing was regarded as valuable
machinery in accomplishing a target judged accurate at a given moment in time by other
management of many significant company enterprises and government concerns.
The word 'audit' comes from the Latin word 'audire,' which means he listens. This is because
an estate domain's account was examined by having those who compiled it called out to those
in charge. With the expansion of trade and commerce, a more accurate system of recording
commercial activities became necessary. Auditing is a process in which business entities'
books of account and vouchers (including charities and trusts) are subjected to critical
examinations by professionally qualified and independent account (Auditors) on such a level
of detail that they can form an opinion as to their truth and fairness. Auditing serves as a
bridge over the credibility chasm generated by managerial separation (Corama, et al, 2016).
Generally, the history of internal auditing in Ethiopia dated back to the 1940s just about the
time the profession is also evolving in Europe and in the United States (Lemma, 2016). In
addition, the internal audit service is currently being considered as a good contributor to
corporate governance. Recently, in developing countries, there has been increased interest
and more emphasis is placed on the IAF (Internal Audit Function) as one tool to crisis
prevention and enhancing good governance system of the public sector (Zeleke, 2017).
Therefore, the study was focused on assessing the internal auditing procedure and practice in
case of Ethio-telecom Dire Dawa Branch.
2
1.2 Statement of the Problem
Nowadays, the internal audit profession is moving rapidly from the traditional transaction-
based approach to the new business-based (risk-based) approach. Also its culture is under a
continuous change and improvement. While the complexity of business activities becoming
more and more, its internal control systems should also be well strong and adequate to protect
the interests of the organization and its stakeholders.
The IIA provides internal audit professionals worldwide with authoritative guidance that
organized in the IPPF as mandatory guidance and recommended guidance. Conformance with
the principles set forth is required and essential for the professional practices of internal
auditing. Effective January 2017, The Internal Audit Standards Board (IIASB) has released
one of the mandatory guidance elements of IPPF, the revised standards of internal auditing.
These standards together with the code of ethics encompass all mandatory requirements of
the IPPF.
The following cases more elaborate the existing internal audit practices and the related
research gaps that detected from review of the related literatures regarding Ethiopian private
and government owned organizations, and that derived the researcher’s attention to dwell
much time and effort in the subject area.
The existing audit practices revealed that the internal audit practices did not comply with the
IPPF guidelines that promulgated by IIA (Tigabu, 2013). Most internal auditors undertake
their day to day internal audit activities traditionally and did not have profound knowledge of
the IPPF (Kedir, 2014).
Internal auditing was not practiced to the expectations of international standards by many
private and government organizations of Ethiopia (Tigabu, 2013; Teshay, 2016). Very few
researches have been done regarding assessing the practices of internal audit rather than
concentrating on the effectiveness of internal audit in Ethiopian organizations. Even though
there are some researches done on internal audit practice and audit effectiveness (Mihret &
Yismaw, 2007; Bethlehem, 2009; Mohammed, 2011; Shewamene, 2014; Tariku, 2015;
Weyneshet, 2017; Sisay, 2018), as to the knowledge of the researchers, it seems that no study
appears to have been made in Ethio-telecom in Dire Dawa branch that exclusively assess the
Internal Audit Practice. Hence, filling the knowledge gap, this study attempted to assess the
Internal Audit Practice and tries to suggest the possible solutions.
3
1.3 Research Questions
1. Does the Internal Audit maintain the required Audit quality?
2. Does the Approved Audit charter in the organization adequately prepared as per the
standard?
3. Does the management support the Internal Audit Department?
4. Does the management allocate adequate resources to the Internal Audit Department to
conduct audit activities in the organization?
4
by looking at the various described above, this study adds value to the existing Internal Audit
process that has been undertaken in Ethio Telecom in Dire Dawa. In addition, the study is a
valuable source document for future academics with an interest in the subject. Last but not
the least, the successful accomplishment of this research paper will be helped the researcher
to get BA degree in Accounting which is granted from Dire Dawa University. In addition, it
helps to get an experience.
CHAPTER TWO
REVIEW OF RELATED LITERATURE
This chapter presents an overview of the literature that relates to the topic under investigation
namely Internal Auditing Practices and Performance in Ethio Telecom Dire Dawa. This
5
chapter consists of overview of internal auditing, the history and evolution of internal
auditing, the roles of internal auditors, the roles of audit committee, development of the
Standards for the Professional Practice of Internal Auditing (SPPIA), agency theory and the
internal audit, literature sources which review internal auditing practices, elements of SPPIA
(2015), internal control system and performance of internal audit department.
Internal audit activities are performed in diverse legal and cultural environments; within
organizations that vary in purpose, size, and structures; and by persons within or outside the
organization (Sawyer, 2016). These differences may affect the practice of internal auditing in
each environment. However, compliance with the Standards is essential if the responsibilities
of internal auditors are to be met. Internal auditing dates from ancient times. The role of
auditors during that period was limited to providing validation services for governmental and
family units in order to prevent theft, fraud, and other malfeasance from the treasuries of the
ruler (Carmichael & Willingham, 2017).
For auditing purposes, two persons were employed to check the accounts: one was the
internal auditor and the other was the external auditor (Felios, 2016). The usual technique
6
utilized by the auditors was to listen to the oral reports given by the appointed officials
responsible for financial matters. That is why the term “auditor” is thought to have been
derived from this “hearing of accounts”. This practice continued until it was replaced by
paper as the means to evidence financial transactions.
Internal auditing is an important element to management since it provides audit services for
managers at all levels including the board of directors and audit committee (Rezaee &Lander,
2015). Internal auditor’s responsibilities are assuring the integrity of financial and operational
information and reports, organization is complying with laws, statutes, policies, procedures
and financial instruments and is operating efficiently and economically, the goals and
objectives of the company have been accomplished and resources have been provided with;
and also safeguarding the assets of the organization.
This means internal auditors’ responsibilities are now broader and more demanding. Based
on these responsibilities, it is not difficult to observe how the internal auditing practices can
improve the company’s corporate governance structure. In fact the revised definition of
internal auditing indicates that the scope of audit work includes evaluating and improving the
effectiveness of a company’s governance process since the new internal auditing concept
expects the internal audit to function efficiently, effectively and economically the
organizational activities and controls besides assisting management in high-level decision-
making (Internal Auditors, 2015). Brodie (2016) however commented that generally
management has been rather slow to recognize the full value and potential of internal audit
experience even though there has been a steady improvement in the professional standing of
internal auditors. Therefore, there is a need for continuous effort to enhance the
understanding of the role of internal auditing and the benefits it can bring to the organizations
and to society as a whole.
7
It was also during this period that internal auditors began to be more concerned with more
than a financial audit. Large organizations began to realise that the internal auditors can
perform a greater service than just looking for accounting errors. Thus, internal auditors
began to change to new concepts of auditing and focus upon improving operations rather than
just scouting for accounting errors. This new concept of auditing received management
acceptance because the recommendations made by internal auditors were more helpful than
those typically provided by external auditors; and, significantly, because findings remained
internal and were not made public (Setter, 2015)
Internal auditors adopted the term “operations” or “operational” auditing to describe their
new improved service. This term first came to the attention of internal auditors in an article
by Kent (2017). Basically, operational auditing uses an inductive approach in that it drew
from accounting documents recommendations for change that is it moved from the specific or
actual to the ideal. Internal auditors thus pioneered the concept of operational auditing.
However, during this same period a similar concept, called management auditing, was
developed in the literature of management.
Benedict’s (2017) followed Rose’s work and his system offers to evaluate management by
means of weighted factorial analysis. Both writings by Rose (2016) and Benedict (2017)
represent the earliest attempts to develop an interview type management audit. The
management audit was organised around the functions of management and followed a
deductive approach as opposed to the inductive approach of operational auditing. These two
similar but separate concepts were the forerunners of today’s movement toward the extension
of the scope of auditing.
These newly formed standards are similar to the standards of IIA. Currently, the government
has established different public enterprises by allocating a huge amount of capital. Due to this
significant money allocated to different corporations and other enterprises as capital, the
government needs efficient and effective financial management to function with
accountability and due diligence conforming to the specific rules and regulations and other
instruction appropriate to financial management. In this regard, developing the IA department
and supporting the staff so that they add value to their organization they belong to is one of
the best tools to ensure whether every organization meet their obligation as well as follow the
rules and regulations firmly at the time of doing their activities (Mihret & Yismaw, 2017)
Sawyer and Dittenhofer (2016) defined internal auditing as “a systematic, objective appraisal
of the diverse operations and controls within an organization to determine whether financial
and operating information is accurate and reliable, risks to the enterprise are identified and
minimized, external regulations and acceptable internal policies and procedures are followed,
satisfactory standards are met, resources are used efficiently and economically, and
organization’s objectives are effectively achieved”.
“The objective of internal auditing is to assist all members of management in the effective
discharge of their responsibilities by furnishing them with analyses, appraisals,
recommendations and pertinent comments concerning the activities reviewed. The internal
9
auditor is concerned with any phase of business activity where he can be of service to
management. This involves going beyond accounting and financial records to obtain a full
understanding of the operations under review”.
With reference to these objectives, Sawyer (2016) noted four benefits managers have gained
from internal auditing assistance. These benefits were providing managers with the bases for
judgement and action, helping managers by reporting weaknesses in control and performance
and in recommending improvements, providing counsel to managers and boards of directors
on the solutions of business problems, and supplying information that is timely, reliable and
useful to all levels of management.
Additionally, the Statement sets forth the types of services that should be performed and the
kinds of activities carried on by the internal audit function in attaining the overall objective.
Internal auditors should first review and appraise the soundness and adequacy of the
accounting, financial, other operating controls, and promote effective controls at reasonable
cost. Secondly, the internal auditors should ascertain the extent of compliance with
established policies, plans, procedures, laws and regulations, which could have a significant
impact on the company’s’ operations. Then the internal auditors review the means of
safeguarding assets and when appropriate, verify the existence of such assets and appraise the
economy and efficiency with which resources are employed. Lastly, the internal auditors
review operations or programs to ascertain whether results are consistent with established
objectives and goals and whether the operations or programs are being carried out as planned
(Engle, 2016).
10
to a tolerable level. The role of internal auditing in the review of effectiveness of the system
of internal control is to ascertain whether the system is functioning as intended Effective
control is present when the administrative management directs the system in such a way as to
provide reasonable assurance that the organisation’s objectives and goals will be achieved.
The purpose of the review for quality of performance is to ascertain whether the
organisation’s objectives and goals have been achieved.
A second type of audit work that internal auditors are guided to perform is reviewing the
accuracy and reliability of financial and operating information and the means used to identify,
measure, classify and report such information. Information systems provide data for decision-
making, control, and compliance with external requirement. Therefore, internal auditors
should examine information systems and determine whether financial and operating records
and reports contain accurate, reliable, timely, complete and useful information, and controls
over record keeping and reporting are adequate and effective. The performance of reviews of
the systems established to ensure compliance with policies, plans, procedures, laws,
regulations and contracts represents a third elements of audit activity described by the
Standards. Administrative management is responsible for establishing the systems designed
to ensure compliance with such requirements as laws, rules, regulations, policies and
procedures. The internal auditor’s role is to determine whether the systems designed by
management are adequate and effective and whether the activities audited are complying with
the appropriate requirements. (Bigg and daves, 2016)
Further, as described by the Standards, the internal auditor’s role includes providing
appraisals with recommendations regarding administration management established
objectives and goals for operations and programs. (Settler, 2017).
11
Acting as a monitoring agent, the internal auditor is expected to perform two interrelated
functions, auditing and consulting. These are performed to maintain reliability of financial
statements, prevent occurrence of irregularities and enhance effectiveness and efficiency of
operations (Neuman, 2015). Thus, the demand for internal auditing is presumed to arise due
to an accountability relationship between two (or more) parties (e.g. top management vs.
board member) (DeAngelo, 2016; Evans, 2015).
D. Follow up Audit-these are audits conducted approximately six months after an internal or
external audit report has been issued. They are designed to evaluate corrective action that has
been taken on the audit issues reported in the original report. The purpose of a follow-up
audit is to revisit a past audit’s recommendations and management’s action plans to
12
determine if corrective actions were taken and are working, or if situations have changed to
warrant different actions.
G. Management Audit- Also called the performance audit, are internal consulting projects.
Because an internal audit is an activity independent of management, it is often an excellent
resource to provide independent and objective insight on the efficiency of business processes.
Management can request internal auditors to review a business process, organization, or
strategy; and the auditors do not have to worry about backlash from management. A common
management audit is a review of organizational structure, such as having an internal audit
look at how administrative work is divided among divisions and if there are opportunities to
be more efficient.
Other types of internal audits would include the integrated audit, which is a combination of
the IT Audit and the Operational Audit.
13
important not only for compliance with legal requirements but because the scope of an
auditor’s duties could involve the evaluation of areas in which a high level of judgment is
involved. Greater quality of IA work understood in terms of compliance with formal
standards, as well as a high level of efficiency in the audit’s planning and execution will
improve the audit’s effectiveness.
Internal Audit quality is a function of the level of staff expertise, the scope of services
provided, and the extent to which audits are properly planned, executed, and communicated
(Mihret & Yismaw, 2017).Adequate staffing is essential for a system to its full capability.
Weakness in staffing can lead to mismanagement, error, and abuse, which can refute the
effect of other controls (MOFED, 2017). The size of IA staff and the competency of internal
audit are the critical characteristics of IA quality that can’t be separated. This means at the
absence of one dimension the other cannot contribute to the quality of internal auditors. The
empirical findings by (Al-Twaijry et al., 2014), based on questionnaire and interview
responses from internal and external auditors, working in Saudi Arabia, suggest that the
external auditors believe that IAF size is an important indicator of its quality. In addition, the
large size of the IA staff has many benefits for the internal operations of the IA unit. For
instance, in larger-sized functional units, there will be more opportunity and flexibility to
have a staff rotation schedule that can also influence IA effectiveness by promoting a more
healthy relationship and resulting in more objective audit investigations.
14
important feature of insuring success in achieving the independent status of an Internal Audit.
Furthermore, according to (Van Peursem, 2005), the existence of audit charter in organization
influences senior management to flow the recommendations of the internal auditor
(Hailemariam, 2014).
15
its objectives (Arena & Azzone, 2009); (Mihret & Yismaw, 2018). Assessing the sufficiency
of resources should generally include comparisons with similar organizations, the business
risks, and the degree of change within the organization. According to the Institute of Internal
Audit, insufficiency of internal audit resources may be an indication for; management does
not respect the role and contribution of internal audit, management includes internal audit in
general under-funding to meet short term forecasts, management diverts internal audit
resources to meet short-term goals, operational crisis, and special projects. Lack of authority
for budget administration adversely influences the performance of the internal audit function
(Mihret & Yismaw, 2018). Hence the function needs to administer its own budget.
Besides (Mihret & Woldeyohannis, 2018) conducted a case study research in an Ethiopian
public sector. This study assessed the value-adding role of the Internal Audit Function in an
Ethiopian public sector. The value-adding role of the Internal Audit function is determined by
the perception of audits and internal auditors. They found that the traditional/ compliance
audit is dominant in the organization under study in contrast to value-added auditing. Internal
Audit Effectiveness, on the other hand, stands for the function's capability to achieve the
objectives of the function.
Similarly (Mihret et al., 2018) examines factors that are associated with the attribute of IAF.
He used analytical survey responses of 188 CIA and internal auditors from ministers, state-
owned enterprises, and private companies. He founds that in organizations where the role of
16
IA is clearly defined, high-risk profile and IA is highly linked with external audit has good
internal audit quality.
Kedir et al., (2014) in their article entitled Internal auditing standards and its practice the case
of East Arsi Zone, Ethiopia presented the result of their case study that evaluated the current
practices of internal auditing in the internal audit departments of selected public enterprises in
East Arsi Zone, Ethiopia as compared to major internal audit standards. The purpose of the
study was to investigate how major internal audit standards are applied in the internal audit
departments of selected public enterprises in East Arsi Zone of Ethiopia, taking competency,
compliance, Independency, Risk management, and quality assurance as major parameters of
the IIA standard for comparison. The result of the study showed that the scope of the Internal
Audit function in the enterprises surveyed did not yet go far from the traditional practices and
much time is devoted to performing financial and compliance audits. Regarding the quality
assurance program, none of the respective public enterprise’s audit departments have quality
assurance programs. Thus, the researcher concluded that the selected public enterprises
should be able to develop quality assurance programs.
17
universities audit departments have quality assurance program including the internal and
external quality assessment processes as required. Proper management commitment and other
organizational factors were critical factors influencing the effectiveness of IAF in the
respective universities. The research concluded that proper management commitment, lack of
capacity development programs for internal auditors, and other organizational factors were
critical factors influencing the effectiveness of IAF in the respective universities. To alleviate
those problems, it was recommended that management and the audit division of the
respective universities have to work jointly to improve the IAF of their respective universities
as per requirements of international standards (Bethlehem, 2017).
Tsegaye, (2018) conducted research on The Internal Audit practices in private commercial
banks of Ethiopia with a general objective of assessment of internal audit practice. The
research was focused on five private banks that were selected by using the purposive
sampling technique. The qualitative and quantitative data types were applied in the study.
And the data were collected by using questionnaires and document review. The result
revealed that, the current practices of Internal Audit in Private Commercial Banks of Ethiopia
through taking the Mandatory Guidance requirements of IPPF as a benchmark could be
summarized into three groups: components of standards that fairly complied, did not
adequately comply, and poorly (below the expectation) complied within the selected private
banks. The existing healthy conformance with certain mandatory Guidance requirements of
the IPPF should be kept up and goes to the sound conformance level by all elements. And
lastly, it was attached with poor/below the expectation/ conformance, the Quality Assurance,
and Improvements Program standard. The researcher recommended that the existing
inadequate conformance have to make improvements until it satisfies the needs of all
stakeholders; and, the Quality Assurance and Improvements Program (QAIP) standard;
should be carried out properly by all Private Commercial Banks of Ethiopia were the given
ways to curve all unsatisfactory conformances of the mandatory guidance requirements by
private commercial banks of Ethiopia.
18
promote the good image of the Internal Audit profession. The results of the survey showed
that the functional reporting lines in practice were not always organized according to the
theoretical assumptions, particularly in ETC (at Zonal and regional level) and Zequala steel
rolling Factory; internal audit has been seen as outside the management structure (outsider)
and board members are ministers who have several other responsibilities so that they do not
have sufficient time to deal with the oversight of the internal audit function; the Ethiopian
public enterprise's Internal Audit scope is more limited on the verification of financial
transaction (Financial audit), Compliance audit, assessments of internal control, and fraud
investigation. The researcher finalized his study by recommending corrective actions to
address the weaknesses identified. (Ali, 2011)has conducted research on Internal Audit and
risk assessment in Ethiopian public enterprises with a general objective of seeing internal
audit function’s contribution to risk assessment. This research paper examined internal
auditing and risk assessment in the Ethiopian public enterprise context using 20 purposefully
selected public enterprises. A mixed research approach is used and the data were collected by
using questionnaires and document review. Results of the survey showed that all public
enterprises have an Internal Audit function that performs; operational audit which requires
most resources and compliance audit as a second important audit type; the amount of audit
resources devoted to risk assessment reveals the relative relevance of each kind of activity.
Results of the research showed that many Ethiopian public enterprises had introduced a
formal risk assessment process in their internal audit function, and few enterprises were on
the way to introduce a formal risk assessment process. Hence, the research recommended that
internal audit functions that did not incorporate control risk self-assessment will be better off
by incorporating it as part of the scope of operation of their respective IAAs for effective risk
assessment. Thus, this study will be beneficial in terms of the decision making of the board of
directors, audit committee of the organization, and other regulatory bodies The researcher
critically reviewed and analysed different kinds of literature that are related to this research.
In order to present the assessment of Internal Audit Practice in the Insurance industries, that
literature easily understands the factors that assess the Internal Audit Practices, such as
Internal Audit Quality, Organizational setting, Approved Audit chartered, Management
support, and Resource availability are sequentially presented hereunder.
19
2.4 Summary
Researches were previously conducted regarding Internal Auditing related topics like
Effectiveness, Challenges, and Determinant factors at various Public sector and private
organizations in Ethiopia. From the above discussion, the majority of the previous studies
were concentrated on the Effectiveness of Internal Audit in various organizations in Ethiopia.
Prior literature regarding IA effectiveness was made through either quantitative or qualitative
methods (Mihret et al., 2017); ( AbuAzza ,2015). The study expects to expand the limitation
in the literature regarding the research method through the study in mixed-method research
(AbuAzza, 2014). There is a limitation of literature on the area of practice of IA in Ethiopia
especially in the case of Ethio-Telecom. So, the study contributes to the existing literature
regarding the practice of IA in the Ethio-Telecom, Dire Dawa Branch. There is a limitation
on research conducted concerning Internal Audit Practices. Some researchers advocated
further research and the need for a more comprehensive study on the issue of Internal Audit
Practice. As well, since to-date, no research has been done by paying a special attention to
assess the practices of Internal Audit in study area by taking additional factors and using
mixed research method. Therefore, this study attempted to fill the gaps by assessing the
practice of Internal Audit in Ethio-Telecom, Dire Dawa Branch.
20
CHAPTER THREE
3. RESEARCH METHODOLOGY
3.1 Research Design
Research design is usually a plan or blue print which specifies how data relating to a given
problem should be collected and analyzed. It provides the procedural outlines for the conduct
of any investigation. According to Kothari (2016), research design is the arrangement of
condition for collection and analysis of data in a manner that aims to combine relevance to
the research purpose with economy in procedures. In this study, a descriptive research
design was employed. Due to it is more convenient and its commonly applied method in
analyzing humanistic and social phenomena, the researcher will utilize the descriptive
analysis research methodology. Descriptive research is devoted to the gathering of
information about prevailing conditions or situations for the purpose of description and
interpretation. The advantage of this type of research design is that it is easy to understand.
Moreover, a descriptive type of research design will be used because it helps the researcher to
clarify and explain the existing phenomenon in a meaningful, justifiable and numerical
manner. Descriptive research also helps to describe and asses a certain issue in detail.
According to Kumar (2011) descriptive research attempts to describe systematically a
situation, problem, phenomenon, service or program, or provide information about, says the
living conditions of a community, or describes attitude towards an issue.
Qualitative approach attempts to get an in-depth opinion from participants. Apart from this, it
facilitates responses, and provides data in-depth with leading respondents (Dawson 2002). It
is capable to generate a theory by addressing issues which cannot be quantified. It also
explores issues which are not studied in the past properly (Creswell 2007). However, this
21
approach has been given less than a fair sense of appreciation. It has been criticized for lack
of scientific rigor, small samples, subjective and nonreplicable efforts.
The second approach, quantitative research, generates statistical data through the use of
survey research, using methods such as close-ended questionnaires and/or structured
interviews (Dawson 2002). Creswell (2009) noted that quantitative approach employs
strategies of inquiry such as experiments and surveys, and collect data on predetermined
instruments that yield numeric data that can be analyzed using statistical procedures. It
minimizes bias from the researcher’s influence. Hence, the results can be believed on
population. However, it is not capable to address issues which cannot be quantified.
Finally, mixed methods approach is the blend of both qualitative and quantitative approaches.
It employs strategies of inquiry that involves collecting data either simultaneously or
sequentially to best understand the research problem. The data collection involves gathering
both numeric information and text information (Creswell 2009). To sum up, in order to
achieve the research questions stated in the previous section, the researcher used both
qualitative and quantitative approach (mixed approach) in collecting and analyzing data as
discussed in the following section.
22
at the head office in the case organization. The response helps to understand the opinion of
Internal Auditors about the practice of internal audit in Ethio-telecom in Dire Dawa branch.
Document Review was adopted to gather information from documents held in the
organization concerning the practice of Internal Auditing. Document review is relevant to
enhance the quality of finding (Leedy & Ormrod, 2015).
23
CHAPTER FOUR: RESEARCH FINDINGS AND
DISCUSION
4.1 Introduction
This chapter consists of two major sections. The first section is descriptive statistics of
respondents’ demographic characteristics and the second section reports the investigation
results obtained from questionnaire and interview.
As shown in above table, it describes that 10 (66.70%) of the respondents are male while the
remaining 5 (33.30%) of the respondents are female. From this, the researcher inferred that
the majority of internal auditors worked in Ethio-Telecom, Dire Dawa Branch are male. Field
24
of Study, Out of the total 15 respondents, 12 (80%) of the internal audit staff are Accounting
graduates, 2 (13.30%) are Management graduates and 1 (6.70%) is an IT graduate.
The field of study of most of the Internal Audit staff is accounting. This shows that the scope
of IA activity in Ethio-Telecom, Dire Dawa Branch covers mainly financial and performance
auditing. To some extent, it also covers IT Auditing. The educational level of the 15
respondents as shown in the above table are 7 (46.70%) of them obtained Bachelor degree
and the remaining 8 (53.80%) of them obtained a post-graduate degree. From the result, the
researcher concluded that internal auditors in Ethio-Telecom, Dire Dawa Branch are at a
good level of education to perform their duties well.
Respondents’ work experiences in Ethio-Telecom, Dire Dawa Branch range from five years
and less up to above twenty years. From the data collected, 3 (20%) respondents have less
than five years of work experience, 2 (13.30%) have six to ten years of experience, 5
(33.33%) respondents have eleven to fifteen years of experience, 4 (26.70%) respondents
have sixteen to twenty years of experience and only 1 (6.70%) respondent has greater than
twenty years of experience. Based on the participants’ responses, they have good work
experience in Ethio-Telecom, Dire Dawa Branch and better knowledge about the entity’s
business environment.
The current position of the respondents in their organizations, internal auditors that are 6 in
number shared the leading percentage 40% and senior internal auditors/officers 5 in numbers
shared the next higher percentage 33.30%. Only 1 respondent that possessed 6.70 % share
was audit manager/ supervisor and the other share, 20% has possessed by 3 team leaders/
assistants. According to the analysis results, the greater part was possessed by internal
auditors.
In Ethio-Telecom, Dire Dawa Branch the overall mean score of Internal Audit Quality is
3.48; from this, the researcher can infer that the quality of internal audit is good. As we can
25
see in the below table, as per the responses collected from Internal Audit staff regarding the
audit quality through the questionnaire revealed that the mean results of each are above
3.00. This indicated that there exists a good internal audit quality within the Ethio-Telecom,
Dire Dawa Branch. With the further support of the senior management, the quality assurance
of the internal audit can be enhanced more than the current status.
The interview reveals that the Internal Audit staffs are composed of Management and
Information Technology graduates in addition to Accounting and Finance graduates. Both the
educational background and work experience of all Internal Audit teams are related to the
required qualification. As per the assessment made on the Internal Audit plan, program, audit
report, and other working papers, it has been learned that the Internal Audit Practice and
function is based on the International Internal Audit standard and procedural guidelines of the
organization. Besides, the activities carried out by the Internal Auditors in ensuring control,
risk assessment, and governance are in practice as required and they report to the
management. The Internal Audit guideline also indicates that the Internal Audit activities are
clearly stated in a manner that all Internal Audit staff can use to conduct their assignment and
also that can help the Audit Director to conduct the required supervisory function.
26
4.3.3 Approved Audit Charter
An approved internal audit charter is the other variable of this study and the finding of the
study revealed that the overall average means value of an approved internal Audit chart is
3.47 which are above the mid mean value a five-point Likert scale therefore, it can be implied
that the overall average response for presence of approved Internal Audit Charter was good.
All the questions under this category have got a mean score of 3.07, 3.53, 3.80, and 3.47
respectively.
Internal Audit Department has an approved Internal Audit Charter. It comprises of Definition
of Internal Audit, Purpose, Authority, and Responsibility. The nature of consulting service by
the Internal Audit is also defined in the Internal Audit Charter. The interview result reveals
that the Internal Audit Charter is reviewed regularly in the organization and it establishes the
Internal Audit activities position in Ethio-Telecom, Dire Dawa Branch.
27
records and information they need in conducting audits and senior management encourages
capacity building to the internal audit staff are greater than one it indicates that the
respondents perception are far away from one another.
As we can see in the below table, trust and values of management to the advice of Internal
Audit as well as access of Internal Audit to information and recordings have the mean value
of 3.33, 3.00 and 3.40 respectively are significantly higher. Also, the support of management
in considering internal audit as a key strategic partner means is 2.73, in understanding the
work of internal audit the mean value is 2.87 as well as in supporting the work of internal
audit means is 2.87 it is relatively good. From the respondent's response, the mean values are
less than three, the researcher has evaluated that the management support to the internal audit
about the commitment to strengthen mean value is 2.27, in encouraging capacity building and
in providing training to the internal audit staff mean values are 2.07 and 2.00 respectively. It
is weak. Hence, the management should work on the weak support areas to further enhance
the work of internal audit in Ethio-Telecom, Dire Dawa Branch.
28
The interview result reveals that audit assessment results are discussed with the management
and significant findings are reported accordingly. There is a low response to audit findings
and recommendations from the management side. From the document review, corrective
actions are mostly taken but few departments are not taking the required corrective action.
It has been understood that the senior management understands the work of Internal Audit but
there is lesser support in providing the required training and capacity building.
29
The interview result indicates that the Internal Audit department has put in its plan all the
required resource and presents to the management for approval. Through its budget hearing
committee, the management fairly approves the requested resources of the Internal Audit
such as per-diem and accommodation, fuel for field travel, stationeries, and printings. The
allocation of the approved budget to each assignment is based on the evaluation of the nature
and complexity of the assignment and the Internal Audit develops and documents resource
allocation for each audit assignment. The interview result in this regard shows that there is no
problem with the approval and utilization of the budget but the number of auditors in the
organization is not adequate.
30
CHAPTER FIVE: SUMMARY, CONCLUSIONS, AND
RECOMMENDATIONS
5.1 Introduction
This chapter deals with the summary of the study on the assessment of internal audit practices
and procedures in Ethio-Telecom, Dire Dawa Branch. Based on the major findings, some
summary and conclusions have been drawn and practical recommendations have been finally
forwarded.
A mixed research approach was employed to assess the practices and procedures of the
Internal Audit Department of the Ethio-Telecom, Dire Dawa Branch. That is, both
quantitative and qualitative data were collected at a time. Questionnaires and interview
questions developed by the researcher were used to collect data from the respondents. The
sources of the data for the study were 15 respondents from the Internal Audit Department
staff of the Ethio-Telecom, Dire Dawa Branch. Mean values and standard deviation were
used for data analysis.
To assess the quality of Internal Audit from the responses of Internal Audit staffs in the five
items Likert scale was provided to the respondents. Thus, the study showed that the overall
mean score of Internal Audit Quality is 3.48. This indicated that there is a good Internal Audit
quality in the Ethio-Telecom, Dire Dawa Branch.
31
On the other hand, the finding of the study revealed that the overall average means value of
an approved Internal Audit chart is 3.47 which imply that the presence of an approved
Internal Audit Charter is good in Ethio-Telecom, Dire Dawa Branch as it contains all the
requirements.
To measure management support to the Internal Audit in Ethio-Telecom, Dire Dawa Branch,
a five-point Likert scale was distributed to the Internal Audit staff. Accordingly, the overall
mean score of management support to the Internal Audit is 2.73. This describes that top
management supports the Internal Audit in the organization needs attention to further
enhance the efficiencies of Internal Audit.
To assess the allocation of resources in the Internal Audit Department, the study revealed that
the management fairly allocates the required resources during its annual budget approval.
However, the required number of Internal Audit Staff is not adequate as compared with the
audit coverage.
5.3 Conclusion
Based on the findings of the study, the following concluding remarks are drawn.
The practice of Internal Audit of Ethio-Telecom, Dire Dawa Branch is aligning with the
current level of professional development. The respondents’ of the study agreed with
practices undertaken by the professional Internal Auditors. The quality of Internal Audit is as
per the International Audit Standards. The findings have shown that Internal Audit
department of the Ethio-Telecom, Dire Dawa Branch has an approved Internal Audit charter
and it is reviewed regularly as required. In addition, it can be concluded that there is a lesser
support from the top management in providing training to the Internal Audit staff.
Furthermore, the study concluded that the Internal Audit department has adequate budget
allocation aligned with the planned audit activities regardless of the inadequate number of
internal audit staff. Finally from the study, it was concluded that most departments of the
organization are taking corrective actions within a reasonable period on audit findings except
in few departments where there are delays in taking corrective action.
5.4 Recommendations
The overall objective of this study is to assess the Internal Audit Practice and procedures in
Ethio-Telecom, Dire Dawa Branch. In this regard, the data analysis using quantitative and
32
qualitative methods was made. According to the research objective and based on the data
analysis, the researcher provides the following recommendations to the concerned bodies:-
Best practices as well as the IIA standard requires that the Internal Audit Head shall report to
the board of directors and shall attend a board meeting. This is from the viewpoint of
ensuring the independence to freely exercise their Internal Audit roles. Hence, the Ethio-
Telecom, Dire Dawa Branch management shall revise its organizational structure so that the
Internal Audit Department reports to the Board of Directors.
Adequate manpower following the audit assignments to be covered is equally important with
the available time and other resources. In Ethio-Telecom, Dire Dawa Branch, lesser attention
is given to the recruitment of the required number of internal audit staff. Therefore, for better
audit coverage and better assurance of control, risk management, and good governance, an
adequate number of Internal Auditors shall be fulfilled for the Internal Audit department.
33
REFERENCES
Abate, B. (2017). Assessment of Internal Audit Practice : a Study on Selected Ethiopian
Public Enterprise.
ABu-azza, W. O., Mihret, D. G., James, K., & Best, P. (2015). The perceived scope of
internal audit function in libyan public enterprises. Managerial Auditing Journal, 30.
Ahmad, N., R. Othman and K. Jusoff, 2017. The effectiveness of internal audit in Malaysian
public sector. Journal of Modern Accounting and Auditing, 5(9):784-790.
Ali, A., Gloeck, J., Ali, A., Ahmi, A., &Sahdan, M. (2017).Internal audit in the state and
local governments of Malaysia. Southern African Journal of Accountability and
Auditing Research, 7, 25–57
Ali, M. S. (2011). Internal Audit and risk assessement in Ethiopian public Enterprises.
Almalki, S., Centre, E. L., Arabia, S., & Centre, E. L. (2016). Integrating Quantitative and
Qualitative Data in Mixed Methods Research — Challenges and Benefits. 5(3), 288–
296.
Alzeban A, Gwilliam D. (2015). Factors affecting the internal audit effectiveness: A survey
of the Saudi public sector, J. Int. Account. Audit.Taxat. 23:74-86
Arena, M., & Azzone, G. (2009). of Internal Audit Effectiveness. 60, 43–60.
Arena, M., Azzone, G., (2016), “Internal Audit effectiveness: relevant drivers of auditees’
satisfaction”, International Journal of Auditing, 13, 43-60.
34
Arens Alvin A. and etal, 2017, Auditing an integrated approach, 5thedifion, prentice USA
Arens, A. A., Elder, R. J., Beasley, M. S., Hogan, C. E., Goldstein, A., & Bateman, J. (2012).
Auditing and Assurance Service. 1–27.
Asaolu, T. O., Adedokun, S. A., & Monday, J. U. (2016). Promoting Good Governance
through Internal Audit Function (IAF): The Nigerian Experience. International
Business Research, 9(5), 196.
Asrat, D., & Shiferaw, A. (2009). Law of Public Enterprises and Cooperatives.
Azzam, M. J., Alrabba, H. M., AlQudah, A. M., & Mansur, H. M. A. (2020). A study on the
relationship between internal and external audits on financial reporting quality.
Management Science Letters, 10(4), 937–942.
Beattie V., Fearnley S., and Brandt R (2017), “Perceptions of Auditor Independence: UK
Evidence”, Journal of International Accounting, Auditing & Taxation, 8, (1), 67-107.
35
Bisrat, N. (2019a). Assesement of Internal audit Practice in the case of Ethiopian Construction
Design and Supervision Works Corporation.
Chartered Institute of Internal Auditors. (2017). International Standards For thr Proffesional
Practice of Internal Auditing (Issue October 2016).
Cohen, A., & Sayag, G. (2010). The Effectiveness of Internal Auditing: An Empirical
Examination of its Determinants in Israeli Organisations. Australian Accounting
Review, 20(3), 296–307.
Daniel G. Braith waite, 2016, Comprehensive Auditing, New Approach for internal auditing,
Britain.
Dessalegn Getie, & Aderajew Wondim. (2007). Internal audit effectiveness: An Ethiopian
public sector case study. Managerial Auditing Journal, 22(5), 470–484.
Dies, D., and G.Giroux. (2015), “Determinates of audit quality in the public sector”, the
accounting review, July, 462-479.
Florea, R., & Florea, R. (2013). Internal Audit and Corporate Governance. 16(1), 79–83.
36
Greener, S. (2008). Business Research Methods. In Sue Greener and Ventus Publishing ApS.
Hailemariam, Sh. (2014). Determinants of Internal audit Effectivmess in the public sector case
study in selected Ethiopian Public sector.
Hawa, A. (2016a). Factors that Identify the Effectiveness of Internal Administration Finance
and Economic Development.
Hawa, A. (2016b). Factors that Identify the Effectiveness of Internal Audit in Oromia Special
Zone.
Hodkinson, P., & Hodkinson, H. (2001). The strengths and limitations of case study research.
Proceedings of the 5th Annual Conference of the Learning and Skills Research
Network, January, 1–14.
James k. Loebbecke, 2017, Auditing, an integrated approach, 7th edition, prentice hall Int’l,
USA.
Kedir, H., Seyom, A., & Gemeda, A. (2014). Internal auditing standards and its practice the
case of East Arsi Zone , Ethiopia. November 2014.
Leedy, P. D., & Ormrod, J. E. (2005). Practical Research Planning and Design.
Leedy, P. D., Ormrod, J. E., & Johnson, R. (2016). Pratical Research: Planning and Design.
1–20.
37
Mallin, C. (2011). Corporate Governance and Complexity Theory - By Marc Goergen,
Christine
Mallin, Eve Mitleton-Kelly, Ahmed Al-Hawamdeh, and Iris Hse-Yu Chiu. Corporate
Governance: An International Review, 19(6), 622–623.
Mebratu, A. A. (2015). Internal audit function and its challenges in public sector governance:
Empirical evidence from Amhara National Regional State , Ethiopia. In Journal of
Economics (Vol. 1, Issue 1).
Mihret, D. G., & Yismaw, A. W. (2007). Internal audit effectiveness : an Ethiopian public
sector case study.
Mihret, D. G., James, J. M. M. and K., & Mula, K. J. and J. M. (2010). Antecedents and
organisational performance implications of internal audit effectiveness: Some
propositions and research agenda. Pacific Accounting Review, 22(3), 224–252.
Mohamud, H. A. (2013). Internal Auditing Practices and Internal Control System in Somali
Remittance Firms. 4(4).
Sarens, G., & Beelde, I. De. (2006). Internal auditors‟ perception about their role in risk
management: A comparison between US and Belgian companies. Managerial
Auditing Journal, 21(1), 63–80.
38
Saunders, M., Lewis, P., & Thornhill, A. (2016). Research Methods for Buniess Students. In
Pearson.
Smet, D. De, Mention, A., & Tudor, C. R. P. H. (2011). Improving auditor effectiveness in
assessing KYC / AML practices Case study in a Luxembourgish context . 26(2), 182–
203.
Stake, R. (2010). Qualitative Research: Studying How Things Work. 25(2), 88–91.
Suleiman, N. (2017). Internal Audit and the Effectiveness and Efficiency of Operations in
Treasury, H. (2011). HM Treasury Annual Report and Accounts 2010-11 (Issue July).
Tsegaye, T. (2018). The Assesment of Internal Audit Practices in Private Commercial Banks
of Ethiopia : the Case of Selected Private Banks (Issue March).
Van Peursem, K. A. (2005). Conversations with internal auditors: The power of ambiguity.
Managerial Auditing Journal, 20(5), 489–512.
Welde, & Senbet, B. (2019). Assesment of Internal Audit Practices in Oromia Regional State:
The Case Of Selected Public Sectors.
Whitting ton and gany, 2015, principle of auditing, 11th edition, USA.
Wodajo, A. (2019). Factors Affecting Internal Audit Effectivness : The Case of Ethiopian
Insurance Companies.
39
Zainal, Z. (2016). The Case Study as a Research Method. June 2007.
40
Appendix A: Questionnaires for IA Staffs
Internal Audit Quality
ITEM SD DA N A SA
The annual audit plan is determined completely by
the Internal Audit department.
Auditing is conducted on areas that are very
significant to the organization.
Internal Audit designs quality assurance and
improvement program to enable an evaluation of
Internal Audit activities conformance with the
standard.
The Internal Audit assessments properly supervised
to ensure the quality and achievement of objectives.
The Internal Audit head communicates the result of
the quality assurance and improvement program to
the senior management and the board.
Management Support
ITEM SD DA N A SA
Top-level management trusts the advice of the internal
audit department.
Top-level management values the advice of the
internal audit department.
The internal audit department is considered a key
strategic partner throughout the organization.
Senior management understands the work of internal
audit.
Senior management fully supports the work of internal
audit.
Internal auditors have full access to records and
information they need in conducting audits.
There is a management commitment to strengthen the
Internal Audit department.
41
Senior management encourages capacity building to
the internal audit staff.
Senior management provides training to the internal
audit staff.
Resource Availability
ITEM SD DA N A SA
The internal Audit department has an adequate
budget aligned with the planned audit work.
The Internal Audit department is large enough to
successfully carry out its duties
The head of Internal Audit communicates the
Internal Audit resource requirement to the senior
management and board for review and approval.
The head of Internal Audit ensures the internal
audit recourses are adequate to accomplish the
approved plan.
Internal Audit develops and document resource
allocation for each audit assignment.
Internal Audit resource allocation to each
assignment is based on the evaluation of the
nature and complexity of the assignment.
42
Appendix B: Interview for IA Head and Management
1. What are your understanding of internal audit practice and internal audit function in your
organization?
Are the role and benefits of internal audit sufficiently understood in your
organization?
How are audit acceptance and cooperation with the internal audit in your
organization?
What do the competencies of internal audit look like in your organization in terms of
Educational background? Work experience?
2. What is the relationship of internal audit with the board of directors /audit committee?
Are there accounting/ finance experts on the board (audit committee)?
Is the Internal Audit head in a higher position in your organization and Management
Promise adds value to internal audit?
How is Audit acceptance and cooperation with Internal Audit in your corporation?
4. To what extent the top Management supports the Internal Audit Department?
Does the Internal Audit report audit findings to the audit committee freely?
Is there follow up whether an action taken on audit finding’s reported by the auditors?
5. Does the Internal Audit department have a sufficient budget and an adequate number of
auditors?
43