ALL IN A DAY’S WORK

A LOOK AT THE VARIED RESPONSIBILITIES

OF INTERNAL AUDITORS
The Institute of Internal Auditors
Achieving Objectives
For the most part, companies are in business to make money. Schools,
charities, and other nonprofit organizations may have the goal of educating,
influencing behavior, or helping those less fortunate. And then there are
government organizations, which exist to protect and serve the citizens in
their jurisdiction.

Regardless of what drives them, private businesses, nonprofits, and

public-sector organizations all aim to achieve their specific organization’s
objectives with the greatest efficiency and effectiveness possible. To do
this, many organizations enlist the aid of governing bodies such as boards
of directors — an assembly of experienced business professionals who
represent the organization’s stakeholders — to provide oversight and
strategic direction.

For the board to steer the organization effectively, board members must
receive timely, accurate information about the organization’s many
strategic, operational, financial, and compliance risks as well as assurance
that the risks are being well managed.

Enter the internal auditors.

www.theiia.org
01
 What Is
Internal Auditing?
Internal auditing is an independent, objective
assurance and consulting activity designed to add
value and improve an organization’s operations.
At its simplest, internal auditing involves identifying the risks that could
keep an organization from achieving its goals, making sure the organi-
zation’s leaders know about these risks, and proactively recommending
improvements to help reduce the risks.

For internal auditing to be effective, the organization’s leaders must

be open to discussing tough issues and seizing opportunities to make
necessary changes for improvement. And the internal auditors must have
an independent reporting line to the highest governing body (e.g., the audit
committee of the board of directors), ensuring them the requisite authority
to access all areas of the organization and know that they will be supported
if and when their views differ from those of management.

“Internal audit functions

provide a number of
important services and
are often the catalyst for
improving organizational
governance and risk
management.”

– Leon Sheffield
IIA member since 2008

02 The Institute of Internal Auditors

Internal auditors’ independence and broad perspective of the organization
make them a valuable resource to executive management and the board
of directors. They ensure that the organization is held accountable to its
stakeholders, whether those stakeholders are investors (as in the case of
a publicly traded company) or the general public, served by a government
organization.

Ultimately, internal auditors add value to their organizations by providing

assurance, insight, and objectivity.

Internal auditors can save their organization substantial amounts of money

and protect its reputation in the marketplace by identifying operating
inefficiencies, wasteful spending, employee theft, fraud, and cases of
noncompliance with laws or regulations, for example.

They keep an eye on the corporate climate and perform a variety of

activities such as assessing risks, analyzing opportunities, suggesting
improvements, promoting ethics, ensuring accuracy of records and finan-
cial statements, educating senior management and the board on critical
issues, investigating fraud, detecting wasteful spending, raising red flags,
recommending stronger controls, monitoring compliance with rules and
regulations, and much more!

Seems like a lot to ask from one resource? Maybe for some, but for internal
auditors, it’s all in a day’s work.

INTERNAL AUDITING =
ASSURANCE, INSIGHT,
AND OBJECTIVITY
Governing bodies and senior management rely on internal
auditing for insight and objective assurance that existing
internal controls are adequate to mitigate the organization’s
risks, governance and risk management processes are
effective and efficient, and organizational goals and
strategic objectives are met.

www.theiia.org
03
 Who Are
Internal Auditors?
Internal auditors are explorers, analysts, problem-solvers, reporters, and
trusted advisors. They bring objectivity and a variety of skills and expertise
to the organization. They come from diverse areas such as finance, opera-
tions, IT, and engineering. Today’s internal audit professionals are revered
for their critical thinking and communication skills, as well as their general
IT and industry-specific business knowledge.

Still, people often confuse internal auditors with accountants or external

auditors (entities the organization engages to provide an annual review of
the financial statements). The differences are significant:

INTERNAL AUDITORS EXTERNAL AUDITORS

Typically employed by the organization (unless the Hired by the organization to provide a specific service
function is outsourced or co-sourced) though independent
of the activities they audit

Broad focus: More specific focus:

• Risk management • Accurate financial statements
• Corporate governance
• Organizational objectives
• Operational efficiency and effectiveness
• Compliance with laws and policies
• Accurate financial statements
• And more!

Diverse backgrounds & skill sets: Primarily accounting background & skills
• Communication skills
• Information technology
• Data mining & analytics
• Business & industry-specific knowledge
• Accounting skills

Backward-looking & forward-looking Backward-looking

04 The Institute of Internal Auditors

Internal auditors are, to a great extent, key to an organization’s success.
They review the organization’s processes, operations, and goals. They
provide objective, professional advice to all levels of management and
pave the path toward continuous improvement.

Competent internal auditors follow the profession’s internationally accepted

code of ethics and standards for professional practice. They identify the
The IIA sets the bar for
organization’s greatest risks and plan audit coverage accordingly. To
demonstrate their professionalism and competence, some internal audit internal audit integrity
practitioners choose to obtain professional certifications such as the and professionalism
globally recognized Certified Internal Auditor® or Certification in Risk around the world
Management Assurance™.
with its International
The most valuable and effective internal auditors stay abreast of business Professional Practices
trends, constantly cast their eyes to the horizon to scan for signs of trouble,
Framework (IPPF), a
and are able to anticipate future challenges and risks.
collection of guidance
that includes the Inter-
national Standards for
the Professional Practice
of Internal Auditing and
Code of Ethics.

www.theiia.org
05
 Internal Audit Responsibilities
Internal auditors have a Depending on the structure, maturity, and resources of the function,
internal auditors may perform some or all of the following tasks.
very important job to do
OFFER INSIGHT AND ADVICE – There are times when internal auditors’
— one with varied roles expertise, knowledge of controls, and broad perspective of the organization
and responsibilities. make them ideal candidates for consulting on a project to ensure that
risks are considered and controls are built into a process on the front-end
(e.g., mergers and acquisitions, new technology implementation).
The internal audit Internal auditors may offer insight regarding strategic risks and advice,
function itself can vary though management must maintain ultimate responsibility for the
processes in their area.
greatly depending on
the organization’s size EVALUATE RISKS – Risks are everywhere (natural disasters, loss of key
suppliers, reputation damage, inefficient operations, fraud, lawsuits, policy
and industry. Some violations, regulatory compliance, theft, etc.). It’s the internal auditor’s job
departments have hun- to assess the significance of the organization’s many risks and the effec-
tiveness of risk management efforts, communicate these to management
dreds of staff members and the board, and develop recommendations to improve risk management.
working around the
ASSESS CONTROLS – Internal auditors evaluate control efficiency and
globe. Others have just effectiveness and provide management and the board assurance that the
one or two internal controls in place are adequate to respond to the risks that threaten the
organization.
auditors. And some
ENSURE ACCURACY – Internal auditors ensure financial statement
organizations outsource
accuracy. They examine the reliability and integrity of financial and
or co-source the internal operational information.
audit function. IMPROVE OPERATIONS – With a solid understanding of the organization’s
objectives, internal auditors examine operations to determine whether they
are efficient and effective.

PROMOTE ETHICS – Professional internal auditors agree to abide by

a Code of Ethics that upholds the principles of integrity, objectivity,
confidentiality, and competency. They raise red flags when they discover
improper conduct.

06 The Institute of Internal Auditors

REVIEW PROCESSES AND PROCEDURES – Internal auditors review
operations closely and assess whether existing processes are well designed
to help the organization achieve its goals.

MONITOR COMPLIANCE – Internal auditors assess the organization’s

compliance with applicable laws, regulations, and contracts to ensure that
management is addressing these requirements adequately. They also offer
insight into the impact that noncompliance would have on an organization
and inform senior management and the board of noncompliance.

ASSURE SAFEGUARDS – The organization’s tangible property, human

resources, and intellectual property are valuable and must be guarded
against potential damage. Internal auditors evaluate the procedures used
to safeguard assets from theft, fire, illegal activities, or other types of loss.
They bring deficiencies to light and make recommendations for enhanced
protection.

INVESTIGATE FRAUD – Because fraud can affect any level of the

organization, it’s important that the board of directors grants the internal
audit function access to all records and authority to conduct audits and
investigate possible fraudulent behavior throughout the organization.

COMMUNICATE RESULTS – After auditing a particular area, internal

auditors report their findings and recommend appropriate courses of action.

www.theiia.org
07
 True Professionals
Internal auditors are well-disciplined in their craft, and they are committed
to growing and enhancing their skills through continuing professional
education. To fulfill all of their roles effectively, internal auditors must
be accomplished in anticipating emerging issues and creating solutions.
They must also have business acumen, critical thinking skills, and be
excellent communicators who listen attentively, speak effectively, and
write clearly.

Through their varied roles and responsibilities, internal auditors provide

the organization tremendous value. They serve as the eyes and ears
of senior management and the board. They are coaches, internal and
external stakeholder advocates, risk and control experts, efficiency
specialists, fact-checkers, and problem-solvers. They identify both risks
and opportunities, and they tell it like it is.

It’s certainly not easy, but for these skilled and competent professionals,
it’s all in a day’s work.

“Internal auditors
provide value to the
organization through
their firsthand knowl-
edge of people and
processes and the risks
associated with these.”

– Ofelia Tamayo, CIA

IIA member since 2006

08 The Institute of Internal Auditors

www.theiia.org
09
The Institute of
Internal Auditors
The IIA is a global professional association and standard-setting body for
internal auditors worldwide. Established in 1941, The IIA serves as the
world’s leader in professional certification, education, research, and
technical guidance for internal auditors.

The IIA is dedicated to providing extensive support and services to

its 180,000 members, so they can continue to add value across the
board. For additional information about the profession or The IIA, visit
www.globaliia.org or contact [email protected].

Global Headquarters
1035 Greenwood Blvd., Suite 401
Lake Mary, FL 32746-5402 USA
T +1-407-937-1111
F +1-407-937-1101
W www.theiia.org

© The Institute of Internal Auditors 10/2016-1328/LK/BT