Chapter 2 Independence, Objectivity, Proficiency, Care, and Quality Flashcards
(49 cards)
Interpretation Standard 1100 stats that independence is defined as.
The freedom from conditions that threaten the ability of the internal audit activity to carry out internal audit responsibilities in an unbiased manner.
Attribute Standard 1100 states that the internal audit activity must poses which two qualities when performing their work.
Internal audit activity must be independent and objective in performing their work.
To achieve organizational independence in order to carryout out the responsibilities of the internal audit activity to who must the CAE have direct and unrestricted access to and how is this achieved?
direct and unrestricted access to senior management and the board.
This can be achieved through dual reporting relationships.
To whom must the CAE confirm the organizational independence and how often?
To the board of directors on an annual basis.
Organizational independence is achieved when the CAE reports to?
How can the CAE ensure that the internal audit activity to fulfills it’s responsibilities?
Functionally to the BOD
The CAE must report to a level within the organization that allow the internal audit activity to fulfill its responsibilities.
Examples of functional reporting by the CAE to the the board involve
- Approving the IA Charter, risk based IA plan, approving IA budget,
- Receiving communications from the CAE on IA performance relative to its plan
- Approving decisions regarding the appointment and removal of the CAE
- Approving remuneration of CAE
- Making appropriate inquiries of management and the CAE to determine if there inappropriate scope and resource limitations
A _____ line to the _____ provides the CAE with direct board access for sensitive matters and enables sufficient organizational status.
Functional
Board
The CAE also has a __________ line to senior management, which further enables ________.
administrative reporting
the required stature and authority of internal audit to fulfill responsibilities.
The IIA recommends that the CAE report administratively to the ____ so that the CAE is in ____.
Chief Executive Officer CEO
a senior position, with authority to perform duties unimpeded.
Where can you find the audit committees oversight duties?
In the internal audit charter and the audit committee charter
How is it demonstrated that the internal audit activity it independent of the organization and objective in performing work,
- The IA and Audit committe charter describe the AC’s oversight duties
- CAE’s job description and performance evaluation, noting reporting relationships and supervisory oversight
- Internal audit policy addresses independence and board communication requirements or organization chart with reporting responsibilities.
For internal audit activity to be independent, what type of interference must the IAA be free from…
1) in determining the scope of internal audit
2) performing work
3) communicating results.
Such interference must be disclosed to the board and discuss implications.
True or false - The CAE must have limited access to the board.
False - The CAE must communicate and interact directly with the board and must not be limited.
True or False - It is not recommended that the CAE report to controller, accounting manager, or mid-level functional manager
True - Typically would NOT report to a controller, accounting manager, or mid level manager.
True or False
Objectivity is an attribute of the internal auditor, while independence is an attribute of the internal audit activity
True
Objectivity is an attribute of the internal auditor, while independence is an attribute of the internal audit activity
What is objectivity?
An unbiased mental attitude that allows internal auditors to perform engagements in such a manner that they believe in their work product and that no quality compromises are made.
Objectivity refers to an internal auditor’s___________, which is facilitated by avoiding conflicts of interest.
Impartial and unbiased mindset
Typical situations that undermine objectivity include:
- Auditing an area where an internal auditor recently worked (less than 1 year)
- auditing a family or close friend
- assuming without evidence that an area under audit is acceptable based on prior positive experience.
How does the CAE establish objectivity of individual auditors?
The CAE must establish policies and procedures such as
1) Periodic reviews of conflict of interest or as needed assessments during staffing requirements phase of the engagement
Who is responsible for maintaining objectivity
Responsibility rests on the CAE as well as the Internal auditors themselves
What must one do if independence or objectivity is impaired?
The details must be disclosed to the appropriate party and the nature of the disclosure will depend upon the impairement
Examples of impairment to independence and objectivity include:
- Personal conflict of interest
- scope limitations
- restrictions on access to records, personnel, and properties
- resource limitations such as funding.
Examples of organizational independence impairment include
1) CAE has broader functional responsibility and:
a) Executes audit of functional area also under the CAE
b) Executes an audit within his/her supervisor’s functional responsibility
2) CAE does not have direct communication or interaction with the board
3) Budget for internal audit activity is reduced to the point where internal audit cannot fulfill it’s responsibilities as outline in the charter
Examples of objectivity impairment include:
1) Internal auditor audits area in which he/she use to work
2) Internal auditor audits an area where a relative or close friend is employed
3) Internal auditor assumes, without evidence, that an area being audited ha s effectively mitigated risks based solely on prior positive audit or personal experience.
4) Modifies the planned approach or results based on the undue influence or of another person, without appropriate justification.
