External Quality Assessment Are You Ready? Institute of Internal Auditors

Similar documents
Internal Audit Quality Policy

Performing an Effective Quality Assessment

Implementation Guide 1311

Lake County School District. Quality Assurance & Improvement Program. Internal Self-Assessment for. The Internal Audit Department

Practice Advisory : Quality Assurance and Improvement Program

Building a Sustainable Quality Program

Quality Assessment Review. Agenda. The Law Says 11/16/2015. Internal Audit Management November 19-20, 2015

10/5/2016. Quality Assessment Review. Agenda. What s the purpose of a QAR? Internal Audit Manager Training October 3-4, 2016

Quality Assurance in Internal Audit. Standard on Internal Audit (SIA) 7

Internal Audit Quality Analysis Evaluation against the Standards International Standards for the Professional Practice of Internal Auditing (2017)

Report. Quality Assessment of Internal Audit at <Organisation> Draft Report / Final Report

Implementation Guide 1300

International Standards for the Professional Practice of Internal Auditing

Implementation Guide 1312

Quality Assurance and Improvement Program (QAIP)

Implementation Guide 1200

Quality Assurance and Improvement Program

Changes To the Public Sector Internal Audit Standards April 2017

Tools & Techniques II: Lead Auditor

2012 IIA Standards Update

The Red (Book) Rocks The Latest and Greatest Audit Standards

External Quality Assessment of the Internal Audit Activity at the World Food Programme

The IPPF in How changes to The IIA s guidance framework can benefit internal auditors and SAIs

Caribbean Association of Audit Committee Members Inc. Independent Quality Assurance Assessment of the Internal Audit function

Changes in the IIA Standards: New Requirements for Internal Audit Functions

Implementation Guide 2060

External Quality Assessment of the Internal Audit Activity at. County of Orange. April County of Orange Final Report: June 13,

How can I be a more insightful Internal Auditor? This does not happen by accident. It takes deliberate action. Insight comes with experience. Action M

Implementation Guide 2000

The University of Texas at San Antonio 2014 External Quality Assessment of the Auditing and Consulting Services Office

Changes in the IIA Standards: New Requirements for Internal Audit Functions

EXTERNAL QUALITY ASSESSMENT (EQA) REPORT FOR

BUSINESS RISK MANAGEMENT LTD. Proposal for External Quality Assessment of the Internal Audit function against world class best practice

Planning Guides. Planning. IA Governance

STANDARD ON INTERNAL AUDIT (SIA) 7 QUALITY ASSURANCE IN INTERNAL AUDIT *

UNITED ISD INTERNAL AUDIT DEPARTMENT QUALITY ASSESSMENT SELF-ASSESSMENT WITH INDEPENDENT EXTERNAL VALIDATION

External Quality Assessment of. The City Auditor s Office CITY OF CALGARY MARCH ISC: UNRESTRICTED AC Attachment

External Quality Assessment Review of University of Florida s Office of Internal Audit

Practice Advisory : Internal Audit Charter

Internal Audit Annual Assertion on Internal Auditing. for Financial Year

City of Edmonton EXTERNAL QUALITY ASSESSMENT OF THE OFFICE OF THE CITY AUDITOR. September 11, 2015

ENERGY QUEENSLAND LIMITED INTERNAL AUDIT CHARTER. [April 2017]

Implementation Guides

Implementation Guide 2050

INTERNATIONAL STANDARDS FOR THE PROFESSIONAL PRACTICE OF INTERNAL AUDITING

Internal Audit Charter

FLORIDA STATE UNIVERSITY Office of Inspector General Services Report #17-06

STANDARDS: QUALITY ASSURANCE

Audit Standards 6/23/2017. Outline. Let s Refresh. Changes to the IIA Standards

10 Imperatives for Internal Audit

Value-Added Internal Audit: Myth or Reality?

Strathclyde Partnership for Transport

AUDIT COMMITTEE REPORTING: TRENDS & BEST PRACTICES Timothy Etoori Head of Internal Audit UGAFODE Microfinance

Internal Audit Challenges & Opportunities Speaker: Laurie Shen, Director, Grant Thornton LLP

August 14, Dear Ms. Gula:

Quality Assessments what you need to know

Implementation Guide 2340

What We Will Cover Today

Research Project Request for Proposal. Defining and Measuring the Value of Internal Audit

SIAAB QUALITY ASSURANCE REVIEW PROGRAM

International Standards for the Professional Practice of Internal Auditing (Standards)

CONTENTS. Acknowledgments... iv. 1: Introduction : Why have organizations chosen to seek compliance with the Standards?...2

Tailoring IPPF Implementation

Periodic internal quality assessment Questions for discussion

STATE OF INTERNAL AUDIT 2013

Internal Audit Standards Board Disposition on the 2010 Standards Exposure Results/Comments. Introduction

S23 - Hallmarks of a Strong Audit Function Lilian Fong and Marta O'Shea

Implementation Guide 2130

IIA Netherlands regulations concerning external quality assessment of internal audit functions

Implementation Guide 1000

SIAAB Guidance #02 Internal Audit Independence- Interaction with Agency Head, Senior Staff and Placement Within the Organizational Structure

Independent Validation of the Internal Auditing Self-Assessment

Natural Resources Canada

International Standards for the Professional Practice of Internal Auditing (Standards)

Audit Never Sleeps. Angela Witzany, CIA, QIAL, CRMA Chairman of the Global Board The Institute of Internal Auditors

GoldSRD Audit 101 Table of Contents & Resource Listing

External Quality Assessment Of The University Of Florida s Office Of Audit & Compliance Review May 2012

Changes to The IIA Standards: What Board Members and Executive Management Need to Know

EXTERNAL QUALITY ASSESSMENT OF ORANGE COUNTY S INTERNAL AUDIT DEPARTMENT

PULSE OF INTERNAL AUDIT Navigating an Increasingly Volatile Risk Environment.

INTERNATIONAL STANDARDS FOR THE PROFESSIONAL PRACTICE OF INTERNAL AUDITING (STANDARDS)

How to plan an audit engagement

Five Star Environmental Audit Specification August 2016

OFFICE OF INTERNAL AUDITS APPALACHIAN STATE UNIVERSITY AUDIT MANUAL

External Quality Assurance Review of the Office of the Auditor General Proposed Statement of Work for the Audit Sub- Committee.

VIRGINIA POLYTECHNIC INSTITUTE AND STATE UNIVERSITY COMPLIANCE, AUDIT, AND RISK COMMITTEE OF THE BOARD OF VISITORS COMPLIANCE, AUDIT, AND RISK CHARTER

INTERNAL AUDITOR S REPORT

Texas Facilities Commission (TFC) Office of Internal Audit (OIA)

Canada. Internal Audit Charter 1+1. Canadian Nuclear Safety Commission. Office of Audit and Ethics. April 18, 2011

Internal Audit Charter

Internal Audit Performance

Financial CIA-I. Certified Internal Auditor (CIA) Download Full Version :

External Quality Assessment - Validation of Client s Self-Assessment of Conformance to the Public Sector Internal Audit Standards

Practice Guide. Developing the Internal Audit Strategic Plan

Certificate in Establishing an Internal Audit Function

CHARTER OF THE SONOMA COUNTY INTERNAL AUDIT FUNCTION JANUARY 15, 2013

Audit Never Sleeps. Angela Witzany, CIA, QIAL, CRMA Chairman of the Global Board The Institute of Internal Auditors

Leadership and Rising Stakeholder Expectations

Implementing an effective Training & Competence Framework: A Practical Guide. Enterprise Learning 2017

Transcription:

External Quality Assessment Are You Ready? Institute of Internal Auditors

Objectives Describe frameworks used to assess the quality of an IA activity Discuss benefits, challenges, and success factors related to establishing and sustaining a QAIP Examine successful practices that can be used to prepare for an external assessment Most common observations

A Recent Survey How familiar are you with the IIA QA Manual? Have the manual and use it 30.0% Have the manual and read it 15.0% Have the manual, haven t opened it 20.0% What manual? 35.0%

Quality Framework

Four Pillars of Internal Audit Quality 1. IA Governance (1000, 1100, 1300,Code of Ethics & The Definition of Internal Audit) 2. IA Staff (1200) 3. IA Management (2000, 2100, 2600 & 2450) 4. IA Process (2200, 2300, 2400 & 2500)

Quality Framework: Practice Guide

Path to Quality Conformance Ratings Generally Conforms Partially Conforms Does Not Conform Maturity Level Optimizing Managed Integrated Evolving Initial Opinion No opinion

Challenge Questions 1. Where is your Internal Audit activity on the path to quality (based on ratings or maturity)? 2. What level of quality does the Audit Committee expect Internal Audit to be at? 3. What level of quality does Senior Management expect Internal Audit to be at? 4. Is Internal Audit, the Audit Committee and Senior Management perfectly aligned in the expectation of quality (all 4 pillars)? 5. Where does Internal Audit need to be. and do YOU have a strategy/or plan to get there?

Quality Assurance and Improvement Program (QAIP)

IPPF Check: Standard 1310 Requirements of the QA & Improvement Program Must include both internal and external assessments. Internal assessments must include: Ongoing monitoring of the performance of the internal audit activity - the day-to-day supervision, review, and measurement of the internal audit activity. Periodic self-assessments or assessments conducted to evaluate conformance with the Standards by persons within the organization with sufficient knowledge of internal audit practices.

Ongoing v. Periodic Area Ongoing Periodic Methodology and work papers Supervisor Reviews & IPPF Updates Independent Internal QA & Benchmarking Client Surveys Client Feedback on Individual Projects Evaluation of Overall Results & Interviews Performance Metrics Budget Reviews, Cycle Times Analysis of Results & Benchmarking CAE must communicate results of the QAIP to senior management and the board.

Recent Survey: QAIP Challenges Response % Size of IA activity 14.3% Time or resource constraints 61.9% Lack of perceived need or value 9.5% Other priorities 9.5% Other challenges: 4.8%

Challenge Questions 1. Does your Internal Audit activity have a formalized QAIP? 2. Have all Internal Audit staff and stakeholders bought into their QAIP responsibilities? 3. Is the QAIP custom fitted for your company? 4. Is continuous improvement the leading motto of your QAIP?

The External Assessment

Standard 1312 External Assessments External assessments must be conducted at least once every five years by a qualified, independent assessor or assessment team from outside the organization. The chief audit executive must discuss with the board: The form and frequency of external assessment; and The qualifications including any potential conflict of interest.

Two Options Full external assessment performed by an independent individual or group. Self-assessment with Independent External Validation (SAIV) internal assessment performed with an independent individual or group verifying results.

Byproduct of the External Assessment An external assessment may include process improvement opportunities. Although not a part of the conformance determination, industry best practices enable an Internal Audit Activity to move from good to great. When bidding an External Assessment, it is a good idea to include in the scope of your RFP.

Am I Ready for an EQA? Do I have an established QAIP? Do I have satisfactory results in all areas? Have I performed a complete internal assessment? Use the audit program contained in the QA manual Report results Track remediation; re-test, if necessary You are ready when satisfied with results in all four areas Governance Staff Management Process

Conformance and Beyond

Most Common Areas of Non-Conformance 5. Standard 1210: Proficiency of staff 4. Standard 1010: Recognition of IIA Standards in Audit Charter 3. Standard 1011: Confirm organizational independence by confirming annually the functional reporting responsibility to the Audit Committee. 2. Standard 2100: Performing consulting work 1. Standard 1311: Performing internal assessments

Beyond Conformance Strategic: Strategic internal audit plan Talent: Build, acquire or recruit right talent to meet needs of organization. Trends: Report pervasive trends across audit reports. Combined Assurance: Coordination with other assurance groups within organization and demonstrate how IA results impact overall risk profile