TIAPS Module 1 Audit and Assurance workbook
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Although they are related, the principles of independence <strong>and</strong> objectivity as defined by The<br />
IIA are distinct. They also differ in detail from the definitions used by the International Ethics<br />
St<strong>and</strong>ards Board for Accountants (IESBA) <strong>and</strong> others.<br />
In the IPPF, St<strong>and</strong>ard 1100 – Independence <strong>and</strong> Objectivity makes clear an important<br />
distinction:<br />
The internal audit activity must be independent, <strong>and</strong> internal auditors must be objective<br />
in performing their work. 22<br />
Independence is a feature of the internal audit function (referred to as the “internal audit<br />
activity” in the IPPF). Objectivity, on the other h<strong>and</strong>, is a facet of auditors. St<strong>and</strong>ard 1100<br />
provides the following interpretations:<br />
Independence is the freedom from conditions that threaten the ability of the internal audit<br />
activity to carry out internal audit responsibilities in an unbiased manner. To achieve the<br />
degree of independence necessary to effectively carry out the responsibilities of the<br />
internal audit activity, the chief audit executive has direct <strong>and</strong> unrestricted access to<br />
senior management <strong>and</strong> the board. This can be achieved through a dual-reporting<br />
relationship. Threats to independence must be managed at the individual auditor,<br />
engagement, functional, <strong>and</strong> organizational levels.<br />
Objectivity is an unbiased mental attitude that allows internal auditors to perform<br />
engagements in such a manner that they believe in their work product <strong>and</strong> that no quality<br />
compromises are made. Objectivity requires that internal auditors do not subordinate<br />
their judgment on audit matters to others. Threats to objectivity must be managed at the<br />
individual auditor, engagement, functional, <strong>and</strong> organizational levels. 23<br />
To establish organizational independence, the head of the internal audit function (the chief<br />
audit executive) “must report to a level within the organization that allows the internal audit<br />
activity to fulfil its responsibilities.” The structures of public entities, including reporting lines<br />
for the head of the internal audit function, may be defined by legislation or policy. Reference<br />
to a “dual-reporting relationship” in the St<strong>and</strong>ards alludes to a desirable state in which the<br />
head of internal audit reports functionally to (i.e., is accountable to <strong>and</strong> overseen by) the<br />
governing body, either directly or via an audit committee. Functional reporting involves a<br />
substantive relationship in which the governing body is the de facto line manager of the head<br />
of internal audit with responsibility for appraising performance as well as hiring <strong>and</strong> firing.<br />
The governing body should approve the internal audit charter, the audit plan, <strong>and</strong> budget,<br />
<strong>and</strong> receive <strong>and</strong> consider reports from the head of internal audit. This is in addition to the<br />
head of internal audit’s administrative reporting relationship with a member of senior<br />
management, ideally the CEO, for routine matters. The head of internal audit should provide<br />
reports to both senior management <strong>and</strong> the governing body regarding significant findings<br />
<strong>and</strong> insights on governance, risk management, <strong>and</strong> internal control.<br />
22<br />
The International Professional Practice Framework, The Institute of Internal <strong>Audit</strong>ors, 2016<br />
23<br />
The International Professional Practice Framework, The Institute of Internal <strong>Audit</strong>ors, 2016<br />
27