10.04.2023 Views

TIAPS Module 1 Audit and Assurance workbook

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Although they are related, the principles of independence <strong>and</strong> objectivity as defined by The<br />

IIA are distinct. They also differ in detail from the definitions used by the International Ethics<br />

St<strong>and</strong>ards Board for Accountants (IESBA) <strong>and</strong> others.<br />

In the IPPF, St<strong>and</strong>ard 1100 – Independence <strong>and</strong> Objectivity makes clear an important<br />

distinction:<br />

The internal audit activity must be independent, <strong>and</strong> internal auditors must be objective<br />

in performing their work. 22<br />

Independence is a feature of the internal audit function (referred to as the “internal audit<br />

activity” in the IPPF). Objectivity, on the other h<strong>and</strong>, is a facet of auditors. St<strong>and</strong>ard 1100<br />

provides the following interpretations:<br />

Independence is the freedom from conditions that threaten the ability of the internal audit<br />

activity to carry out internal audit responsibilities in an unbiased manner. To achieve the<br />

degree of independence necessary to effectively carry out the responsibilities of the<br />

internal audit activity, the chief audit executive has direct <strong>and</strong> unrestricted access to<br />

senior management <strong>and</strong> the board. This can be achieved through a dual-reporting<br />

relationship. Threats to independence must be managed at the individual auditor,<br />

engagement, functional, <strong>and</strong> organizational levels.<br />

Objectivity is an unbiased mental attitude that allows internal auditors to perform<br />

engagements in such a manner that they believe in their work product <strong>and</strong> that no quality<br />

compromises are made. Objectivity requires that internal auditors do not subordinate<br />

their judgment on audit matters to others. Threats to objectivity must be managed at the<br />

individual auditor, engagement, functional, <strong>and</strong> organizational levels. 23<br />

To establish organizational independence, the head of the internal audit function (the chief<br />

audit executive) “must report to a level within the organization that allows the internal audit<br />

activity to fulfil its responsibilities.” The structures of public entities, including reporting lines<br />

for the head of the internal audit function, may be defined by legislation or policy. Reference<br />

to a “dual-reporting relationship” in the St<strong>and</strong>ards alludes to a desirable state in which the<br />

head of internal audit reports functionally to (i.e., is accountable to <strong>and</strong> overseen by) the<br />

governing body, either directly or via an audit committee. Functional reporting involves a<br />

substantive relationship in which the governing body is the de facto line manager of the head<br />

of internal audit with responsibility for appraising performance as well as hiring <strong>and</strong> firing.<br />

The governing body should approve the internal audit charter, the audit plan, <strong>and</strong> budget,<br />

<strong>and</strong> receive <strong>and</strong> consider reports from the head of internal audit. This is in addition to the<br />

head of internal audit’s administrative reporting relationship with a member of senior<br />

management, ideally the CEO, for routine matters. The head of internal audit should provide<br />

reports to both senior management <strong>and</strong> the governing body regarding significant findings<br />

<strong>and</strong> insights on governance, risk management, <strong>and</strong> internal control.<br />

22<br />

The International Professional Practice Framework, The Institute of Internal <strong>Audit</strong>ors, 2016<br />

23<br />

The International Professional Practice Framework, The Institute of Internal <strong>Audit</strong>ors, 2016<br />

27

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!