Internal Audit is an independent appraisal function within an organization that examines and evaluates its activities. It provides objective assurance and consulting to add value and improve operations. Through a systematic and disciplined approach, internal audit helps organizations achieve objectives, enhance risk management, strengthen controls, and improve governance processes. The findings and recommendations are documented in an Internal Audit Report for management review and action.
As per AAS-6, Internal Control System refers to all the policies and procedures adopted by the management of the entity to assist in achieving management’s objectives ensuring the orderly conduct of the business, the accuracy and completeness of accounting records, the timely preparation of financial information, safeguarding of assets of enterprises and detection of fraud and errors in a timely manner. The internal audit function constitutes a separate component of internal control with the objective of determining whether other internal controls are well designed and properly evaluated.
The Scope and Objectives of Internal Audit vary widely and are dependent upon the size and structure of the entity and the management’s requirements. The internal audit normally operates in one or more of the following areas:
(a) Review of accounting system and related internal controls: Although the establishment of an adequate accounting system and related internal controls is the responsibility of the management. However it is must that they are reviewed from time to time to ensure that they are operating effectively and recommend any improvement thereto;
(b) Examination of Management of financial and operating information: It includes the review of the means used to identify, measure, classify and report such information and specific inquiry into individual items including tests of transaction;
(c) Examination of the economy, efficiency and effectiveness of operations including the financial controls of an organization: This will help the external auditor when it has an important bearing on the reliability of the financial records;
(d) Physical examination and verification: It includes the examination and verification of physical existence and condition of the tangible assets of the entity.
As per AAS-7 on relying upon the work of an internal auditor, the external auditor should as a part of his audit evaluate the internal audit function to the extent he considers that it will be relevant in determining the nature, timing and extent of his audit procedures. The scope and objectives of an internal auditor are determined by the management while the external auditor has to carry out his functions under some statutory requirement Nevertheless, some of the means of achieving their respective objectives are often similar and thus, much of the work of internal auditor may be useful to the external auditor on determining the nature, timing and extend on the procedures. The external auditor should also evaluate the internal audit function to determine the extent of compliance of the substantive and compliance procedures. It is to be noted that the degree of independence an external auditor has it not with the internal auditor and hence, the report of external auditor is his sole responsibility and the fact that he has relied on the work of internal auditor does not in any way absolve him of his reporting responsibility.
Once the external audit has decided to place reliance on the work of internal auditor, he should coordinate with him, i.e., he should ascertain the internal auditor’s tentative plan for the year ,discuss with him the areas of possible reliance, the extent of internal audit coverage, test methods, methods of sample selection of documentation and review.
Further, the external auditor should be granted access to the internal audit reports and be kept informed of any significant matter which comes to internal auditor’s attention. Similarly, the external auditor should ordinarily inform the internal auditor of any significant matters which may affect his work.
The External auditor should take into account the following factors in relying on the work of internal auditor:
1. The important aspects that may be considered by the external auditor while evaluating the internal audit function are as follow:
2. To facilitate the accumulation of the information necessary for the proper review and evaluation of internal controls, the auditor can use one of the following to help him to know, assimilate and evaluate the same:
3. Internal Control Questionnaire: This is a comprehensive series of question concerning internal controls. This is the most widely used form for collecting information about the existence, operational efficiency of internal control in an organization. The auditor may prepare a standard questionnaire to be used with suitable modification in the case of all audit engagements or he may prepare a fresh one for each audit engagement. The question should be designed that answer can be provided by a mere ticking of the words, “yes” or “no” or “ not applicable” .Questionnaires are generally favored in case of audit of large enterprises because a considerable amount of time is saved for the auditor by eliminating the need for preparing a program for each engagement.
4. Flow Chart: It is a graphic presentation of each part of company’s system of internal control. A flow chart is considered to be the most concise way of recording the auditor’s review of the system of the system. It minimizes the time involved in getting narrative explanation and gives bird’s eye view of the system.