Communicating-Internal-Audit-Results

1. Communicating Internal Audit Results

• Importance of communicating internal audit results to ensure stakeholders are informed and corrective actions are taken.

2. Definition of Internal Auditing

• Internal Auditing: An independent, objective assurance and consulting activity designed to add value and improve organization operations.

  • Systematic, disciplined approach to evaluate risk management, control, and governance processes.

  • Facilitates achievement of organizational objectives.

3. International Standards for Internal Auditing Results

I. Standards - Overview

• 2400: Requirement to communicate engagement results.

• 2410: Communications should include objectives, scope, conclusions, recommendations, and action plans.

II. Detailed Standards

• 2410.A1: Final communication should include opinions, considering expectations of management and stakeholders; must be supported by reliable information.

• 2420: Quality of communications must be:

  • Accurate: Free from errors.

  • Objective: Fair and unbiased.

  • Clear: Easily understood without technical jargon.

  • Concise: To the point, avoiding redundancy.

  • Constructive: Leading to improvements.

  • Complete: Includes all significant observations.

  • Timely: Allows for corrective actions.

III. Reporting Errors and Nonconformance

• 2421: Significant errors or omissions must be corrected and communicated to all parties.

• 2430: Can only report engagements conducted in conformance with professional standards if backed by quality assurance.

• 2431: Disclosures of nonconformance must address:

  • Principles not achieved.

  • Reasons for nonconformance.

  • Impact on engagement results.

IV. Dissemination of Results

• 2440: Chief audit executive (CAE) must communicate results to appropriate parties, ensuring they are reviewed and approved before issuance.

• Importance of detailing scope, limitations, risk frameworks, and overall opinions in communications.

V. Risk Acceptance Communication

• 2600: CAE must inform management if unacceptable levels of risk are identified; unresolved concerns should be communicated to the board.

4. The Role of Reports in Internal Auditing

• Audit reports are opportunities to inform management of important issues, correct errors, and initiate improvements.

• Common shortcomings include failing to captivate management's attention and a lack of communication effectiveness.

• Reporting Issues:

  • Frequent frustrations in report writing due to supervisory rewriting, time pressure, and poor drafts.

  • Importance of auditor clarity and detail in communication to improve recognition and action from management on audit findings.

5. Report Writing Friction

• Common Causes of Friction:

  • Disagreements in drafting between auditors and supervisors.

  • Time spent on reports; often results in poor quality.

  • External pressure can lead to omitted findings.

6. Evaluation of Reports

Key Questions:

• Are reports concise yet comprehensive?

• Do they have an executive summary?

• Is there an action plan with responsible parties?

• Are management actions effectively implemented?

7. Remedies for Report Writing Challenges

• Develop report guidelines to minimize disagreements.

• Include training for good report writing.

• Use standard formats to ensure consistency and completeness in findings.

• Take care to document findings during fieldwork.

8. Practical Cases – Examples

• Conditions, criteria, causes, impacts, and recommendations must be clearly outlined in findings.

  • Example reports should specify outstanding receivables and compliance with operational standards.

9. Important Issues in Report Writing

• Aspects such as discussion with auditees, factual accuracy, precision, clarity, and constructive tones are crucial for effective reporting.

Additional Issues:

• Providing a balanced perspective, timely distribution, legal considerations, and proper editing are all factors that enhance report quality.

10. Effective Strategies for Report Writing

• Use clear acronyms, make reports succinct, and summarize key findings for management.

• Ensure reports act as a bridge between auditors and management for effective implementation of findings.

11. Components of Ideal Internal Audit Report

A. Executive Summary

• Summarizes audit activities, observations, and recommendations.

• Important for senior management to ensure engagement in corrective actions.

B. Complete Internal Audit Report

• Consists of detailed sections: Background, Risks, Objectives, Methodology, Conclusions, and Appendixes detailing management responses and recommendations.