Certified Internal Auditor (CIA) Part 3 - New Syllabus

The explores the roles and responsibilities of Chief Audit Executives (CAE) in managing internal audit functions from both strategic and operational viewpoints.

It emphasizes the importance of adhering to ethical standards and maintaining the reputation of the audit team, upholding a strategic role within the organization, and ensuring efficiency and effectiveness through performance monitoring tools like key performance indicators.

The CAE should also coordinate with various assurance providers and maintain proper policies and procedures irrespective of the team size. On a leadership level, setting visions, motivating teams, and inspiring autonomy under supervision are highlighted, while managerial roles focus on planning, organizing, and monitoring tasks.

This differentiates between leadership and management, advocates for a risk-based internal audit plan, and discusses various management control techniques, stressing adaptability based on organizational needs.

The outlines key aspects of operational management for internal audits, emphasizing necessary policies, procedures, and documentation. It highlights the role of the Chief Audit Executive and other internal audit leaders in ensuring a well-managed function. Key documents discussed include the internal audit charter, strategic and annual audit plans, and the internal audit manual. The importance of risk-based planning, independent operations, and comprehensive coverage of significant organizational risks are stressed. Practical advice from the Institute of Internal Auditors is highlighted, along with the necessity for clear reporting lines, unfettered access rights, and defined responsibilities for internal audit personnel.

We discuss the essential aspects of reporting to senior management and the board, including the importance and frequency of communication, as part of managing an internal audit function.

Following the new Institute of Internal Auditors' standards, specifically Standard 8.1, we emphasize periodic reporting on key information.

This includes the internal audit charter, code of ethics, and performance indicators. We also outline the importance of reporting on risks identified during internal audit findings and the effectiveness of internal controls.

The Chief Audit Executive must communicate significant risk exposures, control effectiveness, internal audit plans, and key performance indicators to ensure the board and senior management are well-informed and can make strategic decisions accordingly.

We discuss the importance of ensuring that the internal audit function is well managed, emphasizing that this responsibility extends beyond the Chief Audit Executive to include the entire audit team.

The third step in internal audit management involves adhering to standards set by the Institute of Internal Auditors, particularly Domain 3, which governs the internal audit function.

We need to ensure that internal audit adds value by fulfilling the charter's responsibilities and aligning strategically with organizational goals. Compliance with the code of ethics and focusing on governance, risk, and compliance are also critical aspects.

Additionally, maintaining quality through strong internal controls, mentoring, professional development, and effective supervision are essential components of a successful internal audit function.