Audit Project Selection or "annual Planning"
Based on a risk assessment of the organization, internal auditors, management and oversight Boards determine where to focus internal auditing efforts. This focus or prioritization is part of the annual/multi-year audit planning. The audit plan is typically proposed by the CAE (sometimes with several options or alternatives) for the review and approval of the Audit Committee or Board of Directors. Internal auditing activity is generally conducted as one or more discrete assignments. A typical internal audit assignment involves the following steps:
- Establish and communicate the scope and objectives for the audit to appropriate management.
- Develop an understanding of the business area under review. This includes objectives, measurements, and key transaction types. This involves review of documents and interviews. Flowcharts and narratives may be created if necessary.
- Describe the key risks facing the business activities within the scope of the audit.
- Identify control procedures used to ensure each key risk and transaction type is properly controlled and monitored.
- Develop and execute a risk-based sampling and testing approach to determine whether the most important controls are operating as intended.
- Report problems identified and negotiate action plans with management to address the problems.
- Follow-up on reported findings at appropriate intervals. Internal audit departments maintain a follow-up database for this purpose.
Audit assignment length varies based on the complexity of the activity being audited and Internal Audit resources available. Many of the above steps are iterative and may not all occur in the sequence indicated.
By analyzing and recommending business improvements in critical areas, auditors help the organization meet its objectives. In addition to assessing business processes, specialists called Information Technology (IT) Auditors review information technology controls.
Read more about this topic: Internal Audit
Famous quotes containing the words project, selection, annual and/or planning:
“A candidate once called his opponent “a willful, obstinate, unsavory, obnoxious, pusillanimous, pestilential, pernicious, and perversable liar” without pausing for breath, and even his enemies removed their hats.”
—Federal Writers’ Project Of The Wor, U.S. public relief program (1935-1943)
“It is the highest and most legitimate pride of an Englishman to have the letters M.P. written after his name. No selection from the alphabet, no doctorship, no fellowship, be it of ever so learned or royal a society, no knightship,—not though it be of the Garter,—confers so fair an honour.”
—Anthony Trollope (1815–1882)
“I would not have every man nor every part of a man cultivated, any more than I would have every acre of earth cultivated: part will be tillage, but the greater part will be meadow and forest, not only serving an immediate use, but preparing a mould against a distant future, by the annual decay of the vegetation which it supports.”
—Henry David Thoreau (1817–1862)
“For the people in government, rather than the people who pester it, Washington is an early-rising, hard-working city. It is a popular delusion that the government wastes vast amounts of money through inefficiency and sloth. Enormous effort and elaborate planning are required to waste this much money.”
—P.J. (Patrick Jake)