Internal Audit - Audit Project Selection or "annual Planning"

Audit Project Selection or "annual Planning"

Based on a risk assessment of the organization, internal auditors, management and oversight Boards determine where to focus internal auditing efforts. This focus or prioritization is part of the annual/multi-year audit planning. The audit plan is typically proposed by the CAE (sometimes with several options or alternatives) for the review and approval of the Audit Committee or Board of Directors. Internal auditing activity is generally conducted as one or more discrete assignments. A typical internal audit assignment involves the following steps:

  1. Establish and communicate the scope and objectives for the audit to appropriate management.
  2. Develop an understanding of the business area under review. This includes objectives, measurements, and key transaction types. This involves review of documents and interviews. Flowcharts and narratives may be created if necessary.
  3. Describe the key risks facing the business activities within the scope of the audit.
  4. Identify control procedures used to ensure each key risk and transaction type is properly controlled and monitored.
  5. Develop and execute a risk-based sampling and testing approach to determine whether the most important controls are operating as intended.
  6. Report problems identified and negotiate action plans with management to address the problems.
  7. Follow-up on reported findings at appropriate intervals. Internal audit departments maintain a follow-up database for this purpose.

Audit assignment length varies based on the complexity of the activity being audited and Internal Audit resources available. Many of the above steps are iterative and may not all occur in the sequence indicated.

By analyzing and recommending business improvements in critical areas, auditors help the organization meet its objectives. In addition to assessing business processes, specialists called Information Technology (IT) Auditors review information technology controls.

Read more about this topic:  Internal Audit

Famous quotes containing the words project, selection, annual and/or planning:

    Indigenous to Minnesota, and almost completely ignored by its people, are the stark, unornamented, functional clusters of concrete—Minnesota’s grain elevators. These may be said to express unconsciously all the principles of modernism, being built for use only, with little regard for the tenets of esthetic design.
    —Federal Writers’ Project Of The Wor, U.S. public relief program (1935-1943)

    Judge Ginsburg’s selection should be a model—chosen on merit and not ideology, despite some naysaying, with little advance publicity. Her treatment could begin to overturn a terrible precedent: that is, that the most terrifying sentence among the accomplished in America has become, “Honey—the White House is on the phone.”
    Anna Quindlen (b. 1952)

    I would not have every man nor every part of a man cultivated, any more than I would have every acre of earth cultivated: part will be tillage, but the greater part will be meadow and forest, not only serving an immediate use, but preparing a mould against a distant future, by the annual decay of the vegetation which it supports.
    Henry David Thoreau (1817–1862)

    Play for young children is not recreation activity,... It is not leisure-time activity nor escape activity.... Play is thinking time for young children. It is language time. Problem-solving time. It is memory time, planning time, investigating time. It is organization-of-ideas time, when the young child uses his mind and body and his social skills and all his powers in response to the stimuli he has met.
    James L. Hymes, Jr. (20th century)