The board is ultimately responsible for maintaining effective corporate governance and ensuring that the Entities is "in control", the extent and complexity of today's business risks and related controls has led to a heightened expectation from Internal Audit by management. It must assist the board and management to discharge their corporate governance responsibilities by assisting with identifying and managing risks and providing:
- Objective evaluations of business risk
- Regular evaluations of the Entities' system of control
- Effective reviews of operational and financial performance
The role of Internal Audit is to assist management in maximizing the opportunities and minimizing the threats to the Entities. Internal audit must maximize the assurance provided to the Board, the Audit Committee and management, and contribute to the continuous improvement strategies of the Entities.
With a changing and more cost competitive environment, it is essential that maximum value be obtained from the Internal Audit function. The Internal Audit function must now increasingly contribute to the achievement of overall corporate objectives while remaining an independent and valued voice helping the Entities rationalize risk and reward.
Outsourcing Options
Outsourcing the internal audit function is becoming a strategic decision. There are essentially two options with the entity: Full or partial outsourcing.
Full outsourcing
Entities find that outsourcing the complete internal audit function is the best option, since this also helps Entities focus on their core competence.
Partial outsourcing
This approach, also known as co-sourcing, involves a balance between retaining an in-house team and full outsourcing. The in-house team has control of and responsibility for internal audit, and calls on external advisors for additional support and specialist skills when required.
Many Entities are actively outsourcing their internal audit function as a way of cutting costs, increasing efficiency, and responsiveness, and upgrading their in-house capabilities.
This approach involves an integrated formal partnership between the in-house internal audit function and the external advisors, with each party sharing and contributing complementary knowledge, skills and experiences.
Our Internal Audit approach is designed to address the same business concerns that management is required to deal with, and to provide assurance in the following key areas:
- Operational efficiencies and effectiveness, with an emphasis on those areas with the greatest
risk exposure
- Compliance with regulatory requirements, approved policies and procedures and industry best
practices
- Quality of management information
Our Internal audit methodology has an operational and business risk focus and allows for a flexible and high quality response to address Audit Committee and management concerns. The risk assessment process is fundamental to our Internal Audit approach, which requires business areas to become formally accountable for internal control assurance by conducting self-assessment of their control infrastructure. The Internal Audit thus becomes a key component of the client Entities' approach to corporate governance and business risk management.
Our Approach
Our review is carried out by way of questionnaires, Interviews with the Audit Committee, management and Internal Audit staff, observation and review of the internal audit work, and benchmarking with generic comparative criteria. The results are reviewed and the key observations and recommendations are then presented to the Audit Committee.On specific request, our review may include benchmarking the function against Entities of similar size and/or type. This essentially entails comparing the performance of the Internal Audit function with those of the selected Entities in terms of a range of attributes including quality of service, staff numbers, and cost.