This paper examines the difficulties companies face when establishing effective internal audit practices and departments. It identifies key challenges including threats to auditor independence, competence gaps, confidentiality concerns, and poor communication between auditors and management. The paper then outlines the infrastructure needed to build a functional internal audit department — including audit committees, resource allocation, clear mission statements, and objectivity safeguards. It further discusses how to implement and monitor internal audit policies through qualified staffing, inter-departmental cooperation, communication channels, and accountability mechanisms, ultimately arguing that a strong internal audit function is indispensable for organizational efficiency and fraud prevention.
Many companies have developed and strengthened their internal audit departments in order to meet the growing complexities associated with increasingly sophisticated business operations. There is a clear need for a strong internal audit department charged with the obligation of conducting independent and objective evaluations of business operations in order to prevent, detect, and reduce inefficiencies and fraud. Internal auditors are employees of the organization, as opposed to external auditors who are independent third parties not answerable to company management (Hightower, 2009). Operational audits, compliance audits, financial audits, and information systems audits are among the principal types of internal audit carried out by internal auditors.
The fact that internal auditors are company employees creates a significant challenge in establishing an efficient internal audit department and sound audit practices. The first and most prominent problem is establishing a genuinely independent internal audit function. Because internal auditors owe their loyalty to the company and must act within the company's rules and mandate, their roles are defined by the very entity on which they are expected to offer an opinion (Hightower, 2009). This arrangement may impair the characteristic of independence, which is fundamental to auditing.
Moreover, the independence of internal auditors may be further compromised by the fact that they work within the company and may develop close friendships or relationships with the employees whose work they are expected to audit (Reding, 2007). Internal auditors may also be required to report to company management or an internal audit committee — parties whose own functions may be subject to review — further undermining independence.
The second factor that may hinder the establishment of effective internal audit practice is competence. Internal auditors should be competent and should possess high professional qualifications and strong ethical standards. Many companies may be reluctant to incur the costs associated with hiring sufficiently qualified auditors. Additionally, the competence of internal auditors is challenged by the fact that they are not regulated and supervised by external accounting regulatory bodies (Reding, 2007), and may therefore fail to comply with the auditing standards that are central to the function.
Third, effective internal auditing requires strict adherence to confidentiality. After completing their mandate, internal auditors report their findings to management representatives so that appropriate actions can be taken. However, the decision to act on those recommendations rests entirely with management. This means management can choose to ignore auditors' recommendations, rendering the internal audit function ineffective (Pickett, 2005). Since internal auditors typically report only to management, important findings may never reach stockholders or other stakeholders, undermining the broader value of the department.
The establishment of good internal audit practices can also be hampered by poor communication between internal auditors and management. In many companies, the channel of communication between these two parties is notably weak (Hightower, 2009). Internal auditors may therefore struggle to communicate their findings or to persuade management to act on their recommendations. Effective communication can be promoted by ensuring that company policies encourage progress reporting and by developing clear, formal communication channels.
Despite these difficulties, companies should strive to support the development of their internal audit function. For companies with ambitions to grow and to prevent fraud and waste, good internal audit practices are not optional — they are an essential ingredient in achieving sustainable performance (Hightower, 2009).
Establishing a strong and efficient internal audit department requires the development of the necessary infrastructure to make the work of internal auditors effective. This infrastructure should directly address the challenges identified above. As a starting point, it is essential to formulate appropriate audit procedures and policies. Policies governing the internal audit department must promote adherence to audit standards, support compliance with audit ethics, foster quality, and guarantee due professional care. Policies must also be designed to ensure that performance standards remain unimpeachable — this can be achieved by establishing appropriate communication lines, implementing progress monitoring, managing the internal audit function systematically, and ensuring proper planning (Pickett, 2005).
In developing the department, sufficient resources must be allocated for audit purposes. The budget assigned to the internal audit department should be adequate to allow the department to carry out its mandate without paralysis or constraint. Appropriate tools should also be made available so that the department has the full capacity to execute its tasks (Thomas & Parish, 1999). Resource allocation should ensure that auditors are only assigned projects they are equipped to complete.
Another critical element of the infrastructure is the establishment of an audit committee to supervise the performance of internal auditors. The composition of this committee should include external parties and directors without management roles, which will reduce conflicts of interest and ensure that auditors' recommendations are acted upon. The audit committee should hold regular meetings with internal auditors and protect them from victimization or sabotage by management.
Furthermore, the internal audit department should focus on strengthening internal controls rather than targeting individual employees. This approach will minimize friction, deter fraud, and reduce company losses. Internal auditors employed in the department should be required to obtain recognized qualifications and to adhere to a professional code of ethics.
Establishing a precise and focused internal audit mission and set of objectives is equally important. A department that understands its mandate and strategic vision will remain focused on reducing organizational risk and continuously improving the quality of its work. The mission and vision of the department will also provide a framework for evaluating performance and guide the execution of the audit mandate. Strategic objectives embedded in the vision will help identify solutions to the many impediments that can affect the department's effectiveness.
Finally, the establishment of the department must ensure the independence and objectivity of internal auditors. Audit policies should be designed to limit the development of relationships that could compromise audit findings. Objectivity should be safeguarded by eliminating conflicts between personal interest and professional duty (Corporate governance: the role of internal control, 2007). Management should not be permitted to alter auditors' remuneration as leverage, nor should it be allowed to intimidate or influence audit reports. In summary, establishing an effective internal audit department involves formulating policies that support proper communication, employing qualified staff, articulating a clear departmental vision, and demonstrating to management the tangible value of the internal audit function.
"Staffing standards, cooperation, communication, and accountability"
"Reports, timelines, segregation of duties, and oversight"
The importance of the internal audit department in any company must not be underestimated; rather, it should be actively strengthened. This department plays a critical role in ensuring the efficient utilization of company resources. The internal audit function remains a key organizational asset that requires autonomy and the ability to report to directors who have no involvement in the day-to-day management of the company. Companies that invest in building a robust, independent, and well-resourced internal audit department position themselves to detect inefficiency, deter fraud, and sustain long-term growth.
You’re 57% through this paper. Sign up to read the remaining 2 sections.
Sign Up Now — Instant Access Already a member? Log inAlways verify citation format against your institution’s current style guide requirements.