1.5 Coordination
Performance standard 2050 : Coordination
The chief audit executive should share information and coordinate activities with other internal and external providers of assurance and consulting services to ensure proper coverage and minimize duplication or efforts.
1. Coordinating the work of the Internal Audit Activity with other Auditors
a. Detailed guidance is provided in Practice Advisory 2050-1, Coordination :
1) Oversight of the work of external auditors, including coordination with the internal audit activity, is the responsibility of the board. Coordination of internal and external audit work is a responsibility of the chief audit executive (CAE) The CAE obtains the support of the board to audit work effectively” (para.1)
2) Organizations may use the work of external auditors to provide assurance related to activities within the scope of internal auditing. In these cases, the CAE takes the steps necessary to understand the work performed by the external auditors, including :
a) The nature, extent, and timing of work planned by external auditors, to be satisfied that the external auditors' planned work, in conjunction with the internal auditors' planned work, satisfies the requirements of Standard 2100
b) The external auditors assessment of risk and materiality
c) The external auditors’ techniques, methods, and terminology to enable the CAE to (1) coordinate internal and external auditing work; (2) evaluate, for purposes of reliance, the external auditors' work; and (3) communicate effectively with external auditors.
d) Access to the external auditors’ programs and working papers, to be satisfied that the external auditors' work can be relied upon for internal audit purposes. Internal auditors are responsible for respecting the confidentiality of those programs and working papers" (para.2)
3) "The external auditor may rely on the work of the internal audit activity in performing their work. In this case, the CAE needs to provide sufficient information to enable external auditors to understand the internal auditors techniques, methods, and terminology to facilitate reliance by external auditors on work performed. Access to the auditors’ programs and working papers is provided to external auditors in order for external auditors to be satisfied as to the acceptability for external audit purposes of relying on the internal auditors' work” (para 3).
NOTE: Professional standards place sole responsibility for the attest function on the external auditors. Only for the external auditors have the necessary independence to permit the provision of assurance to external parties. Unlike circumstances in which the external auditors use the work of other independence auditors, the responsibility cannot be shared with the internal auditors.
4) “Planned the internal audit activities of internal and external auditors need to be discussed to ensure that audit coverage is coordinated and duplicate efforts are minimized where possible. Sufficient meetings are to be scheduled during the audit process to ensure coordination of audit work and efficient and timely completion of audit activities, and to determine whether observations and recommendations from work performed to date require that the scope of planned work be adjusted” (para. 5)
5) “The internal audit activity’s final communications, management's responses to those communications, and subsequent follow-up reviews are to be made available to external auditors. These communications assist external auditors in determining and adjusting the scope and timing of their work. In addition, internal auditors need access to the external auditors’ presentation materials and management letters. Matters discussed in presentation materials and included presentation in management letters need to be understood by the CAE and used as input to internal auditors in planning the areas to emphasize in future internal audit work. After review of management letters and initiation of any needed corrective action by appropriate members of senior management and the board, the CAE ensure that appropriate follow-up and corrective actions have been taken” (para 6)
6) "The CAE is responsible for regular evaluations of the coordination between internal and external auditors. Such evaluations may also include assessments of the overall efficiency and effectiveness of internal and external audit the activities, including aggregate audit cost. The CAE communicates the results of these evaluation to senior management and the board, including relevant comments about the performance of external auditors” (para. 7)
2 coordinating with Regulatory Oversight Bodies
a. Businesses and not-for-profit organizations are subject to governmental in many countries.
1) Below is a sample of typical subjects of regulation :
a) Labor relations
b) Occupational safety and health
c) Environmental protection
d) Consumer product safety
e) Business mergers and acquisitions
f) Securities issuance and trading
g) Trading of commodities
2) Local and regional governments may have their own regulatory bodies.
b. Particularly in larger organizations, entire departments or functions are established to monitor compliance with the regulations issued by these governmental bodies.
1) For example, broker-dealers in securities established to monitor compliance departments to ensure that trades are executed according to the requirements of securities laws. Moreover, manufacturers have departments lo monitor wage-and-hour compliance, workplace safety issues, and discharge of toxic wastes.
c. Among the responsibilities of internal audit activity is the evaluation of the organization's compliance with applicable laws and regulations.
1) The internal audit activity coordinates its work with that of inspectors at personnel from the appropriate governmental bodies and with personnel from internal assurance functions.
Stop and review! You have completed the outline for this subunit. Study multiple-choice 14 and 15