MU1 Module 1 Powerpoint
MU1 Module 1 Powerpoint
Content of lectures
Audio lectures focus on course content. (For help with administrative matters, contact your local CGA office. For help with technical [IT] matters contact the tech support staff at your local CGA office.) These audio lectures include a review of past examination questions and assignment hints for those modules where assignments have been set. Please provide your feedback on the online lectures to: [email protected]
2
Disclaimers
Neither the audio lectures nor PowerPoint slides were designed to be used as a stand-alone resource. If the lecture contradicts the Module Notes, it is the Module Notes that you are examined on. I do not know the content of the course exam. Past exams and solutions are not updated to new material (although the practice exam has been). Students are responsible for reviewing any Technical Updates and Information Bulletins issued by CGA-Canada during the course.
3
Course Overview
Modules 8 to 10 Specific examples of applied internal auditing Module 8 Module 9 Marketing, purchasing and production functions Human resources management, treasury and strategic planning Module 10 Internal auditing in the public and not-for-profit sectors
Part 1
Topic 1.1 Topic 1.2 Definition of internal auditing Scope of internal auditing
INDEPENDENCE is freedom from conditions that threaten the ability of the internal auditing activity to carry out internal audit responsibilities in an unbiased manner. Such threats to objectivity must be managed at the individual auditor, engagement, functional, and organizational levels.
10
INDEPENDENCE is the freedom from conditions that threaten objectivity or the appearance of objectivity. Such threats to objectivity must be managed at the individual auditor, engagement, functional, and organizational levels. OBJECTIVITY is an unbiased mental attitude that allows internal auditors to perform engagements in such a manner that they believe in their work product and that no quality compromises are made. Objectivity requires internal auditors not to subordinate their judgement on audit matters to others.
11
ASSURANCE refers to services that provide an objective examination of evidence for the purpose of providing an independent assessment on risk management, control or governance processes for the organization. Examples may include financial, performance, compliance, system security and due diligence engagements.
12
ASSURANCE refers to services that provide an objective examination of evidence for the purpose of providing an independent assessment on risk management, control or governance processes for the organization. CONSULTING refers to services that are advisory and are intended to add value and improve an organizations governance, risk management and control processes without the internal auditor assuming management responsibility. Their nature and scope are agreed with the audit client. They include counsel, advice, facilitation, and training.
13
ASSURANCE refers to services that provide an objective examination of evidence for the purpose of providing an independent assessment on risk management, control or governance processes for the organization. CONSULTING refers to services that are advisory and are intended to add value and improve an organizations operations without the internal auditor assuming management responsibility. ADDING VALUE to the organization (and its stakeholders) is when the audit provides objective and relevant assurance and contributes to the effectiveness and efficiency of governance, risk management and control processes.
14
ASSURANCE refers to services that provide an objective examination of evidence for the purpose of providing an independent assessment on risk management, control or governance processes for the organization. CONSULTING refers to services that are advisory and are intended to add value and improve an organizations operations without the internal auditor assuming management responsibilities. ADDING VALUE to the organization (and its stakeholders) is when the audit provides objective and relevant assurance and contributes to the effectiveness and efficiency of governance, risk management and control processes. HELPING THE ORGANIZATION refers to the focus on the overall organizational objectives and on the way in which they are achieved operationally.
15
(contd)
RISK MANAGEMENT PROCESSES identify, assess, manage and control potential events or situations to provide reasonable assurance toward the achievement of the organizations objectives.
16
RISK MANAGEMENT PROCESSES identify, assess, manage and control potential events to situations to provide reasonable assurance toward the achievement of the organizations objectives. CONTROL PROCESSES are the policies, procedures, and activities that are part of a control framework, designed to ensure that risks are contained within the risk tolerances established by the risk management process.
17
(contd)
RISK MANAGEMENT PROCESSES identify, assess, manage and control potential events to situations to provide reasonable assurance toward the achievement of the organizations objectives. CONTROL PROCESSES are the policies, procedures, and activities that are part of a control framework, designed to ensure that risks are contained within the risk tolerances established by the risk management process.
GOVERNANCE consists of the combination of processes and structures implemented by the board to inform, direct, manage, and monitor the activities of the organization toward the achievement of its objectives.
18
19
The internal auditing profession will be delineated by how well its services are performed, rather than by who performs them or what they are. To remain viable, the internal auditing profession needs to be perceived as adding value to organizations. Internal auditors must adopt the perspective of the entire value chain. Internal auditings conceptual structure must reach beyond its own inherent processes to reflect organizational service drivers. Standards and other professional guidance must not only lead the profession but must also come to symbolize distinctive quality to the marketplace.
20
2. 3. 4.
5.
an international organization based in Florida; more than 175,000 members in the profession of internal auditing (as of August 2012); has national, regional and local chapters in Canada and elsewhere; provides standards, guidance and best practice information; conducts examinations for the Certified Internal Auditor (CIA) qualification.
21
an international organization based in Chicago; more than 95,000 members world-wide (as of August 2012); has national, regional and local chapters in Canada and elsewhere; its purpose is the education, certification and standard-setting for IT auditing; conducts examinations for the Certified Information Systems Auditor (CISA) designation; not all members are involved in internal auditing, but most are.
22
Reading 1-1 provides a look at where internal auditing has been, its current condition, and where it is headed. The profession is more mature and has been recognized for a longer time in North American and Western Europe. The numbers of internal auditors have increased everywhere in recent years, as have the expectations of the profession.
23
Reading 1-2 sets out some ways in which the profession of internal auditing can enhance its stature. Increased independence is a key to achieving a higher stature. Internal audit activities and their benefits should be marketed internally with their organizations.
24
Risk management to identify and evaluate significant exposures to risk and contribute to the improvement of risk management and control systems. Control to maintain effective controls by evaluating their effectiveness and efficiency and by promoting continuous improvement. Governance to evaluate and improve the processes through which values and goals are established and communicated, the accomplishment of goals is monitored, accountability is ensured and values are preserved.
25
2.
3.
relevant and timely financial information; compliance with laws, regulations, policies and procedures; safeguarding of assets; attaining organizational objectives (effectiveness); operational efficiency and economy.
26
27
28
4.
Internal auditing is only effective to the extent that it results in constructive changes in the organization. Changes must be implemented by those responsible for managing activities. An understanding of management principles will help internal auditors develop recommendations that will be implemented by managers. An understanding of management principles will help internal auditors convince management of the importance of appropriate risk management, control and governance processes (and accept and implement the recommendations of internal auditors).
29
Planning is developing a clear idea of the purpose, longterm objectives and short-term goals of an organization;
30
10
setting objectives and goals; defining strategies to meet objectives; formulating principles, policies and procedures; adhering to rules and standards; formulating programs and premises; preparing budgets; making decisions.
31
Planning is developing a clear idea of the purpose, longterm objectives and short-term goals of an organization; Organizing entails establishing a rule structure to help achieve the goals of the organization;
2.
32
a clear statement of responsibilities; an understanding of the area of discretion provided; a clear understanding of the types of decisions that can be made; availability of information needed to make decisions; a control system to monitor the exercising of delegated authority.
33
11
Planning is developing a clear idea of the purpose, longterm objectives and short-term goals of an organization; Organizing entails establishing a rule structure to help achieve the goals of the organization; Directing is the process of inducing members of an organization to perform their roles successfully;
2.
3.
34
Planning is developing a clear idea of the purpose, longterm objectives and short-term goals of an organization; Organizing entails establishing a rule structure to help achieve the goals of the organization; Directing is the process of inducing members of an organization to perform their roles successfully; Controlling is the comparison of actual performance with pre-determined standards, plans or objectives.
2.
3.
4.
35
establish performance standards measure performance compare performance with standards evaluate deviations determine and implement corrective action follow up on corrective action (return to step 2)
36
12
control systems must fit the needs of the managers and the organization;
37
control systems must fit the needs of the managers and the organization; control systems must focus on exceptions and critical points;
38
control systems must fit the needs of the managers and the organization; control systems must focus on exceptions and critical points; control systems must be flexible and accommodate changes; and
39
13
control systems must fit the needs of the managers and the organization; control systems must focus on exceptions and critical points; control systems must be flexible and accommodate changes; and control systems must be cost-effective.
40
Reading 1-3 discusses the pros and cons of a program designed to provide opportunities for ambitious potential managers to gain knowledge of all the activities of their organization while developing strong problem-solving skills.
41
42
14
Risk is the possibility (uncertainty) of an event occurring that will have a (negative) impact on the achievement of objectives. Enterprise risk (also called business risk) is, therefore, the possibility (uncertainty) of an event occurring that will reduce the likelihood of an organization achieving its objectives.
43
44
45
15
46
the control environment; the entitys risk assessment process; the information system, including processes; control activities; and monitoring of controls.
related
business
Internal audit activities fall into the component of monitoring of controls and seek to improve the effectiveness of all components.
47
48
16
Internal auditors are responsible to the board and management of the organization; external auditors are responsible to the shareholders;
50
Internal auditors are responsible to the board and management of the organization; external auditors are responsible to the shareholders; Internal auditors are independent of the functions that they audit but are not independent of the organization; external auditors must be independent of the organizations that they audit;
51
17
Internal auditors are responsible to the board and management of the organization; external auditors are responsible to the shareholders; Internal auditors are independent of the functions that they audit but are not independent of the organization; external auditors must be independent of the organizations that they audit; The purpose of internal auditing is to improve organizational performance; the purpose of external auditing is to express an opinion on the organizations financial statements;
52
The scope of internal auditing covers all the activities of the organization; the scope of external auditing is limited to those areas impacting the financial statements;
53
The scope of internal auditing covers all the activities of the organization; the scope of external auditing is limited to those areas impacting the financial statements; Internal auditing focuses on the appropriate design and implementation of management processes; external auditing focuses on financial statement balances at a point in time;
54
18
The scope of internal auditing covers all the activities of the organization; the scope of external auditing is limited to those areas impacting the financial statements; Internal auditing focuses on the appropriate design and implementation of management processes; external auditing focuses on financial statement balances at a point in time; Although internal auditing standards are set by the Institute of Internal Auditors, internal auditors are not required to be members of the IIA; external auditing standards are set by professional accounting organizations of which external auditors must be members.
55
Compliance audits focus on reviewing compliance with established policies, procedures, laws, etc.
56
Compliance audits focus on reviewing compliance with established policies, procedures, laws, etc. Internal financial audits focus on the reliability and integrity of the accounting system and its output.
57
19
Compliance audits focus on reviewing compliance with established policies, procedures, laws, etc. Internal financial audits focus on the reliability and integrity of the accounting system and its output. Operational audits review an organizations effectiveness, efficiency and economy of operations and recommend improvements.
58
Compliance audits focus on reviewing compliance with established policies, procedures, laws, etc. Internal financial audits focus on the reliability and integrity of the accounting system and its output. Operational audits review an organizations effectiveness, efficiency and economy of operations and recommend improvements. Comprehensive audits (mainly in the public sector) focus on financial verification, compliance and performance (value-formoney) assessments.
59
60
20
Information Technology (IT) audits focus on the controls in computerized environments. Integrated audits are conducted when IT auditing is included within other types of internal audits.
61
Information Technology (IT) audits focus on the controls in computerized environments. Integrated audits are conducted when IT auditing is included within other types of internal audits. Fraud audits may be carried out by internal auditors when fraud exists or is suspected.
62
Information Technology (IT) audits focus on the controls in computerized environments. Integrated audits are conducted when IT auditing is included within other types of internal audits. Fraud audits may be carried out by internal auditors when fraud exists or is suspected. Environmental audits assess the extent to which the entity is in compliance with regulatory requirements on environmental matters.
63
21
64
Performance measurement
Performance measurement is based on identifying those measures critical to an organizations success and setting specific, measurable targets for them. Achieved results are compared with targets to assess organizational performance. Performance measures should be Specific, Measurable, Attainable, Realistic and Trackable (i.e., SMART). A number of approaches have been developed including the Balanced Scorecard approach and the approach developed by the Canadian Comprehensive Auditing Foundation.
65
66
22
67
68
Part 6
Topic 1.8 Topic 1.9 The ethical climate Ethical considerations
69
23
Internal auditors should use their positions of trust and integrity to be advocates of ethical conduct. They should work towards increased compliance with legal, ethical and societal responsibilities.
70
Internal auditors should use their positions of trust and integrity to be advocates of ethical conduct. They should work towards increased compliance with legal, ethical and societal responsibilities. Internal auditors should periodically assess the state of the ethical climate and evaluate the extent to which the organization fulfills its ethical responsibilities. This assessment should include evaluating compliance with the organizations code of ethics. Unethical actions can pose a significant risk to an organization and should be reported to senior management or the board of directors.
71
Adherence to a professional code of ethics increases the reputation and effectiveness of the work of the internal auditor. Internal auditors have access to confidential and sensitive information and must respect the principle of confidentiality.
72
24
Adherence to a professional code of ethics increases the reputation and effectiveness of the work of the internal auditor. Internal auditors have access to confidential and sensitive information and must respect the principle of confidentiality. Internal auditors who are members of a professional accounting organization must comply with the ethics of that organization. In addition, internal auditors who are members of the Institute of Internal Auditors must comply with the IIA standards and Code of Ethics.
73
The IIA Code of Ethics (On-line Reading 1.8-2) is based on the principles of integrity, objectivity, confidentiality and competency and consists of Rules of Conduct describing expected behavioural norms for its members.
74
Internal auditors:
Shall perform their work with honesty, diligence and responsibility. Shall observe the law and make disclosures expected by the law and the profession. Shall not knowingly be a party to any illegal activity, or engage in any acts that are discreditable to the profession of internal auditing or to the organization. Shall respect and contribute to the legitimate and ethical objectives of the organization.
75
25
Internal auditors:
Shall not participate in any activity or relationship that may impair or be presumed to impair their unbiased assessment. This participation includes those activities or relationships that may be in conflict with the interests of the organization. Shall not accept anything that may impair or be presumed to impair their professional judgement. Shall disclose all material facts known to them that, if not disclosed, may distort the reporting of activities under review.
76
Internal auditors:
Shall be prudent in the use and protection of information acquired in the course of their duties. Shall not use information for any personal gain or in any manner that would be contrary to the law or detrimental to the legitimate and ethical objectives of the organization.
77
Internal auditors:
Shall engage only in those services for which they have the necessary knowledge, skills and experience. Shall perform internal auditing services in accordance with the International Standards for the Professional Practice of Internal Auditing. Shall continually improve their proficiency and the effectiveness and quality of their services.
78
26
values and goals are established and communicated; the accomplishment of goals is monitored; accountability is ensured; and values are preserved.
79
Assessment of ethical practices and conduct. Performance of or assistance with fraud investigations. Serving as a source of advice on ethical matters. Receiving reports of unethical or illegal activity. Promotion of strong ethical culture in the organization.
80
By-passing of control procedures by employees. Manipulation of accounting information to improve performance. Personal travel employer. or entertainment charged to the
81
27
Part 7
Topic 1.10 Introduction to case analysis
82
Skim the case. a) Read the required. b) Read all material quickly. c) Determine your role. d) Determine the main issue and its importance.
83
Carefully reread the information. a) Read all material carefully. b) Understand all the information. c) Work through any numeric exhibits.
84
28
85
86
5.
Generate alternatives.
87
29
88
Analyze and evaluate each alternative. -- Conduct qualitative and quantitative analysis of each alternative (including sensitivity).
89
8.
90
30
91
6. 7.
8. 9.
Skim the case. Carefully reread the information. Identify the problem areas and issues. Analyze the data. Generate alternatives. Select the decision criteria. Analyze and evaluate each alternative. Make a recommendation or decision. Write a report or action plan.
92
Part 8
Module summary -- Learning objectives Recent examination questions
93
31
Define internal auditing and explain the key terms used in the definition. (Level 1)
94
Describe the three elements that determine the scope of internal auditing. (Level 1)
95
Explain the main functions of management and how they relate to achieving control. (Level 2)
96
32
Define risk and enterprise risk, and explain how they are related to the concept of control. (Level 1)
97
Explain the role of internal auditors in their organization and compare it with the role of the organizations external auditors. (Level 1)
98
99
33
measurement. (Level 2)
100
101
102
34
a case analysis report from information provided on an internal auditing issue. (Level 1)
103
The format of the examination will likely be similar to that of the practice examination included in your lesson materials, and will probably consist of:
Multiple choice questions Interpretation of generalized audit software output Two major essay questions (perhaps multi-topic)
The content of the examination must conform to the examination blueprint for the course. Questions based on Module 1 will make up between 4% and 7% of the total marks on the exam.
104
CGA-Canadas policy has changed to posting only the most recent years examinations and solutions. In a world where accounting and auditing standards are changing more rapidly than ever before, solutions become outdated relatively quickly. You should be aware that CGA-Canada does not up-date solutions to past examinations to reflect changes in course content, accounting and auditing standards, etc. The practice examinations provided with the course material have, however, been updated and are current. The questions that I will go over in the last part of each lecture have been selected from recent exams and the solutions reviewed to ensure that they are still correct.
105
35
106
36