RELATIONSHIP BETWEEN INTERNAL AND EXTERNAL AUDIT
Analyzing the evolution process of internal audit, from its beginning and so far, we can easily notice that internal audit function was born through detaching of some activities from external audit, the result being that there some situations when these two functions could easily confused. The reality is that internal audit is two distinctive functions: net difference, but which are also characterized through some complementary relationships. In this paper, we try to give our contribution at the clarification of the similarities and differences between these two functions, making a literature review that allowed us to identify some very interesting studies that permitted us to emphasize the main criterions that influenced between internal audit and external audit.
The coordination of internal audit activity with external audit activity is very important from both points of view from external audit point of view is important because, in this way, external auditors have the possibility to raise the efficiency of financial statement audit; the relevancy from internal audit’s point of view is assured by the fact that this coordination in the assessment of risks control (Dobtroteanu, L. & Dobroteanu C.L.2002). The importance of the relationship from internal audit is reflected also by international Standard of Audit (610-Considering the work of internal audit”), which foresees, among others.
– The role of internal auditing is determined by management, and its objectives differ from those of the external auditor who is appointed to report independently on the financial statement. The internal audit function’s objectives vary according to management’s requirements. The external auditor’s primary concern is whether the financial statement are free of material misstatements.
– The external auditor should obtain a sufficient understanding of internal audit activities to identify and assess the risk of material misstatement of the financial statements and to design and perform further audit procedures.
– The external auditor should perform an assessment of the internal audit function, when internal auditing is relevant to the external auditor’s risks assessments.
– Liaison with internal auditing is more effective when meetings are held at appropriate intervals during the period. The external auditor would need to be advised of and have access to relevant internal auditing reports and be kept informed of any significant matter that comes to the internal auditor’s attention which may affect the work of the external auditor. Similarly, the external auditors would ordinarily inform the internal auditor of any significant matters which may affect internal auditing;
2. Studies regarding the relationship between internal audit and external audit.
First relevant study regarding the interaction between internal audit and external audit was realized by Mautz R. (1984), and the results of this study showed that, from internal audit’s point of view, the relationship with external audit is only ostensibly a very good one. Because Mautz has not anticipated the existence of such negative reactions from internal auditors, regarding their working with external auditors, questions addressing causality were omitted from his survey.
Later, peacock E. and palfrey S. (1989) realized a survey through they tried to assess the current attitudes of internal auditors towards their working relationships with external auditors, trying also to identify the reasons behind any negative attitudes which were expressed. This survey was conducted of two groups: first group was represented by internal audit directors, and the second group was formed by staff auditors who work directly with external auditors. Both groups were asked to evaluate the overall performance of their organization’s external auditor and their perceived relationship with the external auditor. Next, we present the main results obtained through this survey:
- 92% from internal audit directors appreciated that external auditors make full use of the expertise of the internal audit staff.
- 50% of internal audit directors perceived that relationship between internal audit and external audit is an “excellent” one, while 31% appreciate this relationship as “good”;
- Staff auditors differed substantially in their perceptions of the external auditors’ of the internal auditor’s expertise. Only 39% of staff auditors considered that the external auditors fully utilized their expertise;
- Starting from the statement of Morris N. (MorrisN., 1981) that “the external audits firm has the ear of the board of directors and, where one is established, the audit committee. Internal auditors do not have the same relationship”, Peacock E. and Pelfrey S. wanted to identify the relationship between internal audit and audit committee. From this point of view, more that 80% of the respondent directors of their study indicated that their companies have an audit committee, and that the internal audit department has a defined reporting relationship with that committee;
- The majority of the respondent directors reported that they were furnished access to the letter of external audit either before or after presentation to the board of directors. They are also asked to comment on its findings;
- Another conclusion of this survey was that, generally, individual external auditors do not recognize the contribution of individual internal audit staff, internal auditors considering that that they perform more than one third of the external audit work;
- General conclusion of this survey was that internal audit directors perceived a good relationship between internal and external auditors, and this perception could be the result of company policies which give internal auditing (1) a direct reporting relationship to the audit committee of the board of directors, and (2) the opportunity to respond to any criticism by the external auditors in the management letters;
- Internal auditing emphasizes operational auditing and may involve non-financial data, whereas financial auditing is concerned primarily with historical data, in order to be able to identify possible ways of improving future business operations. Internal audit staffs consider their external audit tasks to the less important that the work they perform as operational auditors.
Another study with a relevant contribution at the researching of the relationship between internal and external audit was conducted by Reinstein A., Lander G.H. and Gavin T.A. (1994). The starting point of this survey was assured by statement on Auditing Standards (SAS 65) issued in April 1991 by the American Institute of Certified Public Accountants (AICPA), SAS 65 “The Auditor’s consideration of the Internal Audit function in an Audit of Financial Statements” whose main objective was to clarify various aspects of the working relationship which should exist between external and internal auditors.
This standard issued by AICPA proposes to establish new guidelines for external auditors, to help them to use the result of internal audit activity more effectively and efficiently; to help external auditors to understand how could they adapt their working procedures based on internal auditor’s work, and also who to assess, evaluate and test the internal auditor’s competence, objectivity and work. External auditors should: (1) understand the internal auditor’s role when assessing their clients control structure and (2) not accept the internal auditor’s work as their own. The respondents of this study realized by Reinstein A., Lander G.H. & Gavin T.A. were divided in four groups:
(1) the chief internal auditor (IA); (2) the chief financial officer (CFO) (3) the chair of the audit committee (AC) and (4) the external auditor (EA) in charge of the audit. The survey concerned on three major points: the testing of the general understanding of financial statement audit realized by internal auditors: the testing of the assessment realized by external audit regarding the internal audit’s competence; the testing of the assessment of internal audit’s objectivity.
General conclusion was that, in most organizations, internal and external auditors have developed a “teamwork” approach to the audit for some time, and the provisions of SAS 65 appear to have had minimal effect on these types of relationships. In situations where the internal audit staffs do not maintain the required level of professionalism or the organization is changing auditing firms, external auditors now have new guidance to help them use internal auditors more effectively and efficiently. Given the recent increase in the stature of the internal audit professional and the need for external auditors to control audit costs, SAS 65 should serve both types of auditors well as they co-ordinate their efforts.
A major part of external auditors trust to the result of internal audit activity, and this confidence is going to grow quite fast in the next future (Ward, D.D. & Robinson, J.C, 1980). Schneider (1984) realized a descriptive model study through the examined three major factors of internal auditing that have big influences over the confidence of external audit in the internal auditing: (1) objectivity (2) competence and (3) work performed.
The results obtained by Schneider showed that, from external auditors’ point of view, the most important factor is the quality of the work performed by internal audit, next important factors being competence and objectivity. The competence is defined by Arens and Loebbecke (1991) as being that quality of a person that accepts a professional engagement and which also has the necessary technical knowledge in order to fulfill that engagement.
Maletta (1993) examined the effect of inherent risk on the extent to which internal auditors’ objectivity, competence and work performed affected external auditors’ decision to rely on them. The conclusion was that all three factors affected external auditors’ reliance judgment. There were significant interactions between “objectivity” and “competence”, between “objectivity” and “work performed” and three way interactions among those factors.
The significant three way interactions suggested that inherent risk does affect external auditors’ reliance decision. The result also showed that when inherent risk is high, external auditors’ consider the nature of the previous work performed by internal auditors only when internal auditors’ objectivity is high. When inherent risk is low, work performed has no significant effect on external auditors’ judgment. Also, external auditors appeared to use more complex configurable decision processes only when inherent risk is high. Across inherent risk conditions, internal auditor competence is the most important of the three factors, followed by “objectivity” and “work performed”.
Another relevant study was conducted by Berry L. (1984), which examined the coordination of the relationship between internal and external audit, from internal audit’s point of view. The performance of the study was that it succeeded to identify the main criterions for the assessment of the competency, objectivity and performance of internal auditor. This study also established a coordination program for the relationship between these two functions-internal and external audit.
A common element of the studies mention before is that there are identified three major criterions that influenced the confidence given to the internal audit by external audit: competence, objectivity and the nature of the work performed by internal audit. In the same direction, we identified another relevant study realized by Haron H., Chambers A., Ramsi R. and Ismail I. (2004). Starting point of this survey is given by the fact that external auditors often rely on other professional for the audit of the financial statements of their clients.
Generally, external auditors rely on clients’ internal auditors. Reliance on internal auditors results in cost savings to the client. The objective if this study was to determined which of the criterions uses by internal auditor is the evaluation of internal audit activity (objectivity, competency and the quality of work performed by internal audit) has major influences over the decision of considering the results of internal audit activity. The findings of the study indicated that technical competence and work performed are the two most important criterions that external auditors consider in their reliance on internal auditors.
The objectivity of internal audit is not considered as being significant, from external auditor’s point of view, a possible explanation being the fact of internal auditors are seen as the employees of the organization, so objectivity is not an important element that could affect the decisions of external auditors regarding their reliance on internal auditors.
The result showed that, from “competency” criterion’s point of view, external auditors view only an ongoing training program that includes a thorough coverage of the company’s operations, policies and procedures to be an important element for them to rely on the internal auditors. Professional certification of internal auditors was not viewed as important. Under the “work performed” criterion, external auditors placed importance on whether the follow-up procedures on deficiencies in the company systems, methods, and/or procedures noted in prior audits were satisfactory. This could be due to the fact that the follow-up procedures could be an indication of the quality of work performed by the internal auditors.
These criterions, “competency” and “work performed” identified by Haron H., Chambers A., Ramsi R. and Ismail I. (2004) are consistent with previous studies (Maletta M.,1993; Tiessen P. & Colson R.H., 1990; Schneider A., 1984). Next, we present a short synthesis of the most important survey regarding the important criterions that external auditors take into consideration in their reliance on internal auditors.
Table no. 1
Significant criterions in the decision process regarding the reliance of external auditors and internal auditors.
|Brown, R.P. (1983)||Independence/Objectivity; Work performed.|
|Schneider, A. (1984)||Work performed; Competence;|
|Tiessen, P. & Colson, K.H. (1990)||Work performed; Competence; Objectivity|
|Maletta, M. (1993)||Objectivity, Competence, Work performed.|
|Haron H. et al.. (2004)||Competence, Work performed.|
Through this review of the main studies regarding the relationship between internal and external audit, we consider that we succeeded to emphasize some significant aspects that influences this relationship. In spite of the fact that these two functions are net differenced, there would be identified some complementary relationships whose good practical applying assures for the whole organization a guarantee efficacy
3. Similarities and differences between internal audit and external audit.
Next; we present the main similarities that could be identified between internal and external audit:
- Ø Both internal and external audit profession are governed by one set of international standard issued by the professional organism specific for each profession. This set of international standards includes the professional standards and the ethical code.
- Ø Risk is a very important element the planning process for both internal and external auditors;
- Ø For both professions, the independence of auditor is very important
- Ø Internal and external audit are both concerned over the internal control system of the organization.
- Ø Both functions are interested in the cooperation between internal and external auditors.
- Ø For both functions, the results of their activity are presented through audit reports.
Continuing our research activity, next we will try to underline the main differences between internal and external audit functions:
|No||Criterions||Internal Audit||External Audit|
|1||Position inside the organization||The internal auditors’ are part of the organization. Their objectives are determined by professional standards, the board, and management. Their primary clients are management and the board.||External auditors are not organization, but are engaged by it. Their objectives are set primarily by status and their primary clients – the board of director.|
|2||Objectives||The internal auditor’s scope of work is comprehensive. It serves the organization by helping it accomplish its objectives, and improving operations, risk management, internal controls, and governance processes. Concerned with all aspects of the organization- both financial and non-financial – the internal auditors focus on continuous review and evaluation of controls and processes.||The primary mission of the external auditors is to provide an independent opinion on the organization’s financial statements, annually.|
|3||Independence||Internal audit must be independent from the audited activities.||External audit is independent from its client, the organization. Its independence being specified to liberal professions.|
|4||Approach of internal control||Internal audit regards all the aspects regarding the organization’s internal control system.||External audit regards the internal control system only from the materiality perspective, which permits them to eliminate those errors that aren’t significant, because they don’t have influences over the financial results.|
|5.||Applying of the audit||Internal audit covers all the organization’s transactions.||External audit covers only those operations that have a contribution at the financial results and the performances of the organization.|
|6.||Frequency of the audit||Internal audit performs during the entire year, having specific missions established in according with the level of risks identified for each auditable entity.||External audit is an activity with a yearly frequency, as a rule, at the end of the year.|
|7.||Approach of risk||The importance of risk for the planning of internal audit activity is very high, the assessment of risk being combined with other types of information like financial and operational.||External audit use the information of risks for the determination of nature, period of time and necessary audit procedures that should be performed in the auditable area, taking into consideration only financial aspects.|
|8.||Consideration of risk||Internal audit takes into consideration at least next risk factors: (Colbert, J.L., (1995):|
-Ethical climate and pressure on management to meet objectives;
-competency, adequacy, and integrity of personnel;
– Asset size, liquidity, or transaction volume;
– Financial and economic conditions;
– competitive conditions;
– Impact of customers, suppliers, and government regulations;
– Date and result of previous audits.
– Degree of computerization.
– Geographic dispersion of operations;
– Adequacy and effectiveness of the system of internal control.
– Organizational, technological, or economic changes;
– management judgments and accounting estimates;
– Acceptance of audit findings and corrective action taken.
External audit takes into consideration next risk factors:
– Management operating and financial decisions are dominated by a single person;
– Management, particularly senior accounting personnel turnover is high;
– Management places undue emphasis on meeting earning projections;
– Management reputation in the business community is poor.
– Profitability of entire relatives to its industry is inadequate or inconsistent;
– Sensitivity of operating results to economic factors is high;
– Rate of change in entity’s industry is rapid.
– Entity’s industry is declining with many business failures;
– Organization is decentralized without adequate monitoring.
– Internal or external matter raises substantial doubt about the entity’s ability to continue as a going concern;
– Continuous or difficult accounting issues are prevalent;
– There are significant and unusual related party transactions not in the ordinary course business.
– The nature cause (if known), or amount of known and likely misstatements detected in the audit of prior period’s financial statements is significant.
– Client is new with no prior audit history or sufficient information is not available from the predecessor auditor.9.Approach of fraudInternal audit is concerned about the frauds from all activities from the organization.External audit is concerned only about the fraud from financial areas.
Source: Synthesis realizes by authors
As we mentioned before, between these two functions there could be identified some complementary relationships, identifies also by Renard .J. (2002), whose beneficiaries are especially practitioners, and the practical applying of these complementary relationships could assure the necessary premises for the growing of efficacy for the whole organization.
- Internal audit is a complement of external audit, because in those organizations where internal audit function is implemented, external audit is more determined to appreciate in a different manner the regularity, sincerity and fair view of the results and financial statements.
- External audit is a complement of internal audit, starting from the idea that where an external specialist made his job, it is certain that there is a better control. Also, internal auditor could have significant benefits as a result of external audit activity, in order to express his opinion or to argue his recommendations.
According to IIA’s recommendations, the ideal situation is when the internal and external auditors meet periodically to discuss common interest; benefits from their complementary skills, areas of expertise, and perspectives; gain understanding of each other’s scope of work and methods; discuss audit coverage and scheduling to minimize redundancies; provide access to reports, programs and working papers; and jointly assess areas pf risk. In fulfilling its oversight responsibilities for assurance, the board should require coordination of internal and external audit work to increase economy, efficiency, and effectiveness of the overall audit process.
Auditing processes for both internal auditors and external auditors have changes in the past eight to ten years (Lemon, M.W. & Tatum K.W., 2003). The main factors that prompted these changes included the globalization of business, advances in technology, and demands for value-added audits. Figure no.1 illustrates these changes in practice, which initiated changes in both internal and external
Fig. no. 1 – Convergence of Internal Audit and External Audit Functions.
Source: Rittenberg, L.E. & Covaleski, M. (1997)
Arens, A.A. & Loebbecke, J.K. – Auditing: An Integrated
Approach, prentice –Hall International, Englewood Cliffs, 1991.
. Berry, L. – Coordinating Total Audit Coverage: trends and Practices, IIA Inc., Altamonte Springs, Florida, 1984.
Colbert, J.L.- Risk: internal and external auditors operate from two different, official definitions of risk, Internal Auditor, October, 1995.
Dobroteanu, L & Dobroteanu C.L. –si practice, abordare nationala si internationala, Editura Economica, Bucuresti, 2002 concepts.
Haron, H. & Chamers, A. & Ramsi, R. & Ismail, I. – The reliance of external auditors on internal auditors, Managerial Auditing Journal, 2004, Vol. 19 No, 9,pp. 1148-1159.
Lemon, M.W. & Tatum K.W., – Internal auditing’s systematic, disciplines process, The Institute of Internal Auditors Research Foundation, 2003, accessible on-line la www.theiia.org.
Maletaa, M. – An examination of auditors’ decision to use internal auditors as assistants: the effect of inherent risk, Journal of Contemporary Accounting Research, 1993, Vol. 9 No. 2.
Mautz, R. – Internal and external auditors: how do they relate?, Corporaye Accounting, Vol.3 No. 4, 1984, pp.56-58.
Peacock, E.& Pelfrey, S. – How internal auditors view the external audit? The Internal
Auditor, June, 1989, Vol.46, pp.48-54
reinstein, A.,& Lander, G.H. & Gavin, T.A. – The External Auditor’s Consideration of the Internal Audit Function, managerial Auditing Journal, Vol.9 No. 7, 1994, pp. 29-36.
Renard J. – Teoria si practica auditului intern, ediitia a IV-a, Ministerul Finantelor Publice, Bucuresti, 2002.
Rittenberg, L.E.& Covalesski, M.-The Outsourcing Dilemma: What’s best for Internal Auditing, The Institute of Internal Auditors Research Foundation, Altamonte Springs, Florida, 1997.
Schmeider, A.- Modeling external auditors’ evaluations of internal auditing, Journal of Accounting Research, Vol. 22 No. 2, 1984,pp.657-78.
Teissa, P.& Colson, R.H,-External Auditor reliance on internal audit, Journal of Internal Auditing, Vol.5 No. 3,1990,pp.10-22.
Ward, D.D.& Robinson, J.C.- Reliance on internal auditors, Journal of Accountancy October, 1980, pp.62-73.