Free IIA-CIA-Part1 IIA Updates

According to IIA standards, if nonconformance with the Standards affects the internal audit activity's ability to fulfill its professional responsibilities or meet stakeholder expectations, the internal audit activity should disclose the nonconformance and its impact. This is essential for maintaining transparency and accountability, ensuring that all stakeholders are informed of the internal audit's effectiveness and areas needing improvement.

IIA Standard 1322 - Disclosure of Nonconformance, which outlines requirements for disclosing the results of quality assurance and improvements, particularly concerning nonconformance.

The board of directors is responsible for setting the risk appetite of the organization. They define the level and type of risk the organization is willing to accept in pursuit of its goals and objectives. This strategic role ensures that the organization's risk management framework aligns with its long-term vision and governance structure.

IIA guidance on governance and risk management

Skimming is the type of fraud that involves an employee accepting cash payments and failing to record the sales, thereby diverting the cash for personal use. This kind of fraud occurs before the transaction is recorded in the accounting records, making it particularly stealthy since it does not directly affect the accounting system.

Fraud classification and types in internal audit literature

If the recommendations made by the internal audit activity regarding the organization's risk management function remain unaddressed, the next step should be for the chief audit executive (CAE) to discuss this matter with senior management and the board. This discussion aims to ensure that senior leaders are aware of the unaddressed risks and can take necessary actions to address the internal audit's findings effectively.

The IIA's International Standards for the Professional Practice of Internal Auditing, which stipulate the CAE's responsibilities in communicating significant risk exposures and control issues to senior management and the board.