What are the core principles of internal audit?

The Journal of Accountancy article Proposed new guidance outlines 12 principles for internal auditing provides a further overview of the proposed changes. The actual proposal is available on the IIA’s website. The IIA is seeking comments by November 3, 2014. If approved, elements of the new framework could be available in the first quarter of 2015, followed by a new framework possibly in 2016. 

The mission for internal auditing is to enhance and protect organisational value by providing risk-based and objective assurance, advice and insight. 

We rely on a framework of principles and standards to help us achieve this – the International Professional Practices Framework.


Mandatory guidance

Some elements of the IPPF are considered essential to the professional practice of internal auditing – they are mandatory for members of the Chartered IIA. Members agree to conform to these principles with they join the institute. The mandatory elements of the IPPF, which are explored in more depth below, are:

Definition of internal auditing
Core principles
Code of ethics
International Standards

1. Definition of internal auditing 

Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organisation's operations. It helps an organisation accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes. 

2. Core principles 

The core principles articulate internal audit effectiveness and they should all be present and operating effectively.

  1. Demonstrates integrity.
  2. Demonstrates competence and due professional care.
  3. Is objective and free from undue influence (independent).
  4. Aligns with the strategies, objectives, and risks of the organization.
  5. Is appropriately positioned and adequately resourced.
  6. Demonstrates quality and continuous improvement.
  7. Communicates effectively.
  8. Provides risk-based assurance.
  9. Is insightful, proactive, and future-focused.
  10. Promotes organisational improvement.

3. Code of ethics 

The internal audit profession is founded on the trust placed in its objective assurance about risk management, control, and governance. The code of ethics provides principles and rules of conduct relating to integrity, objectivity, confidentiality and competency. 

Read more about the code of ethics 

4. International Standards

The International Standards is an authoritative set of guidance consisting of statements of basic requirements for the practice of internal audit and interpretations that clarify terms or concepts within those statements. The Standards were last updated on 1 January 2017.

The structure of the Standards is divided between attribute and performance standards:

  • Attribute standards address the attributes of organisations and individuals performing internal auditing.
  • Performance standards describe the nature of internal auditing and provide quality criteria against which the performance of these services can be measured. 

Read more about the Standards  


The IPPF also includes guidance to help internal auditors implement the Standards and apply best practice to all internal audit work. This forms the 'recommended' element of the framework. 

Two kinds of guidance are produced:

Implementation guides help internal auditors apply the Standards. They collectively address internal auditing's approach, methodologies, and consideration, but do not detail processes or procedures.

Supplemental guidance describes processes and procedures in detail as well as sector specific issues and topical areas. These guides will help you develop the tools, techniques and programmes you need with a step-by-step approach. Supplemental guidance will also help you to determine what the deliverables are. 

Position Papers set out the position of IIA Global in relation to a number of topics, including Fraud and Internal Audit and Internal Audit's role in Corporate Governance.

  • Technical Resources
    • Professional guidance
      • Introduction
      • Mission
      • Core Principles
      • Definition
      • Code of Ethics
      • Standards
      • Implementation Guidance
      • Supplemental Guidance
      • Standards Presentation
      • The IIA's Three Lines Model
    • 20 Critical Questions Series
    • Ask a question
    • Benchmarking studies
    • Bookstore & publications
      • Internal Audit in Australia
      • Managing Culture - A good practice guide
      • Australian Bookstore
      • Global Bookstore
      • Effective Internal Auditing in the Public Sector - a good practice guide
      • Internal Audit Better Practice Guide for Financial Services in Australia
      • Auditing risk culture - A practical guide
      • Project Assurance
    • Case Studies
    • Fact sheets
    • White Papers
      • Call for White Papers
    • Library services
    • Member Recommendations - Video series
    • Newsletter Q&A
    • State of the Nation
    • Software directory
    • Useful links
    • Knowledge Centre

  • Home
  • Professional guidance
  • Core Principles

Core Principles

What are the core principles of internal audit?

 

The Core Principles for the Professional Practice of Internal Auditing, taken as a whole, describe internal audit effectiveness. 

For an internal audit function to be considered effective, all Principles should be achieved. How an internal auditor, as well as an internal audit activity, demonstrates achievement of the Core Principles may vary from organisation to organisation, but failure to achieve any of the Principles would imply that an internal audit activity was not as effective as it could be in achieving internal audit’s mission (see Mission of Internal Audit):

  • Demonstrates integrity.
  • Demonstrates competence and due professional care.
  • Is objective and free from undue influence (independent).
  • Aligns with the strategies, objectives, and risks of the organisation.
  • Is appropriately positioned and adequately resourced.
  • Demonstrates quality and continuous improvement.
  • Communicates effectively.
  • Provides risk-based assurance.
  • Is insightful, proactive, and future-focused.
  • Promotes organisational improvement.

IMPLEMENTATION GUIDANCE

DEMONSTRATING THE CORE PRINCIPLES FOR THE PROFESSIONAL PRACTICE OF INTERNAL AUDITING

What are the 7 audit principles?

For reliable audits, there are 7 audit principles that an auditor should adhere to, set out by ISO 19011:2018 Guidelines for Auditing Management Systems..
Integrity. ... .
Fair Presentation. ... .
Due Professional Care. ... .
Confidentiality. ... .
Independence. ... .
Evidence-based approach. ... .
Risk-based approach..

What are the 5 C's of internal audit?

What Are the 5 C's of Internal Audit? Internal audit reports often outline the criteria, condition, cause, consequence, and corrective action.

What are the four principles that internal auditors need to uphold?

Internal auditors are expected to apply and uphold the following principles:.
Integrity. The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment..
Objectivity. ... .
Confidentiality. ... .
Competency..

What are the 4 C's of auditing?

As for directors, there are four features to consider when evaluating the sufficiency of any risk-based audit plan: culture, competitiveness, compliance and cybersecurity – let's call them the Four C's, for short.