Behind the Tick: What Can Your Internal Audit Really Do for You?

Updated on April 16, 2017
Katrina McKenzie profile image

As the founder of KLM Audit & Compliance I relieve the stress and worry business people often feel when dealing with compliance issues.

Internal Audit for the Wrong Reasons

With Internal audit now becoming a requirement, businesses sometimes hire audit staff purely to be able to tick that box, with no further idea what to do with them.

Many auditors find they are just reproducing external audits, and while that might help when the external auditors came to visit, it doesn’t provide much in the way of valuable information for the business.

An internal audit should be a constructive exercise designed to determine the extent to which a management system is complying with its own procedures and practices. An internal audit can also identify improvements to the business processes and help with internal communications.

What Are Internal Audits?

Although internal audits are usually conducted by company employees, there has been a rise in external specialists being hired for the sole purpose of auditing. Just as you outsource your legal or financial roles you can also outsource audit roles.

Your internal audit is the most important of all audits. It lets a business look at its own systems, procedures and activities to decide if they are right for the business and whether staff are actually following them.

It provides management with information on whether their quality standards are being met, whether the system is as efficient and as effective as it should be and whether improvements are needed.

Also they can provide a line of communication throughout the company and be a great motivator.

What Internal Audits Are Used for

The criteria for Internal audits is usually the business’s own policies, procedures and work instructions.

You are not looking to audit directly against a particular external standard during an internal audit, basically duplicating what a third party auditor would do; instead you are ensuring that your own policies and procedures are being used correctly in the day-to-day tasks.

Providing the company's internal documents have been developed in line with all the external compliance requirements, and reference the appropriate standards, your external requirements should be covered. However, an understanding of the standards and requirements does help to provide a basis as to what the documentation should include.

Audits Don't Need to be Feared

Most standards and codes require audits. Audits should be seen as a benefit to the company, rather than chore or an imposition.

An audit is used to gather information which is then reviewed and reported on. This report will often discuss the need for improvement or corrective actions.

But an audit is not a witch hunt to place blame on an individual staff member or a particular area of the business. Audits should be conducted in a positive and transparent manner. Your auditor should make you and your staff feel at ease and confident about the audit, rather than fearful.

Your auditor needs to work with you to make sure your audit works for you, while still staying independent and objective about any information they have found.


What a Good Audit Can Do

  • Confirm if documented procedures are being followed
  • Provide accurate information on the effectiveness of current procedures
  • Assist with the development of continuous improvement plans
  • Identify where changes to procedures are needed
  • Improve awareness and understanding of process requirements
  • Help minimise risk
  • Improve work place safety
  • Improve internal communication
  • Confirm positive work practices
  • Provide information to help increase the sales of your products or services
  • Let you make more informed decisions to help your business grow

Internal Audit Schedules and Scopes

As we have established that you are not wanting to just tick a box, you actually want to put your Internal audits to good use, your audit schedule should be based on risk assessments that you complete. Which areas of your business are showing they need extra attention at the moment? Which areas would you like more information about how they are really doing?

You also need to review your available resources when setting your audit schedule. How many audits can you realistically complete in a year? How many should you be doing? Are you able to complete enough audits to make you feel comfortable you are meeting your external requirements as well as finding the information that you actually need?

Just as you need to prioritise when creating the annual audit schedule it is also a large part in developing the scope of the audits. The scope sets out what is actually going to be looked at in the individual audit. Given the potential size of the areas and processes to be audited it is critical to know where your attention is needed most.

Things to Consider

When creating your audit schedules and audit scopes you need to look at the following:

  • Recently completed risk assessments
  • Information relating to possible financial, product andsupply impacts
  • Quality of internal controls: Are they as strong as you believe they should be? Are they being used?
  • Any customer complaints received
  • Degree of change or stability: Has there been a large changeover of staff? Have the same staff been in the department since it started?
  • Results of the last audit engagement and any corrective actions listed: Have they all been acted on?
  • Discussions with staff at all levels about any areas they feel need attention
  • Are any special skills or knowledge required to complete the audit?

It Is Your Audit

Ultimately—regardless of who conducts the internal audit, internal staff or external contractors—it is your audit, and you need to know what information you are wanting to look at.

Audits can be as simple or as complicated as you like. And remember, you are the only one who really knows what information is valuable to you.

If you want to find out why one area of your business always appears to do better than others, or what is the most popular day for your staff to have a day off, an internal audit can help you find that out.

Please note: The above article is not intended to be used as stand-alone audit advice.

© 2017 Katrina McKenzie

Comments

Submit a Comment

No comments yet.

working

This website uses cookies

As a user in the EEA, your approval is needed on a few things. To provide a better website experience, toughnickel.com uses cookies (and other similar technologies) and may collect, process, and share personal data. Please choose which areas of our service you consent to our doing so.

For more information on managing or withdrawing consents and how we handle data, visit our Privacy Policy at: https://toughnickel.com/privacy-policy#gdpr

Show Details
Necessary
HubPages Device IDThis is used to identify particular browsers or devices when the access the service, and is used for security reasons.
LoginThis is necessary to sign in to the HubPages Service.
Google RecaptchaThis is used to prevent bots and spam. (Privacy Policy)
AkismetThis is used to detect comment spam. (Privacy Policy)
HubPages Google AnalyticsThis is used to provide data on traffic to our website, all personally identifyable data is anonymized. (Privacy Policy)
HubPages Traffic PixelThis is used to collect data on traffic to articles and other pages on our site. Unless you are signed in to a HubPages account, all personally identifiable information is anonymized.
Amazon Web ServicesThis is a cloud services platform that we used to host our service. (Privacy Policy)
CloudflareThis is a cloud CDN service that we use to efficiently deliver files required for our service to operate such as javascript, cascading style sheets, images, and videos. (Privacy Policy)
Google Hosted LibrariesJavascript software libraries such as jQuery are loaded at endpoints on the googleapis.com or gstatic.com domains, for performance and efficiency reasons. (Privacy Policy)
Features
Google Custom SearchThis is feature allows you to search the site. (Privacy Policy)
Google MapsSome articles have Google Maps embedded in them. (Privacy Policy)
Google ChartsThis is used to display charts and graphs on articles and the author center. (Privacy Policy)
Google AdSense Host APIThis service allows you to sign up for or associate a Google AdSense account with HubPages, so that you can earn money from ads on your articles. No data is shared unless you engage with this feature. (Privacy Policy)
Google YouTubeSome articles have YouTube videos embedded in them. (Privacy Policy)
VimeoSome articles have Vimeo videos embedded in them. (Privacy Policy)
PaypalThis is used for a registered author who enrolls in the HubPages Earnings program and requests to be paid via PayPal. No data is shared with Paypal unless you engage with this feature. (Privacy Policy)
Facebook LoginYou can use this to streamline signing up for, or signing in to your Hubpages account. No data is shared with Facebook unless you engage with this feature. (Privacy Policy)
MavenThis supports the Maven widget and search functionality. (Privacy Policy)
Marketing
Google AdSenseThis is an ad network. (Privacy Policy)
Google DoubleClickGoogle provides ad serving technology and runs an ad network. (Privacy Policy)
Index ExchangeThis is an ad network. (Privacy Policy)
SovrnThis is an ad network. (Privacy Policy)
Facebook AdsThis is an ad network. (Privacy Policy)
Amazon Unified Ad MarketplaceThis is an ad network. (Privacy Policy)
AppNexusThis is an ad network. (Privacy Policy)
OpenxThis is an ad network. (Privacy Policy)
Rubicon ProjectThis is an ad network. (Privacy Policy)
TripleLiftThis is an ad network. (Privacy Policy)
Say MediaWe partner with Say Media to deliver ad campaigns on our sites. (Privacy Policy)
Remarketing PixelsWe may use remarketing pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to advertise the HubPages Service to people that have visited our sites.
Conversion Tracking PixelsWe may use conversion tracking pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to identify when an advertisement has successfully resulted in the desired action, such as signing up for the HubPages Service or publishing an article on the HubPages Service.
Statistics
Author Google AnalyticsThis is used to provide traffic data and reports to the authors of articles on the HubPages Service. (Privacy Policy)
ComscoreComScore is a media measurement and analytics company providing marketing data and analytics to enterprises, media and advertising agencies, and publishers. Non-consent will result in ComScore only processing obfuscated personal data. (Privacy Policy)
Amazon Tracking PixelSome articles display amazon products as part of the Amazon Affiliate program, this pixel provides traffic statistics for those products (Privacy Policy)