The mission for internal auditing is to enhance and protect organisational value by providing risk-based and objective assurance, advice and insight.
We rely on a framework of principles and standards to help us achieve this – the International Professional Practices Framework.
Some elements of the IPPF are considered essential to the professional practice of internal auditing – they are mandatory for members of the Chartered IIA. Members agree to conform to these principles with they join the institute. The mandatory elements of the IPPF, which are explored in more depth below, are:
Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organisation's operations. It helps an organisation accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes.
The core principles articulate internal audit effectiveness and they should all be present and operating effectively.
The internal audit profession is founded on the trust placed in its objective assurance about risk management, control, and governance. The code of ethics provides principles and rules of conduct relating to integrity, objectivity, confidentiality and competency.
The International Standards is an authoritative set of guidance consisting of statements of basic requirements for the practice of internal audit and interpretations that clarify terms or concepts within those statements. The Standards were last updated on 1 January 2017.
The structure of the Standards is divided between attribute and performance standards:
The IPPF also includes guidance to help internal auditors implement the Standards and apply best practice to all internal audit work. This forms the 'recommended' element of the framework.
Two kinds of guidance are produced:
Implementation guides help internal auditors apply the Standards. They collectively address internal auditing's approach, methodologies, and consideration, but do not detail processes or procedures.
Supplemental guidance describes processes and procedures in detail as well as sector specific issues and topical areas. These guides will help you develop the tools, techniques and programmes you need with a step-by-step approach. Supplemental guidance will also help you to determine what the deliverables are.