Ýêîíîìè÷åñêèå íàóêè/7.Ó÷åò è àóäèò

Galynska O.

National University of Food Technologies, Ukraine

Manuilova A.

National University of Food Technologies, Ukraine

 

THE IMPORTANCE OF THE INTERNAL AUDIT IN A COMPANY. THE DIFFERENCES BETWEEN INTERNAL AND EXTERMAL AUDITING

 

Internal audits provide a number of important services to company management. These include detecting and preventing fraud, testing internal control, and monitoring compliance with company policy and government regulation. Establishing an internal audit function provides a vital step in the growth of a business.

Internal audit is a tool of control to measure and evaluate the effectiveness of the working of an organization primarily with accounting, financial and operational matters. The job of internal audit is to ensure that the company’s work is going on smoothly, efficiently and economically and that all the laws, rules and regulations governing the operations of the organization are adhered to, as well as ensuring that an effective internal control system exists to prevent errors, frauds and misappropriations.

Internal auditing activity is primarily directed at evaluating internal control. Under the COSO Framework, internal control is broadly defined as a process, effected by an entity's board of directors, management, and other personnel, designed to provide reasonable assurance regarding the achievement of the following core objectives for which all businesses strive [1, p. 81]:

·                   Effectiveness and efficiency of operations.

·                   Reliability of financial and management reporting.

·                   Compliance with laws and regulations.

·                   Safeguarding of assets.

Management is responsible for internal control, which comprises five critical components: the control environment; risk assessment; risk focused control activities; information and communication; and monitoring activities. Managers establish policies, processes, and practices in these five components of management control to help the organization achieve the four specific objectives listed above. Internal auditors perform audits to evaluate whether the five components of management control are present and operating effectively, and if not, provide recommendations for improvement.

Principles

The principles are as follows:

Integrity. The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment.

Objectivity. Internal auditors exhibit the highest level of professional objectivity in gathering, evaluating, and communicating information about the activity or process being examined. Internal auditors make a balanced assessment ofall the relevant circumstances and are not unduly influenced by their own interests or by others in forming judgments.

Confidentiality. Internal auditors respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so.

Competency. Internal auditors apply the knowledge, skills, and experience needed in the performance of internal auditing services [2].

The first tasks of a newly appointed internal auditor are: 

·                   to identify and assess, from a professional point of view, the working environment; 

·                   to make an initial objective assessment of the strengths and weaknesses of the organisation; 

·                   to establish and promote a positive image of himself; 

·                   to explain and communicate; 

·                   to integrate and obtain legitimacy by carrying out the first audit activities focussing on ad-hoc processes. 

The basic tasks of an internal auditor are: 

·                   to analyse the activities of the audited organisation on a permanent basis, to monitor the management of these activities, and to recommend adequate measures to improve the auditee‘s performance; 

·                   to verify the reliability and suitability of the information system; 

·                   to check whether the organisation's development policy, standards, and the instructions of the management are implemented correctly; 

·                   to monitor and revise the performance of financial management on all levels of company management; 

·                   to inform the management of any irregularity or anomaly revealed and to recommend appropriate measures for their elimination; 

·                   to assess the organisation's resources and ensure that all resources (human, material, and financial) are utilised appropriately so that the best possible results are achieved; 

·                   to conduct an audit and/or co-operate in the audit of all subordinated entities; 

·                   to verify whether the recommendations and measures proposed by the internal auditor have been implemented or not; 

·                   to support the realisation of changes and encourage the staff of the audited organisation to adapt to the new system.

Types of internal audit

Financial audit – evaluates whether the data in the auditee's financial statements correspond to the actual amounts of assets and liabilities, the sources of financing, the management of assets, and compliance with the approved budget of the audited organisation. On the basis of tests, it is possible to assess the strong and week sides of internal control. If too many operational defects are found, it will be necessary to carry out more account inspections and checks on the correctness, legitimacy, and regularity of the records. 

Audit of compliance (regularity) verifies compliance with the generally binding legal regulations in financial management and other activities performed by the auditee. It also evaluates the efficiency of financial management. It corresponds to basic audit work and is relatively easy from the point of view of conduct. For that reason, audit of this type may be assigned to younger auditors. 

Audit of performance evaluates the degree of economic efficiency and effectiveness in the use of material, financial, and human resources as part of task fulfilment by the audited organisation. With regard to its difficult nature, an audit of this type should be assigned to senior auditors. 

System audit evaluates whether the financial management procedures of the auditee are effective in revealing and eliminating deficiencies. System audit is also used to verify the compliance of financial operations with the provisions of generally binding legal regulations, internal directives, as well as the economic efficiency and effectiveness of these operations.

Audit of information systems evaluates the safety of information systems used by the audited organisation. Audit of this type is also used to assess the adequacy and integrity of data and information stored in the auditee's information system with regard to the nature and scope of its activities. The safety of an information system is defined as the level of protection against the misuse of information stored in the system, its damage, or destruction. 

External audit is an independent body which resides outside of the organisation which it is auditing. They are focused on the financial accounts or risks associated with finance and are appointed by the company shareholders. The main responsibility of external audit is to perform the annual statutory audit of the financial accounts, providing an opinion on whether they are a true and fair reflection of the company’s financial position. As the part of this, external auditors often examine and evaluate internal controls put in place to manage the risks which could affect the financial accounts, to determine if they are working as intended [3].

There are some differences and similarities of Internal Auditor versus External Auditor sorted out:

1.                The Different Objectives.

·                   The External Auditor. The external auditor seeks to test the underlying transactions that form the basis of the financial statements.

·                   The internal Auditor. The internal auditor, on the other hand, seeks to advise management on whether its major operations have sound systems of risk management and internal controls.

2.                The Main Differences.

There are, however, many key differences between internal and external audit and these are matters of basic principle that should be fully recognized.

1.                 The external auditor is an external contractor and not an employee of the organization as the internal auditor is. However, there is an increasing number of contracted-out internal audit functions where the internal audit service is provided by an external body.

2.                 The external auditor seeks to provide an opinion on whether the accounts show a true and fair view, whereas internal audit forms an opinion on the adequacy and effectiveness of systems of risk management and internal control, many of which fall outside the main accounting systems.

3.                The Main Similarities

The main similarities between internal and external audit are as follows:

1.                 Both the external and internal auditor carry out testing routines and this may involve examining and analyzing many transactions.

2.                 Both the internal auditor and the external auditor will be worried if procedures were very poor and/or there was a basic ignorance of the importance of adhering to them.

3.                 Both tend to be deeply involved in information systems since this is a major element of managerial control, as well as being fundamental to the financial reporting process.

4.                 Both are based on a professional discipline and operate to professional standards.

5.                 Both seek active co-operation between the two functions.

6.                 Both are intimately tied up with the organization’s systems of internal control.

7.                 Both are concerned with the occurrence and effect of errors and misstatement that affect the final accounts.

8.                 Both produce formal audit reports on their activities.

Thus, we can understand the importance of an internal auditor by understanding internal auditing. Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve the organization's operations. It helps the organization to accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control and governance processes.

 

References

1.                 Darnay A., Magee M. Encyclopedia of Small Business: Audits, Internal – P. 1230 [Electronic source] - Access Code: http://librarum.org/book/15435/81

2.                 Covel S. Businesses Face More Fraud in Downturn // The Wall Street Journal; Feb. 19, 2009

3.                 Patricia Lotich // Internal Audit Process: Why Every Organization Should Audit Themselves//Nov. 10, 2010 [Electronic source] – Access Code: http://thethrivingsmallbusiness.com/