Demonstrating the Core Principles for the Professional Practice of Internal Auditing
This practice guide explains the concepts embodied in the Core Principles and describes enablers, or specific ways to enable and demonstrate them. The guide also identifies measurable key indicators that enable the internal audit activity to define, measure, assess, and monitor demonstration of the Core Principles. The chief audit executive (CAE) should use these enablers and key indicators to customize an approach to demonstrating the Core Principles that is most applicable to its internal audit team. This customized approach may be used as the basis for a self-assessment tool that may supplement the internal audit activity’s quality assurance and improvement program (QAIP), as well as providing an easy-to-understand, high-level communication of the internal audit activity’s value and effectiveness to key stakeholders, such as senior management and the board.
Guida pratica

Demonstrating the Core Principles for the Professional Practice of Internal Auditing

IPPF

Auditing Third-party Risk Management

IPPF

Engagement Planning: Establishing Objectives and Scope
Audit Reports
Executive SummaryAs the demand for internal audit value shifts from a retrospective view to a forward-looking perspective, internal auditors are expected to adapt with innovative methods to assess and communicate internal audit results. Communicating engagement results effectively provides management the opportunity to take corrective actions in a timely manner. La Guida Pratica, scaricabile gratuitamente per tutti i soci AIIA, è acquistabile in formato elettronico per i non soci >>
Guida pratica

Audit Reports
Internal Audit and the Second Line of Defense
Executive SummaryAs governance and monitoring functions collaborate more closely to avoid duplication of effort, internal audit may be asked to take on responsibilities for risk management, compliance, regulatory oversight, and other governance activities.The chief audit executive (CAE) plays a critical role in navigating between internal audit’s traditional role and assuming responsibilities for risk management, compliance, and other governance functions. The CAE should be held accountable for preserving independence and objectivity, communicating with management and the board, and confirming management’s acceptance of risk to internal audit’s independence and/or auditor objectivity.To navigate through these competing challenges, internal auditors can look to The IIA’s guidance on effective risk management and control, and promulgated standards related to independence and objectivity. La Guida Pratica, scaricabile gratuitamente per tutti i soci AIIA, è acquistabile in formato elettronico per i non soci >>

Internal Audit and the Second Line of Defense
Business Continuity Management
Business continuity management (BCM) is a risk management approach based on business value. It matches business continuity capabilities and risks.The goal of BCM is to enable any organization to restore critical operational activities, manage communications, and minimize financial and other effects of a disaster, business disruption, or other major events.This practice guide specifically discusses the definitions of Business Continuity Management (BCM) and Crisis Management (CM), the activities that may be performed by internal audit before, during, and after a crisis and internal audit’s evaluation of key BCM elements. Also, practice aids are provided in the appendices. La Guida Pratica, scaricabile gratuitamente per tutti isoci AIIA, è acquistabile in formato elettronico per i non soci >>
Presentazione

Business Continuity Management