Audits, Internal

Ethical Practices Audit

An ethical business practices audit assesses the extent to which a company and its employees follow established codes of conduct, policies, and standards of ethical practices. Policies that may fall within the scope of such an audit include adherence to specified guidelines in such areas as procurement, conflicts of interest, gifts and gratuities, entertainment, political lobbying, ownership of patents and licenses, use of organization name, speaking engagements, fair trade practices, and environmentally sensitive practices.

Compliance Audit

A compliance audit determines whether the organizational unit or function is following particular rules or directives. Such rules or directives can originate internally or externally and can include one or more of the following: organizational policies; performance plans; established procedures; required authorizations; applicable external regulations; relevant contractual provisions; and federal, state, and local laws.

Financial Audit

A financial audit is an examination of the financial planning and reporting process, the conduct of financial operations, the reliability and integrity of financial records, and the preparation of financial statements. Such a review includes an appraisal of the system of internal controls related to financial functions.

Information Systems Audit

A systems development and life cycle review is a unique type of information systems audit conducted in partnership with operating personnel who are designing and installing new information systems. The objective is to appraise the new system from an internal control perspective and independently test the system at various stages throughout its design, development, and implementation. This approach intends to identify and correct internal control problems before systems are actually put in place because modifications made during the developmental stages are less costly. Sometimes problems can be avoided altogether. There is risk in this approach that the internal auditor could lose objectivity and independence with considerable participation in the design and installation process.

Program Audit

A program audit evaluates whether the stated goals or objectives of a certain program or project have been achieved. It may include an appraisal of whether an alternative approach can achieve the desired results at a lower cost. These types of audits are also called performance audits, project audits, or management audits.

Fraud Audit

A fraud audit investigates whether the organization has suffered a loss through misappropriation of assets, manipulation of data, omission of information, or any illegal or irregular acts. It assumes that intentional deception has occurred.

INTERNAL AUDIT PLANNING

Business consultants strongly encourage small business owners to establish self-auditing practices. "Not many years ago a company measured its success by how much of its product it was able to sell," stated Jeffrey Davidson and Charles Dean in Cash Traps: Small Business Secrets for Reducing Costs and Improving Cash Flow. "Today success is heavily influenced by the ability to keep costs under control and, of course, to maintain a healthy cash flow. Volatile interest rates, shrinking profit margins, and increasing operational costs are causing many businesses to reassess and upgrade their internal control procedures."

For a small business owner, knowing what areas to audit and where to commit resources is an integral part of the internal audit function. A long-range audit plan provides a complete view of audit strategy and coverage in relation to the relative significance of functions to be audited. The goal is to plan an audit strategy that is cost-effective and emphasizes audit projects that have high impact or address areas of significant risk. An in-depth understanding of the organization and how it operates is a prerequisite for the audit planning process. Developing the plan first requires identifying and listing all auditable units or functions. (This is frequently called the "audit universe.") Next, a rational system must be devised to assign significance and risk to each auditable unit or function. Based on perceived significance and estimated risk, the audit priorities and strategies are documented in the audit plan.

Business owners and managers, however, should recognize that the internal audit process is not a static one. Its character and emphasis should adapt to the changes that take place in the organization over time. Departure of key people, changes in markets, new demographics, new competitors, and other factors can dramatically affect the operations of small businesses and other organizations. Organizational processes and existing internal control systems may become obsolete with new technology. Legal and regulatory environments change with the political winds. Consequently, risks and significance rankings, the audit universe, and audit strategies will change. The successful small business owner, though, will learn to anticipate such changes, and adjust his or her internal auditing strategies accordingly.

 PREV  1 | 2 | 3 | 4