An analysis of the differences in audit processes used in the audit of nonprofit and profit organisations

Nonprofits constitute a large part of collective behaviour in society. Presently there is little formal research addressing the role of audits in nonprofit organisations. Before models can be developed for the production of nonprofit auditing information, it is necessary to examine the present conduct of nonprofit audits. The Australian Accounting Research Foundation - Legislation Review Board has released a position paper on the Association Incorporation Acts in Australia - the most frequently used legal form for nonprofit organisations. The Board is addressing the issue of financial statement reporting including audit. This is coinciding with the investigations resulting from the collapse of the National Safety Council (Victorian Division), (NSC). The NSC, a nonprofit organisation formed as a company limited by guarantee, is in liquidation and the auditors are being sued for damages resulting from their alleged failure to perform their duties adequately.

Audit committee effectiveness : informal processes and behavioural effects

Purpose This paper seeks to investigate the conditions and processes affecting the operation and potential effectiveness of audit committees (ACs), with particular focus on the interaction between the AC, individuals from financial reporting and internal audit functions and the external auditors. Design/methodology/approach A case study approach is employed, based on direct engagement with participants in AC activities, including the AC chair, external auditors, internal auditors, and senior management. Findings The authors find that informal networks between AC participants condition the impact of the AC and that the most significant effects of the AC on governance outcomes occur outside the formal structures and processes. An AC has pervasive behavioural effects within the organization and may be used as a threat, an ally and an arbiter in bringing solutions to issues and conflicts. ACs are used in organizational politics, communication processes and power plays and also affect interpretations of events and cultural values. Research limitations/implications Further research on AC and governance processes is needed to develop better understanding of effectiveness. Longitudinal studies, focusing on the organizational and institutional context of AC operations, can examine how historical events in an organization and significant changes in the regulatory environment affect current structures and processes. Originality/value The case analysis highlights a number of significant factors which are not fully recognised either in theorizing the governance role of ACs or in the development of policy and regulations concerning ACs but which impinge on their governance contribution. They include the importance of informal processes around the AC; its influence on power relations between organizational participants; the relevance of the historical development of governance in an organization; and the possibility that the AC’s impact on governance may be greatest in non-routine situations.

Internal audit department characteristics/activities and audit fees : some evidence from Hong Kong firms

This study provides preliminary support for the notion that internal audit function assists in reducing external audit effort and fees. Data on internal audit characteristics and activities are obtained from survey respondents of Hong Kong companies and audit fee model data are acquired from their annual reports. The results of this study suggest that the external auditor of firms in Hong Kong rely on the internal audit function and subsequently charge a lower fee. Lower external audit fees are associated with a larger internal audit department and certain activities carried out by the internal audit. Specifically, lower external audit fees are associated with more internal audit effort spent on activities relating to financial statements, systems development and maintenance, operating efficiency and effectiveness, fraud investigations and unlimited access to internal auditors’ working papers. The results of this study suggest that the contribution of the internal audit may substitute for some substantive external auditing processes and lower monitoring costs.

Legislative and security requirements of audit material for evidentiary purpose

This research used the Queensland Police Service, Australia, as a major case study. Information on principles, techniques and processes used, and the reason for the recording, storing and release of audit information for evidentiary purposes is reported. It is shown that Law Enforcement Agencies have a two-fold interest in, and legal obligation pertaining to, audit trails. The first interest relates to the situation where audit trails are actually used by criminals in the commission of crime and the second to where audit trails are generated by the information systems used by the police themselves in support of the recording and investigation of crime. Eleven court cases involving Queensland Police Service audit trails used in evidence in Queensland courts were selected for further analysis. It is shown that, of the cases studied, none of the evidence presented was rejected or seriously challenged from a technical perspective. These results were further analysed and related to normal requirements for trusted maintenance of audit trail information in sensitive environments with discussion on the ability and/or willingness of courts to fully challenge, assess or value audit evidence presented. Managerial and technical frameworks for firstly what is considered as an environment where a computer system may be considered to be operating “properly” and, secondly, what aspects of education, training, qualifications, expertise and the like may be considered as appropriate for persons responsible within that environment, are both proposed. Analysis was undertaken to determine if audit and control of information in a high security environment, such as law enforcement, could be judged as having improved, or not, in the transition from manual to electronic processes. Information collection, control of processing and audit in manual processes used by the Queensland Police Service, Australia, in the period 1940 to 1980 was assessed against current electronic systems essentially introduced to policing in the decades of the 1980s and 1990s. Results show that electronic systems do provide for faster communications with centrally controlled and updated information readily available for use by large numbers of users who are connected across significant geographical locations. However, it is clearly evident that the price paid for this is a lack of ability and/or reluctance to provide improved audit and control processes. To compare the information systems audit and control arrangements of the Queensland Police Service with other government departments or agencies, an Australia wide survey was conducted. Results of the survey were contrasted with the particular results of a survey, conducted by the Australian Commonwealth Privacy Commission four years previous, to this survey which showed that security in relation to the recording of activity against access to information held on Australian government computer systems has been poor and a cause for concern. However, within this four year period there is evidence to suggest that government organisations are increasingly more inclined to generate audit trails. An attack on the overall security of audit trails in computer operating systems was initiated to further investigate findings reported in relation to the government systems survey. The survey showed that information systems audit trails in Microsoft Corporation's “Windows” operating system environments are relied on quite heavily. An audit of the security for audit trails generated, stored and managed in the Microsoft “Windows 2000” operating system environment was undertaken and compared and contrasted with similar such audit trail schemes in the “UNIX” and “Linux” operating systems. Strength of passwords and exploitation of any security problems in access control were targeted using software tools that are freely available in the public domain. Results showed that such security for the “Windows 2000” system is seriously flawed and the integrity of audit trails stored within these environments cannot be relied upon. An attempt to produce a framework and set of guidelines for use by expert witnesses in the information technology (IT) profession is proposed. This is achieved by examining the current rules and guidelines related to the provision of expert evidence in a court environment, by analysing the rationale for the separation of distinct disciplines and corresponding bodies of knowledge used by the Medical Profession and Forensic Science and then by analysing the bodies of knowledge within the discipline of IT itself. It is demonstrated that the accepted processes and procedures relevant to expert witnessing in a court environment are transferable to the IT sector. However, unlike some discipline areas, this analysis has clearly identified two distinct aspects of the matter which appear particularly relevant to IT. These two areas are; expertise gained through the application of IT to information needs in a particular public or private enterprise; and expertise gained through accepted and verifiable education, training and experience in fundamental IT products and system.

Supermarkets and private standards : unintended consequences of the audit ritual

Recent scholarship has considered the implications of the rise of voluntary private standards in food and the role of private actors in a rapidly evolving, de-facto ‘mandatory’ sphere of governance. Standards are an important element of this globalising private sphere, but are an element that has been relatively peripheral in analyses of power in agri-food systems. Sociological thought has countered orthodox views of standards as simple tools of measurement, instead understanding their function as a governance mechanism that transforms many things, and people, during processes of standardisation. In a case study of the Australian retail supermarket duopoly and the proprietary standards required for market access this paper foregrounds retailers as standard owners and their role in third-party auditing and certification. Interview data from primary research into Australia’s food standards captures the multifaceted role supermarkets play as standard-owners, who are found to impinge on the independence of third-party certification while enforcing rigorous audit practices. We show how standard owners, in attempting to standardize the audit process, generate tensions within certification practices in a unique example of ritualism around audit. In examining standards to understand power in contemporary food governance, it is shown that retailers are drawn beyond standard-setting into certification and enforcement, that is characterized by a web of institutions and actors whose power to influence outcomes is uneven.

Organizational work-related road safety situational analysis: More than just an audit tool

Although safety statistics indicate that road crashes are the most common form of work-related fatalities, many organizations fail to treat company vehicles in the same manner as other physical safety hazards within the workplace. Traditionally, work-related road safety has targeted primarily driver-related issues and not adequately addressed organizational processes, such as the organizations’ safety system and risk management processes and practice. This inadequacy generally stems from a lack of specific contextual knowledge and basic requirements to improve work-related road safety, including the supporting systems to ensure any intervention strategy or initiative’s ongoing effectiveness. Therefore, informed by previous research and based on a case study methodology, the Organizational Work-Related Road Safety Situational Analysis was developed to assess organizations’ current work-related road safety system, including policy, procedures, processes and practice. The situational analysis tool is similar to a safety audit however is more comprehensive in detail, application and provides sufficient evidence to enable organizations to mitigate and manage their work-related road safety risks. In addition, data collected from this process assists organizations in making informed decisions regarding intervention strategy design, development, implementation and ongoing effectiveness. This paper reports on the effectiveness of the situational analysis tool to assess WRRS systems across five differing and diverse organizations; including gas exploration and mining, state government, local government, and not for profit/philanthropy. The outcomes of this project identified considerable differences in the degree by which the organizations’ addressed work-related road safety across their vehicle fleet operations and provides guidelines for improving organizations’ work-related road safety systems.

Improving the outcomes of foot and ankle surgery through the audit cycle : a case study

The direct costs of managing adverse outcomes from Australian health care are estimated to be $2 billion. The audit cycle is considered an important tool to assist in the preventive management of adverse outcomes.Australian guidelines for audit cycle design allow for comparison of data sets derived from similar surgical specialities. However a lack of data set standardisation inhibits meaningful comparisons of foot and ankle surgical audits. This research will assist development of a best practice model for auditing foot and ankle surgery. Data derived from this model will improve the safety and quality of foot and ankle surgery. The preliminary phase of this process is to identify and understand the attitudes and behaviours of how and why surgeons participate in the audit cycle. A descriptive embedded multiple case study research design is planned to provide an intense focus on a single phenomenon (the audit cycle) within its real life context (clinical governance). The measures to be included in the case study have been identified by the Balanced Patient Safety Measurement Framework. These include: audit and peer review activity, provider attitudes to patient safety, safety learning, action and performance. A purposive sample of 6 to 8 surgeons (units of analysis) from 3 to 4 specialities (cases) will undergo semi-structured interview. This will investigate: current audit tools and processes; attitudes; and behaviours of surgeons to the audit cycle. Similarities in and differences between the units of analysis will indicate which identified measures function as barriers or enablers of the audit cycle. Reliability and validity (external and construct) will be assessed using established methods for case studies. The descriptive embedded multiple case study will reveal how and why foot and ankle surgeons participate in the audit cycle. This will inform further research to improve the outcomes of foot and ankle surgery through development of an audit tool.

Public policy on corporate audit committees : case study evidence of current practice

Corporate failures and malpractices have led to an increasing emphasis on the governance role of audit committees. The Smith report Audit Committee Combined Code Guidance and the Higgs Review of the Role and Effectiveness of Non-Executive Directors (now incorporated in a Revised Combined Code) represent further attempts to strengthen corporate accountability in the UK. Although the regulatory focus on audit committees indicates confidence in their role as part of the solution to governance failures, questions remain about their efficacy in practice. Against the background of the publication of the Smith report and the wider reliance on audit committees in several countries to help improve corporate accountability, this paper provides research evidence, drawn from an ACCA-sponsored project, on the processes and effects of the audit committees in three UK companies. This study complements other research on audit committees by adopting a case study approach, in order to reflect the importance of investigating audit committee operations from within the organisation and to develop a closer understanding of audit committee impact than is available from generally observable data. The empirical evidence for the case studies was obtained from semi-structured interviews with personnel involved in the audit committee process, internal documents made available by the companies, and publicly available information, including annual reports.

The corporate governance effects of audit committees

Arguments associated with the promotion of audit committees in many countries are premised on their potential for alleviating weaknesses in corporate governance. This paper provides a synthesis and evaluation of empirical research on the governance effects associated with audit committees. Given recent policy recommendations in several countries aimed at strengthening these committees, it is important to establish what research evidence demonstrates about their existing governance contribution. A framework for analyzing the impact of audit committees is described, identifying potential perceived effects which may have led to their adoption and documented effects on aspects of the audit function, on financial reporting quality and on corporate performance. It is argued that there is only limited and mixed evidence of effects to support claims and perceptions about the value of audit committees for these elements of governance. It is also shown that most of the existing research has focused on factors associated with audit committee existence, characteristics and measures of activity and there is very little evidence on the processes associated with the operation of audit committees and the manner in which they influence organizational behaviour. It is clear that there is no automatic relationship between the adoption of audit committee structures or characteristics and the achievement of particular governance effects, and caution may be needed over expectations that greater codification around factors such as audit committee members’ independence and expertise as the means of ‘‘correcting’’ past weaknesses in the arrangements for audit committees. The most fundamental question concerning what difference audit committees make in practice continues to be an important area for research development. For future research we suggest: (i) greater consideration of the organizational and institutional contexts in which audit committees operate; (ii) explicit theorization of the processes associated with audit committee operation; (iii) complementing extant research methods with field studie, and; (iv) investigation of unintended (behavioural) as well as expected consequences of audit committees.

Informal interactions between audit committees and internal audit functions : exploratory evidence and directions for future research

Purpose – This paper aims to recognise the importance of informal processes within corporate governance and complement existing research in this area by investigating factors associated with the existence of informal interactions between audit committees and internal audit functions and in providing directions for future research. Design/methodology/approach – To examine the existence and drivers of informal interactions between audit committees and internal audit functions, this paper relies on a questionnaire survey of chief audit executives (CAEs) in the UK from listed and non-listed, as well as financial and non-financial, companies. While prior qualitative research suggests that informal interactions do take place, most of the evidence is based on particular organisational setting or on a very small range of interviews. The use of a questionnaire enabled the examination of the existence of internal interactions across a relatively larger number of entities. Findings – The paper finds evidence of audit committees and internal audit functions engaging in informal interactions in addition to formal pre-scheduled regular meetings. Informal interactions complement formal meetings with the audit committee and as such represent additional opportunities for the audit committees to monitor internal audit functions. Audit committees’ informal interactions are significantly and positively associated with audit committee independence, audit chair’s knowledge and experience, and internal audit quality. Originality/value – The results demonstrate the importance of the background of the audit committee chair for the effectiveness of the governance process. This is possibly the first paper to examine the relationship between audit committee quality and internal audit, on the existence and driver of informal interactions. Policy makers should recognize that in addition to formal mechanisms, informal processes, such as communication outside of formal pre-scheduled meetings, play a significant role in corporate governance.

The Corporate Governance Effects of Audit Committee

This chapter provides a synthesis and evaluation of empirical research on the governance effects associated with audit committees. Given recent policy recommendations in several countries aimed at strengthening these committees, it is important to establish what research evidence demonstrates about their existing governance contribution. A framework for analyzing the impact of audit committees is described, identifying potential perceived effects which may have led to their adoption and documented effects on aspects of the audit function, on financial reporting quality and on corporate performance. It is also shown that most of the existing research has focused on factors associated with audit committee existence, characteristics, and measures of activity and there is very little evidence on the processes associated with the operation of audit committees and the manner in which they influence organizational behavior. It is clear that there is no automatic relationship between the adoption of audit committee structures or characteristics and the achievement of particular governance effects, and caution may be needed over expectations that greater codification around factors such as audit committee members’ independence and expertise as the means of ‘‘correcting’’ past weaknesses in the arrangements for audit committees. The most fundamental question concerning what difference audit committees make in practice continues to be an important area for research development. For future research we suggest: (1) greater consideration of the organizational and institutional contexts in which audit committees operate; (2) explicit theorization of the processes associated with audit committee operation; (3) complementing extant research methods with field studies; and (4) investigation of unintended as well as expected consequences of audit committees.

A process mining-based investigation of adverse events in care processes

This paper proposes the Clinical Pathway Analysis Method (CPAM) approach that enables the extraction of valuable organisational and medical information on past clinical pathway executions from the event logs of healthcare information systems. The method deals with the complexity of real-world clinical pathways by introducing a perspective-based segmentation of the date-stamped event log. CPAM enables the clinical pathway analyst to effectively and efficiently acquire a profound insight into the clinical pathways. By comparing the specific medical conditions of patients with the factors used for characterising the different clinical pathway variants, the medical expert can identify the best therapeutic option. Process mining-based analytics enables the acquisition of valuable insights into clinical pathways, based on the complete audit traces of previous clinical pathway instances. Additionally, the methodology is suited to assess guideline compliance and analyse adverse events. Finally, the methodology provides support for eliciting tacit knowledge and providing treatment selection assistance.

Principals of audit: Testing, data and ‘implicated advocacy’

Historically, school leaders have occupied a somewhat ambiguous position within networks of power. On the one hand, they appear to be celebrated as what Ball (2003) has termed the ‘new hero of educational reform'; on the other, they are often ‘held to account’ through those same performative processes and technologies. These have become compelling in schools and principals are ‘doubly bound’ through this. Adopting a Foucauldian notion of discursive production, this paper addresses the ways that the discursive ‘field’ of ‘principal’ (within larger regimes of truth such as schools, leadership, quality and efficiency) is produced. It explores how individual principals understand their roles and ethics within those practices of audit emerging in school governance, and how their self-regulation is constituted through NAPLAN – the National Assessment Program, Literacy and Numeracy. A key effect of NAPLAN has been the rise of auditing practices that change how education is valued. Open-ended interviews with 13 primary and secondary school principals from Western Australia, South Australia and New South Wales asked how they perceived NAPLAN's impact on their work, their relationships within their school community and their ethical practice.