The Asia Pacific literature review on internal auditing

Purpose – By conducting the 2006 global Common Body of Knowledge (CBOK) study, The Institute of Internal Auditors (IIA) attempts to better understand the expanding scope of internal auditing practice throughout the world. The purpose of this review of recent internal auditing literature in Asia Pacific is to document how the internal audit function is changing in response to the shifts in global business practices.
Design/methodology/approach – The literature in Asia Pacific is reviewed with a focus on developments that have implications for the expanded scope of internal auditing and the changing skill sets of internal auditors. This focus has implications for CBOK 2006.
Findings – The literature indicates a paradigm shift in the activities performed by internal auditors. The increasing complexity of business transactions, a more dynamic regulatory environment in Asia Pacific, and significant advances in information technology have resulted in opportunities and challenges for internal auditors. Although in 2004, The IIA responded to the changing organizational environment by updating the professional practices framework, more work needs to be done to prepare internal auditors for the expanded set of skills and knowledge required to perform audits of the future.
Originality/value – By presenting an overview of past literature in Asia Pacific and discussing the shifting demands on internal audit services, the researchers hope to motivate further research in the field.

Internal audit - an Asia-Pacific profile and the level of compliance with internal auditing standards

Purpose – The purpose of this paper is to provide an overview of the profile of internal audit in five Asia-Pacific countries and investigate the usage and compliance with the Institute of Internal Auditors (IIA) International Standards for the Professional Practices of Internal Auditing (Standards) by organizations' internal audit activities (IAAs). This paper shows the differences between Australia, China, Japan, New Zealand and Taiwan. It also discusses part of the results of the Common Body of Knowledge 2006 global study conducted by the IIA.

Design/methodology/approach – The paper reports the results of a questionnaire survey sent to the global membership of the IIA in September 2006 on various aspects of internal audit practices.

Findings – The profile of internal audit differs amongst the countries with much older organizations exist in Australia, Japan and New Zealand. Respondents in New Zealand, Japan, Chinese Taiwan, China and Australia all report to have a reasonably high level of usage of Standards. However, Australia has the highest number of respondents who report that they are in full compliance of the Standards.

Originality/value – This is the first global study of internal auditors' compliance with the IIA Standards.

Effectiveness of the development of internal auditing in the Victorian Public Service (1982-1987)

The selection of an inappropriate regime by policy makers can thwart the effective implementation of public policy and lead to implementation failure. Competing values in the implementation process have a significant impact on the results of implementation, and the regime selected for implementation implies the choice of one value over another. Stoker has argued that on the one hand central leadership is valued for consistency, benefits of scale, co-ordination and cost sharing (instrumental model); and on the other, diffuse authority is valued as knowledge is particular and situational, and the task of analysis is to understand the problems, perspectives and interactions of implementation participants at the contact point between public programs and their clients (accommodation model). This study examines the implementation regime chosen by the Victorian Government for the introduction of a modern internal auditing function into the Victorian Public Service, using the Bureau of Internal Audit within its Department of Management and Budget. The selection of the Department of Management and Budget for the introduction of Internal Audit as a managerial accountability mechanism indicates that the instrumental model was held by the Victorian Government to be the most important in implementation. It is argued that use of a top-down central agency leadership approach resulted in implementation failure. Three propositions suggesting the mechanisms by which this result is brought about are examined: that lack of co-ordinated planning at the outset will result in inadequate definition of client needs as part of policy formulation; that intraorganisational conflict during the implementation success, as individual participants are likely to exercise their veto; and the increasing the number of participants contributes to complexity, so that they should only be involved in implementation when their presence is absolutely required. It is argued that the essential task of implementation is to create an environment where participants are likely to co-operate to achieve predetermined public policy goals; and that the introduction of a modern internal auditing approach into the Victorian Public Service required a more participatory implementation regime in order to facilitate policy outcomes and prevent implementation failure. It is also argued that the dominance of economic reform over accountability in Victoria restricted the ability of the Bureau of Internal Audit to implement change to internal audit practices within Victorian Government departments. The selection of an instrumental model of implementation by the Department of Management and Budget is examined in the context of the environment that existed in Victoria between 1982-1987; and while some of the values which Stoker associates with the top-down approach to policy making were observed, an alternative view to the development of internal auditing in the Victorian Public Service can be sustained.

The development of internal auditing in Ethiopia: the role of institutional norms

Purpose – The purpose of this paper is to examine the extent to which institutional norms determine attributes of internal audit practices and how institutional changes explain the development of these practices.

Design/methodology/approach – The authors employed a qualitative research approach based on archival analysis and interview evidence.

Findings – Findings indicate that regulation-based institutional norms explain the adoption of internal audit and the function's characteristics in Ethiopian organizations. Furthermore, innovative introduction of internal audit practices originate within individual organizations and eventually get institutionalized through diffusion. Such innovations are associated with organizational size, top management characteristics, internal audit advancement in technology, and exogenous input from the external environment. Widely accepted internal audit practices, as institutional norms, are not always taken-for-granted at the level of individual organizations. The institutional change perspective enables explaining how new internal audit approaches are introduced to supplant old ones.

Originality/value – This study theorizes the development of internal audit practices from an institutional change perspective. Being the first study to do so, it contributes to the understanding of key drivers of institutional change that initiate new institutional norms that foster the development of internal audit through introduction and diffusion of new audit practices as old ones are deinstitutionalized.

Internal auditor perceptions on audit committee interactions : a qualitative study in Malaysian public corporations

Audit committees (AC) and the internal audit function (IAF) are two key corporate governance mechanisms. The primary objective of this study is to provide insights into internal auditors' perceptions of their interactions with AC members in Malaysia. The paper thus contributes to the extant literature by providing additional evidence from a South-east Asian country which is recognised as being characterised with a high power distance culture and a developing capital market. The findings are based on in-depth interviews of the heads of the internal audit function (HIAFs) from 11 publicly listed companies. The results indicate infrequent informal communications and limited private meetings between the HIAFs and ACs, and a need for clear reporting lines. Further, ACs are seen to be held in high esteem for their authority and are expected to take on greater leadership in the inquiry of management's decision-making. These findings highlight the importance of the leadership role of ACs in supporting the IAF.

A critical analysis of the independence of the internal audit function : evidence from Australia

Purpose – This study aims to critically analyse the independence of the internal audit function through its relationship with management and the audit committee.

Design/methodology/approach – Results are based on a critical comparison of responses from questionnaires sent out to Australian chief audit executives (CAEs) versus existing literature and best practice guidelines.

Findings – With respect to the internal audit function's relationship with management, threats identified include: using the internal audit function as a stepping stone to other positions; having the chief executive officer (CEO) or chief finance officer (CFO) approve the internal audit function's budget and provide input for the internal audit plan; and considering the internal auditor to be a “partner”, especially when combined with other indirect threats. With respect to the relationship with the audit committee, significant threats identified include CAEs not reporting functionally to the audit committee; the audit committee not having sole responsibility for appointing, dismissing and evaluating the CAE; and not having all audit committee members or at least one member qualified in accounting.

Originality/value – This study introduces independence threat scores, thereby generating analysis of the internal audit function's independence taking into account a combination of threats.

Outsourcing of internal audit services in Australian firms : some preliminary evidence

Although internal auditing (IA) services have been traditionally performed in-house, organizations are increasingly outsourcing such services. Using a Transaction Cost Economics (TCE) perspective, this study examined the influence of several organizational-level variables on the decision to outsource or in-house their internal audit function. The study also identified the type of IA services that were likely to be out-sourced rather than in-housed, the extent to which incumbent external financial statement auditors participated in outsourced arrangements and the level of interaction between the internal audit provider and audit committees. The results have implications for auditor independence, corporate governance and organizational performance.

Internal audit independence and objectivity : emerging research opportunities

Purpose – The purpose of this paper is to provide a review of the recent literature on internal audit independence and objectivity and discuss opportunities for future research. The topics examined are the organizational status of internal audit, the internal auditor's dual role as a provider of assurance and consulting activities, internal audit's involvement in risk management, outsourcing and co-sourcing of internal audit activities, and the use of internal audit as a training ground for managers.
Design/methodology/approach – The approach used in this paper is a review of the literature followed by an identification of further research opportunities.
Findings – The paper summarizes the existing body of knowledge relating to internal audit independence and objectivity and identifies gaps in the literature where further research is needed.
Originality/value – The paper provides researchers with a useful summary of the literature on internal audit independence and objectivity and stimulates them to engage in further research in the area.

Internal audit involvement in enterprise risk management

Purpose – The purpose of this paper is to examine the impact of internal auditors’ involvement in enterprise risk management (ERM) on perceptions of their willingness to report a breakdown in risk procedures and whether a strong relationship with the audit committee affects such willingness to report. The study also investigates the use of ERM and the role of internal audit in ERM in Australian private and public sector entities.
Design/methodology/approach – The study uses an experimental design, manipulating the internal auditor’s involvement in ERM and the strength of the relationship between internal audit and the audit committee. Participants are 117 certified internal auditors. The study also gathers descriptive data on the use of ERM.
Findings – The study indicates that a high involvement in ERM impacts the perceptions of internal
auditors’ willingness to report a breakdown in risk procedures to the audit committee. However, a strong relationship with the audit committee does not appear to affect their perceived willingness to report. The study also finds that the majority of organisations have recently adopted ERM. Internal auditors are involved in ERM assurance activities but some also engage in activities that could compromise objectivity.
Research limitations/implications – There are internal and external validity threats associated with the experimental design.
Practical implications – The findings reinforce the need for organisations to adhere to the recommendations of the Institute of Internal Auditors and to ensure that internal auditors do not play an inappropriate role in ERM.
Originality/value – The paper contributes to our understanding of the impact of involvement in ERM on internal audit objectivity and of the current role of internal audit in ERM in Australia.

Accountability structures and management relationships of internal audit : an Australian study

Purpose – The purpose of this study is to examine the accountability structures and the management relationships of internal audit. In particular, related issues such as the predominant internal audit objectives and the related functions, the extent to which internal audit addresses any financial reporting risks and the manner in which internal auditors in Australia perform their tasks, are identified. The study also looks at the extent of compliance with the Institute of Internal Auditors (IIA) Standards.
Design/methodology/approach – Based on a survey of the chief audit executives in Australia, the study identifies the reporting mechanisms, functions and relationships of internal audit, including the contributions made towards good corporate governance. There is, however, some misalignment between the aspirations of internal auditors and their relationships with management.
Findings – While internal audit objectives have been established with a focus on controls, risks and governance, the study has highlighted the fact that there is a lack of correlation between the tasks performed by internal auditors and the important internal audit objectives, with the exception of internal control and risks. The results also suggest that internal auditors have been providing an internal consulting and advisory role in matters concerning IT systems, strategic risks and financial issues. If internal auditors are to proactively contribute to good corporate governance, they need to define how, and in what way, this can be done. In regard to corporate governance processes, the results of the research indicate that issues surrounding internal control, risk assessment and management processes are regarded as the key factors for internal audit to contribute to good corporate governance.
Originality/value – This study complements and contributes to the existing literature in providing insights into the evolving role of the internal audit function in terms of accountabilities and relationships with management. It also provides a valuable insight into how the internal audit profession can build upon its inherent strengths and address any apparent areas of concern. This will assist both the profession and policy makers alike, in better understanding and improving the role of the internal audit process.

Antecedents and organisational performance implications of internal audit effectiveness: Some propositions and research agenda

Purpose – The purpose of this paper is to synthesize relevant theoretical and empirical literature to develop propositions and suggest a research agenda on the antecedents and organisational performance implications of internal audit effectiveness.

Design/methodology/approach – The paper employs institutional theory and Karl Marx's theory of the “circuit of industrial capital” to synthesize relevant internal audit literature to develop theoretically justifiable propositions and highlight an operational research agenda.

Findings – Propositions and a research agenda are provided on potential antecedents of internal audit effectiveness and its possible association with company performance measured as rate of return on capital employed. Also, key variables are identified and operationalisation issues discussed.

Originality/value – As the extant literature does not provide a canon of internal audit effectiveness, the paper's originality is its argument that a positive association between compliance with standards for the professional practice of internal auditors and organisational goal achievement could serve as an approach to assess internal audit effectiveness. Furthermore, the use of the two theories in combination provides additional insights into identifying the antecedents of internal audit effectiveness and its measurement.

Value-added role of internal audit : an Ethiopian case study

Purpose – The purpose of this paper is to draw inferences – from the results of an Ethiopian public sector corporation (for-profit) case study – on how the attributes of a value-adding internal audit department would vary among organisations.

Design/methodology/approach – The case study strategy is employed. The internal audit function of a public sector corporation was examined using an analytical framework derived from the literature. Research evidence was gathered distributing questionnaires to managers and internal auditors, conducting a semi-structured interview with the internal audit department manager, and reviewing documents.

Findings – The results highlight that traditional/compliance audit is dominant in the organisation studied as contrasted with value-added auditing. The paper concludes that goals and strategies pursued and the level of risk faced by organisations to which internal audit provides service, appear to shape the attributes of a value-adding internal audit department. The study also demonstrates that the quality of strategic planning for, and marketing of, internal audit would influence the extent to which an appropriate value-added profile is attained in a particular context.

Research limitations/implications – Since a single unit of analysis is examined, universal generalisability of the findings cannot be claimed. Also, the research design assumed that the unit of analysis investigated falls within the scope of internal audit departments considered in the literature that served as a basis to develop the analytical framework and data collection instruments.

Originality/value – The paper is expected to inspire conclusive follow-on research on the role of internal audit in Ethiopia, or other countries with similar settings.

Internal audit effectiveness : an Ethiopian public sector case study

Purpose – The purpose of the study is to identify factors impacting the effectiveness of internal audit services.

Design/methodology/approach – Based upon a case study of a large public sector higher educational institution in Ethiopia, the paper examines how internal audit quality, management support, organizational setting, auditee attributes, and the interplay among these factors, influence internal audit effectiveness.

Findings – The findings of the study highlight that internal audit effectiveness is strongly influenced by internal audit quality and management support, whereas organizational setting and auditee attributes do not have a strong impact on audit effectiveness.

Research limitation/implications – As in all case studies, the generalisability of the conclusions is limited.

Originality/value – Internal audit services have apparently hitherto been the subject of limited examination. However, this study, in arguably the most thorough treatment so far, highlights the areas requiring improvement.