Ethics & The Auditor: Roles, Responsibilities, and Resolution 1 Lori Cox, CIA, CGAP IIA El Paso Chapter March 27, 2014

Ethics & The Auditor AGENDA  Ethics Defined  IIA’s Code of Ethics  Creating a Strong Ethical Climate – The Auditor’s Contribution  Evaluating Ethics – The Auditor’s Role  5 Ethical Principles  Your Ethical Compass  Ethical Dilemmas – What to do. 2

Ethics Defined The discipline dealing with what is good and bad and with moral duty and obligation. 3

Ethics Defined A set of moral principles or values. 4

Ethics Defined Well-founded standards of right and wrong that prescribe what humans ought to do. 5

Ethics Defined Norms for conduct that distinguish between acceptable and unacceptable behavior. 6

IIA Code of Ethics  A blueprint for “ethical behavior” by auditors.  The purpose of the IIA Code of Ethics is to promote an ethical culture in the profession of internal auditing. 7

IIA Code of Ethics - Principles 1. Integrity The integrity of internal auditors establishes trust and thus provides the basis for reliance on their judgment. 2.Objectivity Internal auditors exhibit the highest level of professional objectivity in gathering, evaluating, and communicating information about the activity or process being examined. Internal auditors make a balanced assessment of all the relevant circumstances and are not unduly influenced by their own interests or by others in forming judgments. 3.Confidentiality Internal auditors respect the value and ownership of information they receive and do not disclose information without appropriate authority unless there is a legal or professional obligation to do so. 4.Competency Internal auditors apply the knowledge, skills, and experience needed in the performance of internal audit services. 8

IIA Code of Ethics–Rules of Conduct 1. Integrity Internal auditors: 1.1. Shall perform their work with honesty, diligence, and responsibility Shall observe the law and make disclosures expected by the law and the profession Shall not knowingly be a party to any illegal activity, or engage in acts that are discreditable to the profession of internal auditing or to the organization Shall respect and contribute to the legitimate and ethical objectives of the organization. 9

IIA Code of Ethics–Rules of Conduct 2. Objectivity Internal auditors: 2.1. Shall not participate in any activity or relationship that may impair or be presumed to impair their unbiased assessment. This participation includes those activities or relationships that may be in conflict with the interests of the organization. 2.2.Shall not accept anything that may impair or be presumed to impair their professional judgment Shall disclose all material facts known to them that, if not disclosed, may distort the reporting of activities under review. 10

IIA Code of Ethics–Rules of Conduct 3. Confidentiality Internal auditors: 3.1. Shall be prudent in the use and protection of information acquired in the course of their duties Shall not use information for any personal gain or in any manner that would be contrary to the law or detrimental to the legitimate and ethical objectives of the organization. 11

IIA Code of Ethics–Rules of Conduct 4. Competency Internal auditors: 4.1. Shall engage only in those services for which they have the necessary knowledge, skills, and experience Shall perform internal audit services in accordance with the Standards Shall continually improve their proficiency and the effectiveness and quality of their services. 12

Why Ethics Important to Internal Auditors It is the foundation of Governance. It guides decisions and actions. It is a key element of risk management and internal control. It concerns everyone. 13

Creating a Strong Ethical Climate- The Auditor’s Contribution Set the example – go above and beyond. Clearly communicate the organization’s and the IA Activity’s core values. Empower staff to report unethical behavior. 14

Creating a Strong Ethical Climate- The Auditor’s Contribution Monitoring and evaluation of ethical climate in the organization. Internal training and publicity. Be consistent. 15

Evaluating Ethics – The Auditor’s Role The internal audit activity should evaluate the design, implementation, and effectiveness of the organization’s ethics-related objectives, programs, and activities. 16

Evaluating Ethics – The Auditor’s Role Promote the need for ethical behavior throughout the organization as part of the routine audit work. Make sure there is adequate expertise in house to conduct ethics audits. Approach ethics audits with a clear understanding of what is to be accomplished. Focus on proactive strategies (e.g. surveys, robust hiring process). 17

Evaluating Ethics – The Auditor’s Role Evaluate: Code of conduct. Strategies the organization uses to enhance its ethical culture. The communication and demonstrations of expected ethical attitudes by the organization’s leaders. Employees’, supplier’s, and customer’s understanding of the requirements for ethical behavior when conducting business. 18

Evaluating Ethics – Tips  Consider outsourcing.  Watch out for issues regarding the organization’s relationship with vendors.  Determine how the organization follows through with employee questions and complaints.  Obtain management’s support.  Remember – EVERYBODY IS WATCHING. 19

Ethical Compass “Evaluation” Our perception: We see ourselves as the guardians of trust in our organizations – far more likely to disclose ethical misconduct that to misbehave ethically ourselves. 20

Ethical Compass “Evaluation” The Reality: Bounded ethicality or reasoning limitations in our minds can make us unaware of the moral implications of our decisions. (Blind Spots, Max Bazerman and Ann Tenbrunsel, 2011, Princeton University Press) 21

Ethical Compass “Evaluation” Consider… Professionals…tend to view conflicts of interest as an issue of deliberate dishonesty. But…when individuals have a vested interest in viewing a problem in a certain way, they are no longer capable of objectivity. (Blind Spots, Max Bazerman and Ann Tenbrunsel, 2011, Princeton University Press) 22

Ethical Compass “Evaluation” Consider… We may foresee that we will behave in a way that is consistent with our expectations for ourselves. But when the time arises to make a decision, we frequently behave the way we want to behave. (Blind Spots, Max Bazerman and Ann Tenbrunsel, 2011, Princeton University Press) 23

Ethical Compass “Evaluation” Consider… (External) auditor bias develops at an unconscious state where decisions are made and prior to auditors reporting their judgments. Unbiased auditors would be questionable as long as auditors continue to be hired and fired by the organizations they audit. (Blind Spots, Max Bazerman and Ann Tenbrunsel, 2011, Princeton University Press) 24

Ethical Compass “Evaluation” So why do individuals fail to do what’s right even when they “know” what is right?  Ethical breaches are often caused by “Blind Spots”.  Our “Blind Spots” are exposed every day. (Blind Spots, Max Bazerman and Ann Tenbrunsel, 2011, Princeton University Press) 25

Recognizing and Addressing Blind Spots Recognize that we are prone to behave in ways that serve our own interests. Consider other perspectives. Challenge your own thoughts and decision processes. Slow down and think about it. 26

Recognizing and Addressing Blind Spots Implement controls that force contemplation of ethical decisions. Readily disclose potential conflicts. Remember that we are only as strong as our weakest link. 27

Ethical Dilemmas  Dilemmas are situations or problems where a person has to make a difficult choice.  An ethical dilemma is a problem where a person has to choose between a moral and an immoral act or between two moral choices. 28

Ethical Dilemmas Employees must deal with pressures to perform and help the company succeed as well as personal temptations to take the easy way out. 29

Causes of Ethical Dilemmas Pressure from Management Internal Conflict Team Dynamics Ambition and Discrimination Negotiation Tactics Working Conditions 30

Addressing Ethical Dilemmas: Five Ethical Principles Questions to ask when considering a course of action…  Will this avoid causing harm?  Will it make things better?  Is it respectful?  Is it fair?  Is it a loving thing to do? 31

Summary Defined ethics, and explored the IIA Code of Ethics. Discussed ethical climate and evaluating ethics. Discussed “blind spots” and ethical dilemmas. 32

Thank you! Contact Information 33