EQA – what’s in it for me? A presentation by the IIA’s Technical Manager, Chris Baker, 24 th February 2015

Agenda Why bother with EQA? What should I expect? What’s involved? How do I prepare? What will I get? How do I compare? Case study – Independence & objectivity What makes a winning team? What does the IIA offer?

Why bother? …Because the STANDARDS say so… Attribute standard 1312 : ‘External assessments must be conducted at least once every five years by a qualified, independent reviewer or review team from outside the organisation.’ But why………WIIFM?

BECAUSE it will help you to… Recognise your achievements. Be better at what you do. Raise your profile. Remove barriers for change. Motivate your team. Develop a culture of continuous improvement. Opens up new opportunities.

What should I expect? An understanding of your organisation and role IA plays. Support but also Challenge. Practical ideas and suggestions. Closeout meeting, no surprises. Discussion and development of the draft report. A draft and final report in style that suits you. Final report within your timescale

What’s involved? Discussions with audit committee members and senior managers. Discussions with you about: Risk based planning Resources Independence & objectivity Quality Approach and methodology Reporting Follow-up

How to prepare? Agree a timetable with the audit committee and senior management linked to audit committee meetings. Engage the IA team – establish a lead contact point for reviewers. (Complete the self-assessment checklist – 60 separate standards so give yourself enough time.) Build a file of documents so the review goes smoothly. Establish an interview schedule in advance.

What will I get? 2 Reports in a style that suits you. Short report containing: An opinion on your level of conformance to the Standards. Practical ideas and suggestions for Audit Committee, senior management and IA. SWOT analysis MATRIX of effectiveness Completed checklist containing Standard by Standard assessment with record of evidence review

How do we compare ? MATRIX OF IA ‘EFFECTIVENESS’ Assessment Conformance to the IIA standards Focus on performance, risk and adding value. Coordination and maximising assurance Operating with efficiency Quality Assurance and improvement programme Excellent Outstanding reflection of the IIA standards, in terms of logic, flow and spirit. Generally conforms in all areas. Excellent IA alignment to the organisation’s objectives, risks and change. IA has a high profile, is listened to and is respected for its assessment, advice and insight. IA is fully independent and is recognised by all as a 3 rd line of defence. The work of assurance providers is coordinated with IA reviewing reliability of. Assignments are project managed to time and budget using tools/techniques for delivery. IA reports are clear, concise and produced promptly. Ongoing efforts by whole IA team to enhance quality through continuous improvement. QA&IP plan is shared with and approved by AC. Good The IIA Standards are fully integrated into the methodology – mainly generally conforms. Clear links between IA engagement objectives to risks and critical success factors with some acknowledgement of the value added dimension. Coordination is planned at a high level around key risks. IA has established formal relationships with regular review of reliability. Audit engagement are controlled and reviewed while in progress. Reporting is refined regularly linking opinions to key risks. Quality is regarded highly, includes lessons learnt, scorecard measures and customer feedback with results shared with AC Satisfactory Most of the IIA Standards are found in the methodology with scope to increase conformance from partially to generally conform in some areas. Methodology requires the purpose of IA engagements to be linked to objectives and risks. IA provides advice and is involved in change but criteria and role require clarity. The 3 lines of defence model is regarded as important. Planning of coordination is active and IA has developed better working relationships with some review of reliability. Methodology recognises the need to manage engagement efficiency and timeliness but further consistency is needed. Reports are informative and valued but are considered a little wordy Clear evidence of timely QA in assignments with learning points and coaching. Customer feedback is. Wider QA&IP may need formalising Needs improvement Gaps in the methodology with a combination of non-conformances and partial conformances to the IIA Standards. Some connections to the organisation’s objectives and risks but IA engagements are mainly cyclical and prone to change at management request. The need to coordinate assurance is recognised but progress is slow. Some informal coordination occurs but reviewing reliability may be resisted. Multiple guides that are slightly out of date and form a consistent and coherent whole. Engagement go beyond deadline and a number are deferred QC not consistently embedded across the function. QA is limited / late or does not address root causes PoorNo reference to the IIA Standards with significant levels of non- conformance. No relationship between IA engagements and the organisation’s objectives, risks and performance. Many audits are adhoc. IA performs its role in an isolated way. There is a feeling of audit overload with confusion about what various auditors do. Lack of a defined methodology with inconsistent results. Reports are usually late with little perceived value. No evidence of ownership of quality by the IA team.

Independence & Objectivity CHAIRS of AUDIT COMMITTEEs tell us they really value unbiased opinions from IA and rely on IA to go anywhere and look at anything. It’s important to emphasise, promote and safeguard that IA is independent and objective. How do you do that - lets look at an EQA case study?

What makes a winning team? To summarise: Be independent & objective – this is what audit committee members and senior managers really value. Build effective relationships – raise your profile and build trust and confidence in IA. Develop your people – training, coaching, teamwork and create a culture of continuous improvement. Focus on the things that matter – assurance around key objectives, risks and areas of change. Design process that are effective and efficient – a process that provides value and has an impact

What does the IIA offer? Tailored options: –Validated self-assessment, –Facilitated self-assessment, –Full EQA. Experienced Reviewers. Quality and consistency. An affordable alternative –At a fair price. –With no added selling. We tailor our approach to fit your needs

Thank you - Learn More Please look at the Quality services page on our new website assessment/ Pick up a brochure or contact me directly