the UNIVERSITY of GREENWICH 1 September 2009 L8c Audit and assurance J. E. Spencer-Wood Auditing and assurance Lecture 8c Standards for the Professional Practice of Internal Auditing (SPPIA’s)

the UNIVERSITY of GREENWICH 2 September 2009 L8c Audit and assurance J. E. Spencer-Wood The Institute of Internal Auditors IIA Originated and HQ is based in USA National ‘chapters’ Internal Auditing Standards Board (IASB-IIA)

the UNIVERSITY of GREENWICH 3 September 2009 L8c Audit and assurance J. E. Spencer-Wood The International Professional Practices Framework (IPPF) 2009, contains… The IIA's Code of Ethics International Standards for the Professional Practice of Internal Auditing (SPPIA’s) with interpretations Practice Advisories Position Papers Practice Guides The Institute of Internal Auditors

the UNIVERSITY of GREENWICH 4 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA’s Purposes To delineate basic IA principles A framework for IA performance A basis of evaluation of IA performance To help improve organisational processes and operations IIA, 2009

the UNIVERSITY of GREENWICH 5 September 2009 L8c Audit and assurance J. E. Spencer-Wood Types Attribute standards  What and who Performance standards  How Implementation standards  Adds matter to the above standards depending on whether IA work is… –Assurance (A) or –Consultancy (C) related SPPIA's

the UNIVERSITY of GREENWICH 6 September 2009 L8c Audit and assurance J. E. Spencer-Wood Attribute standards1000- Performance standards2000- Implementation standards nnnn(A/C)f Implementation standards are numbered according to attribute or performance (nnnn) then whether Auditing or Consultancy (A or C) then a specific further reference (f) Standard ‘groups’

the UNIVERSITY of GREENWICH 7 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA Attribute standards (Oct 2008) Purpose, authority and responsibility SPPIA 1000 The purpose, authority and responsibility to be formally defined in the audit charter and approved by the board. Related interpretation standards SPPIA 1000.A1  Requires the nature of assurance services to be defined in the audit charter SPPIA 1000.C1  Requires the nature of consultancy services to be defined in the audit charter

the UNIVERSITY of GREENWICH 8 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA 1100 IA activity should be independent and objective SPPIA 1110 IA activity should have organisational independence  Scope, performance, reporting (1110.A1) SPPIA 1100 group - Attribute standards (Oct 2008) Independence and objectivity

the UNIVERSITY of GREENWICH 9 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA 1120 Individual internal auditors should have an impartial unbiased attitude and avoid conflicts of interest SPPIA 1130 If independence or objectivity is (or appears to be) impaired it should be disclosed to the appropriate parties  1130.A1 - No auditing of own work  1130.A2 - Audit of IA dept must be overseen by a non-IA party SPPIA 1100 group - Attribute standards (Oct 2008) Independence and objectivity (cont.)

the UNIVERSITY of GREENWICH 10 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA 1210 Proficiency SPPIA 1220 Due professional care SPPIA 1230 CPD SPPIA 1200 group - Attribute standards (Oct 2008) Proficiency and due professional care

the UNIVERSITY of GREENWICH 11 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA 1310/ SPPIA 1311/ SPPIA 1312 Quality programme/ Internal/ External assessments SPPIA 1320 Reporting on quality programme SPPIA 1330 Standards SPPIA 1340 Non-compliance reporting SPPIA 1300 group - Attribute standards (Oct 2008) Quality assurance and improvement

the UNIVERSITY of GREENWICH 12 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA Planning SPPIA A1  Plan should be based on (yearly) risk assessment SPPIA C1  IA should consider engagements that improve risk management, organisational operation and add value SPPIA Performance standards (Oct 2008) Managing the IA activity

the UNIVERSITY of GREENWICH 13 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA Communication and approval SPPIA Resource management SPPIA Policies and procedures SPPIA Coordination SPPIA Reporting SPPIA Performance standards (Oct 2008) Managing the IA activity (cont.)

the UNIVERSITY of GREENWICH 14 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA Performance standards (Oct 2008) Nature of work SPPIA Risk management SPPIA Control SPPIA Governance

the UNIVERSITY of GREENWICH 15 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA Performance standards (Oct 2008) Engagement planning SPPIA Considerations SPPIA Objectives SPPIA Scope SPPIA Resources SPPIA Programme

the UNIVERSITY of GREENWICH 16 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA Performance standards (Oct 2008) Performance SPPIA Identifying information SPPIA Analysis and evaluation SPPIA Recording SPPIA Supervision

the UNIVERSITY of GREENWICH 17 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA Performance standards (Oct 2008) Communicating results SPPIA Criteria SPPIA Quality SPPIA Errors and omissions SPPIA 2430/1 – Conformance (compliance) SPPIA Distribution

the UNIVERSITY of GREENWICH 18 September 2009 L8c Audit and assurance J. E. Spencer-Wood SPPIA Performance standards (Oct 2008) Monitoring progress SPPIA Performance standards (Oct 2008) Management's acceptance of risks

the UNIVERSITY of GREENWICH 19 September 2009 L8c Audit and assurance J. E. Spencer-Wood IIA - Further information Malaysia Singapore UK and Ireland Hong Kong SAR / PRC