Today's fast-paced and evolving business environment requires internal audit to consider its capabilities and needs to ensure appropriate strategic planning. How can CAEs develop strategic plans that result in their stakeholders viewing the audit function as “highly effective”?
Our research has found an approach that builds on three dimensions of effectiveness that must be addressed to be highly effective:
• Meeting stakeholder expectations
• Operating core processes
• Conforming to internal audit standards and applicable regulatory requirements
Learning Objectives
In this session, participants will:
• Discuss the need for and importance of strategic planning within the internal audit function
• Explore the 3 dimensions that contribute to a highly effective internal audit function
• Populate a framework to understand how processes and expectations are aligned and where changes need to occur
• Develop an initial strategic vision based on an understanding of stakeholder expectations
1. 6-12-2019
1
Is Your Audit Department
"Highly Effective"?
Toby DeRoche
MBA, CIA, CCSA, CRMA, CFE, CICA
About Jim Kaplan, CIA, CFE
President and Founder of AuditNet®,
the global resource for auditors
(available on iOS, Android and
Windows devices)
Auditor, Web Site Guru,
Internet for Auditors Pioneer
IIA Bradford Cadmus Memorial
Award Recipient
Local Government Auditor’s Lifetime
Award
Author of “The Auditor’s Guide to
Internet Resources” 2nd Edition
1
2
2. 6-12-2019
2
About AuditNet® LLC
• AuditNet®, the global resource for auditors, serves the global audit
community as the primary resource for Web-based auditing content. As the first online
audit portal, AuditNet® has been at the forefront of websites dedicated to promoting the
use of audit technology.
• Available on the Web, iPad, iPhone, Windows and Android devices and
features:
• Over 3,000 Reusable Templates, Audit Programs, Questionnaires, and
Control Matrices
• Webinars focusing on fraud, data analytics, IT audit, and internal audit
with free CPE for subscribers and site license users.
• Audit guides, manuals, and books on audit basics and using audit
technology
• LinkedIn Networking Groups
• Monthly Newsletters with Expert Guest Columnists
• Surveys on timely topics for internal auditors
Introductions
HOUSEKEEPING
This webinar and its material are the property of AuditNet® and its Webinar partners. Unauthorized
usage or recording of this webinar or any of its material is strictly forbidden.
If you logged in with another individual’s confirmation email you will not receive CPE as the
confirmation login is linked to a specific individual
This Webinar is not eligible for viewing in a group setting. You must be logged in with your
unique join link.
We are recording the webinar and you will be provided access to that recording after the
webinar. Downloading or otherwise duplicating the webinar recording is expressly prohibited.
If you meet the criteria for earning CPE you will receive a link via email to download your
certificate. The official email for CPE will be issued via NoReply@gensend.io and it is important to
white list this address. It is from this email that your CPE credit will be sent. There may be a
processing fee to have your CPE credit regenerated if you did not receive the first mailing.
Submit questions via the chat box on your screen and we will answer them either during or at
the conclusion.
You must answer the survey questions after the Webinar or before downloading your certificate.
3
4
3. 6-12-2019
3
IMPORTANT INFORMATION
REGARDING CPE!
ATTENDEES - If you attend the entire Webinar and meet the criteria for CPE you will receive an
email with the link to download your CPE certificate. The official email for CPE will be issued via
NoReply@gensend.io and it is important to white list this address. It is from this email that your
CPE credit will be sent. There may be a processing fee to have your CPE credit regenerated after the
initial distribution.
We cannot manually generate a CPE certificate as these are handled by our 3rd party provider. We
highly recommend that you work with your IT department to identify and correct any email delivery
issues prior to attending the Webinar. Issues would include blocks or spam filters in your email
system or a firewall that will redirect or not allow delivery of this email from Gensend.io
You must opt in for our mailing list. If you indicate you do not want to receive our emails your
registration will be cancelled and you will not be able to attend the Webinar.
We are not responsible for any connection, audio or other computer related issues. You must have
pop-ups enabled on you computer otherwise you will not be able to answer the polling questions
which occur approximately every 20 minutes. We suggest that if you have any pressing issues to see
to that you do so immediately after a polling question.
The views expressed by the presenters do not necessarily represent the views, positions, or
opinions of AuditNet® LLC. These materials, and the oral presentation accompanying them,
are for educational purposes only and do not constitute accounting or legal advice or create an
accountant-client relationship.
While AuditNet® makes every effort to ensure information is accurate and complete,
AuditNet® makes no representations, guarantees, or warranties as to the accuracy or
completeness of the information provided via this presentation. AuditNet® specifically
disclaims all liability for any claims or damages that may result from the information contained
in this presentation, including any websites maintained by third parties and linked to the
AuditNet® website.
Any mention of commercial products is for information only; it does not imply
recommendation or endorsement by AuditNet® LLC
5
6
4. 6-12-2019
4
Speaker Bio
Toby DeRoche MBA, CIA, CCSA, CRMA, CFE, CICA
Senior Market Development Consultant
Experience
• Audit Manager at a Fortune 100 company
• Senior Market Development Consultant at
Wolters Kluwer
• Works with organizations that are looking for
software solutions to their audit, risk and
compliance needs
Session Overview
Today's fast-paced and evolving business environment requires internal
audit to consider its capabilities and needs to ensure appropriate strategic
planning. How can CAEs develop strategic plans that result in their
stakeholders viewing the audit function as “highly effective”?
Our research has found an approach that builds on three dimensions of
effectiveness that must be addressed to be highly effective:
Meeting stakeholder expectations
Operating core processes
Conforming to internal audit standards and applicable regulatory
requirements
7
8
5. 6-12-2019
5
Session Objectives
In this session, participants will:
• Discuss the need for and importance of strategic planning within the
internal audit function
• Explore the 3 dimensions that contribute to a highly effective internal
audit function
• Populate a framework to understand how processes and expectations
are aligned and where changes need to occur
• Develop an initial strategic vision based on an understanding of
stakeholder expectations
9
POLLING QUESTION 1
9
10
6. 6-12-2019
6
TeamMate 2018 Insights Survey Results
11
Why develop a strategic plan?
To increase the value that
the organization receives
from internal audit
To improving the
alignment of internal
audit with the overall
strategic and business
objectives of the parent
organization
12
11
12
7. 6-12-2019
7
Key Success Factors:
Top 3 Survey Responses
13
Finding the right human
resources and skills
Ability to train existing staff
and help employees
develop new skills
Executive management
support
Keep these success
factors in mind as we
work through the
strategic plan.
Dimensions of Effectiveness
• Addressing stakeholder needs and expectations
• Operating core internal audit processes
• Conforming to The IIA Standards and any
applicable regulatory requirements
13
14
8. 6-12-2019
8
Conforming to the IIA Standards
Always start with the basics of conformance as a foundation for
growth:
IIA International Standards
Applicable local regulatory requirements
Any specific industry regulations
The internal audit
strategic plan must
address all three
dimensions of the
Internal Audit
Effectiveness Model
16
15
16
9. 6-12-2019
9
Operating Core Internal Audit Processes
Consider all aspects of the audit department:
Risk Assessment
Performance Measurement
Working Practices
Knowledge Management
Human Capital
Partnering
Technology
Communications and Reporting
17
Operating Core Internal Audit Processes
Under each core
process you can list
the specific
activities that
would be
developed and
deployed as part of
your strategic plan.
The summary could
be used to develop
a tactical plan for
each core process.
17
18
10. 6-12-2019
10
POLLING QUESTION 2
Internal Audit Planning Balanced Scorecard
Under each core
process you can list
the specific
activities that
would be
developed and
deployed as part of
your strategic plan.
The summary could
be used to develop
a tactical plan for
each core process.
19
20
11. 6-12-2019
11
Aligning with Stakeholder Expectations
Populate a framework to understand how processes and expectations
are aligned and where changes need to occur.
Stakeholders expect high quality assurance work
It is critical to identify key, strategic risks
Business knowledge is expected
Stakeholder Expectations Standards Regs Process
Assessment
Providing
Assurance
Expect #2 Expect #3 Expect #4 IIA Standards
Human Capital
Risk Assessment
Working Practices
Partnering
Knowledge
Management
Technology
Communications
Reporting
Performance
Measurement
Use the worksheet to ensure and
communicate how enhancements to core
processes will support and enable meeting
stakeholders expectations
21
22
12. 6-12-2019
12
Common Expectations
The IIA’s global stakeholder study identified a number of expectations
common to many organizations:
Stakeholders expect high quality assurance work
It is critical to identify key, strategic risks
Business knowledge is expected
POLLING QUESTION 3
23
24
13. 6-12-2019
13
Strategic Vision
Develop an initial strategic vision based on an understanding of
stakeholder expectations:
• Aligning with Stakeholder Expectations
• Internal Audit Core Processes
• Building the Foundation
Developing a Vision
• The strategic planning process for internal audit begins with the development of
the strategic vision — a picture of what the internal audit function would look like
at the end of its two- to five-year strategic planning horizon.
• The first step in this process is to understand, articulate and validate stakeholder
expectations. There are three key steps in this process:
1. Meet with key stakeholders from both the audit committee and executive
management
2. Share your ideas about potential areas of focus for internal audit
3. Ask your key stakeholders to describe their expectations of internal audit and where
they see the internal audit function adding value in coming years
26
25
26