Which of the following specifications in an internal audit charter is the most important factor in the internal audit activity's independence?

Question

Options

• ADescription of internal audit activity's responsibilities
• BDefinition of internal auditing
• CStatement of internal audit activity's authority
• DDescription of internal audit activity's reporting structure

• A
  15% (5)
• B
  6% (2)
• C
  3% (1)
• D
  76% (25)

Explanation

Reporting structure is the cornerstone of independence because it determines to whom the internal audit activity reports - if auditors report to management they are supposed to audit, their objectivity is structurally compromised. The IIA Standards require the CAE to report functionally to the board (or audit committee) to ensure no operational leader can suppress or distort audit findings. Without the right reporting line, every other charter element becomes hollow.

Why the distractors fall short:

• (A) Responsibilities describe what internal audit does, but saying "we audit financial controls" doesn't prevent management from overriding results.
• (B) Definition of internal auditing is a boilerplate statement of purpose; it establishes no protective structure and is the same for every organization.
• (C) Authority matters for access (to records, personnel, systems), but access without the right reporting line still leaves auditors politically exposed to the parties they examine.

Memory tip: Think of independence as a chain - it only holds if the top link (who audit reports to) is anchored to the board, not to management. Ask yourself: "Who can kill the report?" If the answer is the person being audited, independence is broken. Reporting structure = the top link.

No community discussion yet for this question.