A summary of external quality assessment (EQA) reviews of internal audit functions undertaken in 2022/2023
Internal auditors will not be surprised that permacrisis, an extended period of instability and insecurity, was the word of the year in 2022 according to the Collins and Oxford dictionaries. Signalling yet further challenge, the World Economic Forum 2023 Global Risks Report talks about a future with polycrisis, a cluster of related risks with compounding effects, such that the overall impact exceeds the sum of each part.
Internal audit must be flexible, collaborative, proactive and risk aware to be relevant in an environment of constant change. With few exceptions, there is general conformance with current Standards (IPPF 2017) and maturity ratings of excellent were achieved by some functions which is an impressive result. However, our results this year show that there is improvement required across all areas with two notable findings.
Firstly, now is the time to move away from the traditional annual plan to a more dynamic, flexible plan of work. And secondly, that the majority of our EQAs identified opportunities to coordinate assurance across the three lines model, maximising benefit for the organisation and eliminating inefficiency.
Our results this year show a reduction in conformance with the 1300 series regarding quality and improvement. As you read this report, please take time to reflect on the insights to create or add to your own programme. Continuous improvement is vital to our profession.