The Path to Quality a step-by-step

The Path to Quality. . . a step-by-step guide to world-class internal auditing www. theiia. org

What is quality? • Exceeding stakeholder expectations. • Ensuring value is added to all areas of the IAA and the IAA adds value to the Organization. • Competency and Proficiency to the Organization’s risk management, controls and governance processes. www. theiia. org

Achieving Quality Can Be Impacted By: • Organization’s – Acceptance ― Goals/Objectives – Mission ― Tenaciousness – Temperament / Appetite • Chief Audit Executive’s professionalism, commitment and diligence • The Quality Assurance and Improvement Program (QAIP) • Audit Staff’s Commitment • Audit Customers Understanding www. theiia. org

Maturity Model Levels to Quality Level 1: Introductory Level 2: Emerging Level 3: Established Level 4: Progressive Level 5: Advanced www. theiia. org

Level 1 Introductory Maturity • Fairly new shop or new CAE adopting the IIA Standards • Organization lacks understanding of importance • Senior Management/Board don’t understanding value • IAA has not established a QAIP • Not complying with requirements www. theiia. org

Level 1 Key Messages • Have not adopted quality in IAA • Might be a new internal audit shops or new CAE • Need to assess and to document • Understand the Standards • Critical to begin a QAIP www. theiia. org

Steps to Introductory Quality 1. Adopt the definition 2. Achieve appropriate reporting structure 3. Commit to quality through the audit Charter 4. Acquire management’s buy-in 5. Educate the audit committee www. theiia. org

Level 2 Emerging Maturity • The QAIP must include periodic and ongoing self-assessments • Compliance monitoring with the Standards is in place • Annual presentation of self assessment results is complete to senior management and Audit Committee www. theiia. org

Level 2 Key Messages • Ongoing monitoring of Standards/Ethics • Self Assessment determines strength & weaknesses • IAA has found what’s working, what’s not working • Report results of self assessments • Maintain documentation and detailed plans for improvement • IAA completes presentation of results annually www. theiia. org

Steps to Emerging Quality 1. IAA gets involved with The IIA and local chapter 2. CAE works toward certification 3. CAE attends QA Self Assessment training and/or seminar 4. Assign monitoring responsibilities 5. Use the Self-Assessment Checklist 6. Obtain feedback from others www. theiia. org

Level 3 Established Maturity • Annually obtain internal independent validation of IAA ongoing self-assessment • CAE, Senior Management & Audit Committee support and involved in Quality Assessment process • Committed to obtaining an external independent validation every five years. www. theiia. org

Level 3 Key Messages • CAE is committed to Professionalism and Quality of IAA • Audit committee directly involved • Rigorous IAA self assessment reviewed and tested • Peer review performed with qualified participants www. theiia. org

Steps to Established Quality 1. IAA staff certifications demonstrate IAA professionalism and competency 2. IAA uses Balanced Scorecard 3. Requires proper qualifications for validator 4. Develops plan for improvements and establishes timeline for implementation 5. Report QA validation to The IIA Quality (quality@theiia. org) www. theiia. org

Balanced Scorecard for Internal Auditing Board/Audit Committee • Expectations OBJECTIVES • Perspective on IA Roles • Satisfaction Surveys • List here. MEASURES • Perspective on IA Roles • List here. • Satisfaction Surveys • Requests • Risk Concerns • Complaints • CAE/AC Private Meetings Management/Audit Customers OBJECTIVES • List here. CORPORATE STRATEGY MEASURES INTERNAL AUDIT STRATEGY • Experience • Reporting Relationships • List here. • Importance Levels • Improvements • Education • Certification MEASURES OBJECTIVES • List here. • Training Internal Audit Processes Innovation/Capabilities OBJECTIVES • List here. MEASURES • List here • Findings • Repeat Findings • Savings • Quality Assessment www. theiia. org

Level 4 Progressive Maturity • QAIP is now a well developed, defined and documented program • IAA is well recognized within the organization as value added • IAA has an External QA conducted every five years www. theiia. org

Level 4 Key Messages • IIA has an established mindset for professionalism and demonstrates it in their activities • Audit committee, management and staff all support commitment to Quality • Stakeholder confidence is high because of quality and successful & leading practices • IAA is in compliance with Standards & Ethics www. theiia. org

Steps to Progressive Quality 1. CAE has CIA certification 2. Any gaps have been addressed and action plans are in place 3. Follow best & leading practices 4. A qualified external QA provider is used 5. Report completion of external QA to The IIA (quality@theiia. org) www. theiia. org

Level 5 Advanced Maturity • IAA has a active and fully integrated Quality Assurance & Improvement Program • External QAR are performed every three years • All IAA staff have certification and rigorous continuing education www. theiia. org

Level 5 Key Messages • IAA raises the bar for professionalism • Respect by Organization and board • Chief Audit Executive is a respected member of executive management • IAA shows an unrelenting commitment to growth, development, and improvement • Exemplary audit committee www. theiia. org

Steps to Advanced Maturity 1. IAA maintains an appropriate mix of professional designations 2. IAA is a benchmark for progress to others in and out of their industry 3. IAA share tools and success story 4. Serve on QA review teams 5. Mentor, speak, research, and write for the profession of Internal Auditing www. theiia. org

The Path to Quality • Add value • Be perceived as adding value • Ensure the value you add in the future www. theiia. org

This Path to Quality presentation was developed by The Institute of Internal Auditors (IIA) Global Headquarters. www. theiia. org