Internal Audit Reports - Directorate of Internal Audit, Makerere

advertisement
Parity Twinomujuni CIA
Makerere University
Internal Audit Department
 Challenges
with Internal audit
reports
 Consumers of internal audit
reports
 Report structure
 Guidance for efficient reporting
2400 – Communicating Results
Internal auditors must
communicate the engagement
results.
This communication is usually in
form of audit reports
Scoping is often not formally
communicated to Auditees
 Reports are too voluminous and
complex and in some cases too
short
 Time taken to publish reports –
completion of fieldwork to reporting
 Reports that are not supported by
evidence

 Drafting
/ sometimes English –
too much jargon
 Over emphasis of issues
 Personalizing reports
 Negative language
 Poor flow – non critical issues
emphasized and critical issues
left out etc
◦ Who reads our reports? Mgt, Audit
Committee, Other stakeholders,
◦ What are their uses of the report?
◦ What kind of message do they seek?
◦ How can we ensure that our reports
are actionable?
◦ How can we incorporate value
addition in reporting?
2201.C1- Internal auditors must
establish an understanding with
consulting engagement clients
about
objectives,
scope,
respective responsibilities, and
other client expectations. For
significant
engagements,
this
understanding
must
be
documented.
 Executive
Summary
 Detailed Report – Audit
Observations
 Appendices
 Objectives
 Scope
 Opinion
or Conclusions
What about the Background
 What
did the audit aim to
accomplish?
 Why did you perform the audit?
 What
did the audit cover and, if
necessary, what did it not cover
and why? Period and Area
 What
are the causes of the
conditions and how severe are the
effects?
 What is really wrong (or right) and
how bad(or good) is it?
 An
internal audit report is a
collection of findings that an
auditor identifies during the
engagement process.

The five components of audit
reporting are:
– Criteria
– Conditions
– Causes
– Effects
– Recommendations and/or Action Plans
Criteria
◦ Company policy requires that all
payments above Ushs 1,000,000
should be approved by the CEO
 Condition
◦ In a sample of 100 payments
above Ushs 1,000,000 paid during
the month of June 2009, 30 were
paid without CEO approval.

Cause
◦ Thresholds for approval of payments
were not being monitored and
followed on a daily basis.
 Effect
◦ Payment procedures are not being
adhered to. There is a likelihood that
fraudulent payments can be made.


Recommendations
◦ All payments that were made
without CEO approval should be
compiled for CEO ratification.
Any payments that the CEO will
find irregular should be
investigated further by the
investigation unit.
◦ All future payments should follow
approved payment procedures
 We
agree with the finding. The
Finance Manager shall compile all
payments affected and have
approvals ratified by December
31, 2009. The CFO has agreed not
to sanction any future payments
without proper approvals.
2420 – Quality of Communications
 Communications must be
accurate, objective, clear, concise,
constructive, complete, and
timely.




Accurate communications are free from errors and
distortions and are faithful to the underlying facts.
Objective communications are fair, impartial, and unbiased
and are the result of a fair-minded and balanced
assessment of all relevant facts and circumstances.
Clear communications are easily understood and logical,
avoiding unnecessary technical language and providing all
significant and relevant information.
Concise communications are to the point and avoid
unnecessary elaboration, superfluous detail, redundancy,
and wordiness.



Constructive communications are helpful to the
engagement client and the organization and lead
to improvements where needed.
Complete communications lack nothing that is
essential to the target audience and include all
significant and relevant information and
observations to support recommendations and
conclusions.
Timely communications are opportune and
expedient, depending on the significance of the
issue, allowing management to take appropriate
corrective action.
 Coherence
 Handling
of technical terminology
 Readability and conciseness
 Sentence clarity
 Replace
unnecessary technical
terms
 Define necessary technical terms
 Manage the number and
definitions of acronyms and
abbreviations
 Include a glossary
 Shorten the sentences
Text Factors Affecting Readability
 Sentence length
 Word difficulty
 Coherence
 Placement of the main
messages
 Layout and graphic design
 Reading
skill
 Content knowledge
 Attitude
 Environment
 Break
up long sentences
 Replace difficult, unfamiliar words
 Eliminate redundancy
 Eliminate wordiness
 Mapped
or table formats
 Paragraph formats
 Electronic-delivery
formats
 Allows
easy navigation for the
reader
 “Builds in "the logic
 Eases the writing
 Encourages conciseness


Enables more coherence
May better meet expectations in some
organizations
 Allow
easy navigation for the
reader
 “Build in”the logic
 Ease the writing
 Can
be applied to the entire
engagement and/or to each audit
observation
 What is rated?
◦ Overall internal-control rating
◦ Risk



Two-point rating
◦ Unsatisfactory
◦ Satisfactory
Three-point rating
◦ Unsatisfactory
◦ Needs improvement
◦ Satisfactory
Four-point rating
◦ Unsatisfactory
◦ Needs significant improvement
◦ Needs improvement
◦ Satisfactory
 High
 Medium
 Low





We need to write actionable reports
Understand who the consumers of our
reports are
Use Report structures that are agreeable
and easy to read and navigate
Include graphics into our reports
Work on the tone, address critical areas and
make our reports as friendly as possible.
Parity Twinomujuni CIA
ptwino@nhcc.co.ug,
parityt@yahoo.com
+256717771665
Download