This lesson examines the internal audit function as a critical component of the governance framework. It covers the roles and responsibilities of internal audit, its relationship with internal controls, and the importance of internal audit in providing independent assurance on the effectiveness of controls. This is a key area of the CIMA P3 syllabus .

• The Role and Purpose of Internal Audit: Internal audit is an independent, objective assurance and consulting activity designed to add value and improve an organisation’s operations. It helps an organisation accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes. The CIMA P3 syllabus identifies internal audit as a key topic under the Internal Controls section .

• Internal Audit vs. External Audit: While both internal and external audit provide assurance, they serve different purposes. Internal audit is an internal function that reports to the board or audit committee, focusing on improving internal processes and controls. External audit is an independent function that provides assurance to external stakeholders (shareholders, regulators) on the accuracy of financial statements. Internal audit is also often involved in reviewing internal controls over sustainability reporting and other non-financial information .

• Internal Audit’s Role in Internal Control: Internal audit plays a crucial role in evaluating the effectiveness of the organisation’s internal controls. This involves reviewing the design and operation of controls, identifying weaknesses, and making recommendations for improvement. The internal audit function can also be involved in investigating fraud and other irregularities .

• Internal Audit and Corporate Governance: Internal audit is a key component of corporate governance, providing assurance to the board and audit committee that the organisation’s risk management, control, and governance processes are effective. The internal audit function contributes to good governance by promoting accountability, transparency, and ethical behaviour. It is essential for building stakeholder trust in the organisation’s reporting and operations .