What is internal audit?
Internal audit is an independent, objective assurance and advisory activity that evaluates an organisation's risk management, internal controls, and governance processes. It helps the management and audit committee gain assurance that the business is operating efficiently and complying with applicable policies, laws, and regulations.
Which companies are required to have internal audit?
Under Section 138 of the Companies Act, 2013, internal audit is mandatory for listed companies and for certain unlisted public and private companies that cross prescribed thresholds of paid-up capital, turnover, borrowings, or deposits. Many other companies also implement internal audit as a best practice for stronger control and risk management.
Who can be appointed as an internal auditor?
Section 138 allows a Chartered Accountant, Cost Accountant, or such other professional as decided by the Board to be appointed as the internal auditor of a company. The internal auditor may be an individual, a partnership firm, or a body corporate, and may be an employee of the company or an external professional.
How is internal audit different from statutory audit?
Statutory audit focuses on whether financial statements give a true and fair view as per applicable laws and standards. Internal audit takes a broader, ongoing view of risks, controls, processes, and compliance across the business. Statutory audit reports to shareholders, while internal audit reports to management and the audit committee.
What does a typical internal audit cover?
Internal audits typically cover key business cycles such as procurement, sales, inventory, fixed assets, treasury, payroll, and IT, along with statutory and regulatory compliance, IFC / ICFR testing, fraud risk, and selected strategic or operational reviews approved by the audit committee.
How is internal audit linked with the audit committee?
The audit committee is generally responsible for approving the internal audit charter, scope, and plan, reviewing internal audit reports, monitoring implementation of recommendations, and evaluating the effectiveness of the internal audit function. It provides independence and authority to the internal auditor.
How does data analytics enhance internal audit?
Data analytics enables internal audit to test 100% of transactions instead of small samples, identify outliers, monitor key risk indicators, and detect patterns that point to fraud or process weakness. It improves both the depth and timeliness of insights, especially in high-volume areas like sales, procurement, and payroll.