Audit and Assurance · Internal audit and governance and the differences between external audit and internal audit

Internal Audit Independence and Reporting for ACCA AA

Updated 11 October 2026 · Fact-checked

Internal audit independence means internal auditors can judge and report without pressure from the managers they review. Objectivity comes from a reporting line to the audit committee or board, not to finance, plus safeguards such as no operational duties and audit committee control of appointment, pay and removal. In the exam, name the threat, then the safeguard.

Understand Internal Audit Independence and Reporting

Internal auditors work for the company. They are employees or contractors, so they can never be as independent as the external auditor. The aim is to be objective: to give honest, unbiased views even when management will not like them.

Independence matters because internal audit reports on risk, controls and governance. If management can stop a bad finding being reported, the board gets a false picture. The work then has little value, and the external auditor cannot rely on it.

The main protection is the reporting line. The head of internal audit should report functionally to the audit committee, which is made up of independent non-executive directors. Day-to-day administration may sit with a senior executive such as the chief executive. Reporting to the finance director is weak, because internal audit often reviews finance.

The audit committee strengthens independence in several ways. It approves the internal audit charter, the plan and the budget. It decides on the appointment, removal and pay of the head of internal audit. It receives reports directly. It can also meet the head of internal audit without executives present.

Threats to objectivity include self-review (auditing a system they designed), familiarity (long service or friendship with managers), intimidation (pressure from senior managers), self-interest (pay or promotion set by those audited) and lack of resources or status. Safeguards include rotating staff, keeping internal auditors out of operational roles, giving them unrestricted access to records and people, and setting professional standards and qualifications.

Key rules to remember

Preferred reporting line: Head of internal audit → audit committee (functional) ; chief executive (administrative); Reporting to the finance director or to the managers being audited weakens objectivity.
Audit committee control: Charter + plan + budget + appointment/removal/pay of head of internal audit; Use this list to show how the committee protects independence.
Threat to safeguard answer pattern: Threat → why it harms objectivity → safeguard; Marks are earned by linking each safeguard to a specific threat.
Typical threats: Self-review, familiarity, intimidation, self-interest, lack of status or resources; Match each to the scenario facts.

How to solve Internal Audit Independence and Reporting questions

Use this method for any question on internal audit independence, reporting lines or objectivity.

1Read the scenario and underline facts about who the internal auditors report to, who sets their pay and plan, their background and their other duties.
2Decide what the question asks: identify threats, recommend safeguards, or evaluate the reporting structure.
3For each fact, name the threat (for example, familiarity or self-review) and explain in one sentence why it harms objectivity.
4Link each threat to a specific safeguard, such as direct reporting to the audit committee or rotation of staff.
5Mention the audit committee's role where relevant: approving the plan, controlling appointment and pay, and receiving reports.
6If no audit committee exists, recommend one, or direct access to the board or independent non-executive directors.
7Close with a short judgement on whether independence is adequate overall. For objective test questions, pick the option that increases separation from management.

Quickest way: Fact, threat, safeguard

When to use it: Use this for Section A or B objective questions and for short written requirements when time is tight.

Spot the single fact that damages independence, for example reporting to the finance director.
Label the threat in two or three words.
Choose the option or write the safeguard that moves control to the audit committee or removes the conflict.
Reject answers that make internal audit more dependent on the managers it audits, even if they sound efficient.

Common mistakes in Internal Audit Independence and Reporting

Saying internal auditors are independent in the same way as external auditors.
Students mix up the two roles.
Fix: State that internal auditors are part of the company, so aim for objectivity, protected by reporting lines and the audit committee.
Listing threats without safeguards.
Students recall the threat list but forget the requirement asks for action.
Fix: Always pair each threat with a safeguard and say how it reduces the threat.
Recommending that the head of internal audit report to the finance director.
It seems natural because finance handles controls.
Fix: Recommend functional reporting to the audit committee, since internal audit often reviews finance itself.
Ignoring who controls pay and appointment.
Students focus on the reporting line only.
Fix: Say the audit committee should approve appointment, removal and remuneration of the head of internal audit.
Giving generic answers not tied to the scenario.
Students write learned lists rather than reading the facts.
Fix: Quote the scenario fact, for example a former finance manager now auditing finance, then name the threat.

Worked examples

Example 1

Zeta Co has an internal audit department of three staff. The head of internal audit reports to the finance director, who sets the department's budget and annual pay rises. The department's last review was of the new payables system, which the head of internal audit helped to design. Identify the threats to objectivity and recommend safeguards.

Show the solution

Reporting to the finance director who sets budget and pay: this is a self-interest and intimidation threat. The finance director can punish unwelcome findings.
Helping design the payables system and then reviewing it: this is a self-review threat. The head is unlikely to criticise their own work.
Safeguard for the first threat: the head of internal audit should report functionally to the audit committee, which should approve the budget, plan and pay.
Safeguard for the second threat: internal audit should not take part in designing or operating systems. Another team member, or an outsourced reviewer, should review the payables system.
Add that the committee should meet the head of internal audit privately and that internal audit should have unrestricted access to records and staff.

Answer: Threats are self-interest and intimidation from the finance director's control of budget and pay, and self-review from designing the payables system. Safeguards are reporting to the audit committee, committee approval of budget and pay, no involvement in system design, and an independent reviewer for the payables system.

Example 2

Which ONE of the following would MOST improve the objectivity of an internal audit function? A. The chief executive approves all internal audit reports before they are issued. B. The head of internal audit reports functionally to the audit committee. C. Internal auditors are transferred into operational roles every year. D. The internal audit plan is set by the managers whose departments are audited.

Show the solution

Option A lets the chief executive filter reports, so it reduces objectivity.
Option C mixes internal audit with operations, which creates self-review risk. Rotation of audit staff is useful, but giving them operational roles is not.
Option D lets auditees choose what is reviewed, so it reduces objectivity.
Option B gives control to independent non-executive directors, which is the main safeguard.

Answer: B. Functional reporting to the audit committee best protects objectivity.

Exam tips

Always write 'audit committee' when discussing safeguards. It is the key term examiners look for.
Tie every point to a scenario fact. Generic lists earn few marks.
Do not call internal auditors 'independent' without qualification. Use 'objective' and explain the limits.
In objective questions, choose the option that increases separation from management and reject any that give executives control.

Internal Audit Independence and Reporting in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Internal Audit Independence and Reporting: frequently asked questions

Can internal auditors ever be fully independent?

No. They are part of the organisation and are paid by it. The aim is objectivity, supported by reporting to the audit committee and sensible safeguards.

Who should the head of internal audit report to?

Functionally, to the audit committee or board. Administratively, it can be to a senior executive such as the chief executive. Reporting to the finance director is weaker.

What happens if there is no audit committee?

Recommend setting one up. Until then, the head of internal audit should have direct access to the board or to independent non-executive directors.

How does independence affect the external auditor?

The external auditor considers internal audit's objectivity and status when deciding whether to use its work. Weak independence means less reliance on that work.