Skip to content

ACCA Strategic Professional · Strategic Business Leader

Audit and Compliance for ACCA SBL

Audit and compliance in SBL covers how internal audit, the audit committee, internal controls and ethical rules help a board manage risk and meet its obligations. You solve questions by naming the issue, applying it to the case facts, and giving a clear, reasoned recommendation to the board.

What this chapter covers

This chapter looks at assurance inside and around an organisation. It covers what internal audit does, how it differs from external audit, and whether the function should be in-house or outsourced. It then moves to the audit committee, internal control systems, types of internal audit work, compliance with laws and regulation, and auditor independence, ethics and whistleblowing.

In SBL you are not asked to perform an audit. You are asked to advise as a senior professional. A typical task asks you to evaluate a weakness in controls, recommend a change to the audit function, or advise the board on a compliance failure. Your answer must use the facts in the case.

The chapter links closely to governance, risk and ethics. Weak controls are a risk issue. An unchallenged board is a governance issue. A pressured finance director or an ignored whistleblower is an ethics issue. Learn the chapter as one connected toolkit, not as eight separate lists.

Audit, control and compliance problems appear in many SBL case studies, often as part of a wider governance or risk task. The 80 technical marks reward relevant, applied points, and the 20 professional skills marks reward analysis, scepticism, commercial acumen and communication. Control failures, fraud, weak boards and ethical pressure are easy to build into a scenario, so you need a ready set of ideas and a way to apply them. Students who only list textbook points score poorly. Students who link each point to the case score well.

Audit and compliance: topics in the order to study them

  1. 1Purpose and Role of Internal AuditStart here because every later topic builds on what internal audit is for and what value it adds to the board.
  2. 2Internal Audit vs External AuditOnce you know the role, compare it with external audit so you can separate the two in any scenario.
  3. 3Internal Audit Function: Outsourcing and In-House OptionsThis applies the role to a decision, which is a common task: should the organisation keep, set up or outsource the function?
  4. 4Audit Committee and Corporate GovernanceThe committee oversees internal audit and the control environment, so you need the function clear first.
  5. 5Internal Control Systems and Reviewing Their EffectivenessControls are what internal audit tests and the committee reviews, so this follows naturally.
  6. 6Internal Audit Types: Operational, Value for Money and FraudWith controls understood, you can see the different kinds of work internal audit performs on them.
  7. 7Compliance, Laws and RegulationThis widens the view to external obligations that controls and audit must support.
  8. 8Auditor Independence, Ethics and WhistleblowingFinish with ethics and independence, which draw on everything before and link to professional skills marks.

How to prepare Audit and compliance

Aim to understand why each idea matters to a board, then practise applying it to a case. Short written answers under time pressure are the best training.

  1. Read each topic once for understanding and make a one-page summary in your own words, with a few headline points per topic.
  2. For every topic, write down the typical question: evaluate, recommend, advise or explain. Then note what a good answer needs.
  3. Practise with past SBL cases. Underline facts in the scenario that point to a control weakness, a governance gap or an ethical issue.
  4. Write answers with a clear structure: point, link to the case, impact, recommendation. Keep each point short.
  5. Build the links to governance, risk and ethics. After each case, ask which other chapter the issue also touches.
  6. Time yourself. Allow for reading and planning, and practise finishing a full task in the time its marks allow.
  7. Review your answers for professional skills. Check for scepticism, a clear tone for the audience and practical advice, not just theory.

Common mistakes in Audit and compliance

  • Listing textbook points without using the case facts

    Fix: Use each point only if you can link it to a fact in the scenario. State the fact, then the consequence.

  • Mixing up internal and external audit

    Fix: Remember who each serves, what each reports on and what each is required to do. Write the contrast before you answer.

  • Treating the audit committee as a body that does the auditing

    Fix: State that it oversees and challenges. It reviews reporting, controls and the audit functions on behalf of the board.

  • Giving a recommendation with no reasoning or trade-off

    Fix: Weigh the options briefly, give a clear choice and say why. Mention cost, risk and practicality.

  • Ignoring ethics when a scenario hints at pressure or concealment

    Fix: Look for pressure on staff, undisclosed errors or ignored warnings. Name the ethical issue and the right professional response.

  • Neglecting professional skills marks

    Fix: Show scepticism, commercial awareness and a clear, fit-for-audience style. Answer the exact requirement and use a sensible structure.

Last-day revision: Audit and compliance

  • Internal audit gives independent, objective assurance and advice to improve governance, risk management and control.
  • Internal audit reports to the board or audit committee and is independent of the management whose work it reviews.
  • External audit gives an opinion on the financial statements for shareholders; internal audit serves management and the board and has a wider scope.
  • The decision to outsource internal audit weighs cost, expertise, independence, flexibility and loss of organisational knowledge.
  • The audit committee is usually made up of independent non-executive directors and oversees reporting, controls, risk and both audit functions.
  • Controls include preventive, detective and corrective types, and a weak control environment affects everything else.
  • Review controls by assessing design, whether they operate in practice, and whether they cover the key risks.
  • Operational audit looks at efficiency of processes; value for money audit looks at economy, efficiency and effectiveness; fraud work looks at detection and prevention.
  • Compliance means meeting laws, regulations and codes, and failure can bring fines, loss of licence and reputational damage.
  • Independence threats include self-interest, self-review, advocacy, familiarity and intimidation, and safeguards reduce them.
  • Whistleblowing needs a trusted channel, protection for the individual and a clear response by the board.
  • Always tie advice to the facts in the case and finish with a clear recommendation.

Audit and compliance practice questions

Audit and compliance in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit and compliance: frequently asked questions

How much of SBL does audit and compliance cover?

It is not a fixed share of the exam, and ACCA does not set a split by chapter. The ideas often appear inside governance, risk and ethics tasks, so treat it as a core skill, not a standalone topic.

Do I need detailed audit procedures for SBL?

No. SBL tests advice at board level, not audit testing steps. You need to understand the role of audit, controls and compliance and apply them to the case.

How should I answer an internal audit question in SBL?

Read the requirement, find the relevant facts, then make clear points that link each fact to its impact. End with a practical recommendation. Keep the language suitable for the audience named in the task.

Is this chapter connected to ethics?

Yes. Independence, whistleblowing and pressure on professionals are ethical issues. Practise spotting them in cases and responding with professional judgement.