Strategic Business Leader · Audit and compliance

Internal Audit Types: Operational, Value for Money and Fraud

Updated 11 October 2026 · Fact-checked

Internal audit work falls into types by purpose: financial audit checks the reliability of records, operational audit reviews efficiency of processes, compliance audit tests adherence to laws and policies, value for money audit assesses economy, efficiency and effectiveness, and fraud investigation looks into suspected wrongdoing. Match the type to the scenario's concern, then apply it.

Understand Internal Audit Types: Operational, Value for Money and Fraud

Internal audit is an independent, objective assurance and advisory activity within an organisation. It does not do one single job. The board or audit committee points it at different problems, and each problem needs a different type of work.

Start with the question each type answers. Financial audit: can we rely on the accounting records and financial information? Operational audit: are processes and activities working well? Compliance audit: are we following laws, regulations, contracts and internal policies? Value for money (VFM) audit: are we getting the most from the resources we spend? Fraud investigation: did something dishonest happen, who did it and how much was lost?

VFM is judged using the 3 Es. Economy means buying inputs of the right quality at the lowest cost. Efficiency means getting the most output from the inputs used. Effectiveness means achieving the objectives set. Many students add a fourth E, equity or ethics, in public sector settings, but the three core Es are what you must know. The Es can conflict. A cheap supplier (economy) may deliver poor quality that harms outcomes (effectiveness).

Operational audit is wider than financial audit. It looks at processes such as procurement, logistics or customer service, and asks whether they are efficient and meet objectives. It often overlaps with VFM. Financial audit looks backwards at the numbers. Operational audit looks at how work is done and how it could improve.

Fraud work is different in nature. Routine audits are planned and cover samples. A fraud investigation is reactive, is triggered by a suspicion or a tip-off, and needs care over evidence, confidentiality and legal rules. Internal audit should also assess the organisation's fraud risks and controls as part of its normal work. In SBL, link the type to governance, risk, ethics and the audit committee.

Key rules to remember

The 3 Es of value for money: VFM = Economy + Efficiency + Effectiveness; Economy = cost of inputs; Efficiency = output per unit of input; Effectiveness = objectives achieved. Say which E each point relates to.
Efficiency (simple measure): Efficiency = Output ÷ Input; Use the measure that fits the scenario, such as cases processed per employee or cost per unit.
Type-to-purpose match: Financial = reliability of records; Operational = process performance; Compliance = adherence to rules; VFM = 3 Es; Fraud = investigate suspected dishonesty; Use this as a quick label list before you write.

How to solve Internal Audit Types: Operational, Value for Money and Fraud questions

Use this method for any question on types of internal audit work. It keeps the answer tied to the scenario, which is where the marks are.

1Read the requirement. Does it ask you to identify, explain, recommend or evaluate types of audit?
2Find the concern in the scenario: unreliable figures, slow processes, rule breaches, overspending, or suspected theft.
3Name the audit type that fits each concern and define it in one line.
4Explain what the auditor would actually do in this company, such as test controls, review processes, compare costs or interview staff.
5For VFM, apply the 3 Es separately using facts and numbers from the scenario.
6State limits or risks, such as cost, independence, skills, or the need for legal advice in fraud cases.
7Finish with a clear recommendation and who should receive the report, usually the audit committee.

Quickest way: Concern, type, action, report

When to use it: Use when time is short or the question has only a few marks per point.

Underline the concern in the scenario.
Write the matching audit type in a few words.
Add one specific action the auditor would take.
Add one scenario fact as evidence.
Note the report goes to the audit committee, not just management.

Common mistakes in Internal Audit Types: Operational, Value for Money and Fraud

Treating operational audit and financial audit as the same thing.
Both involve reviewing a department and looking at evidence.
Fix: Say financial audit tests reliability of records, while operational audit tests how well a process performs and whether it can improve.
Listing the 3 Es without applying them.
Students memorise the words and stop there.
Fix: Take one fact for each E from the scenario and say whether it is good or poor, with a reason.
Confusing economy with efficiency.
Both sound like saving money.
Fix: Economy is about the price paid for inputs. Efficiency is about output from the inputs used.
Saying internal audit should simply catch fraud.
Students assume audit equals fraud detection.
Fix: Management owns fraud prevention. Internal audit assesses fraud risk and controls and may investigate when asked, using proper procedures.
Giving a generic essay on audit with no link to the case.
Students rush to show knowledge.
Fix: Use the company name, its figures and its problems in every paragraph to earn application and professional skills marks.
Ignoring that cheaper is not always better in VFM.
Focus on economy alone.
Fix: Discuss the trade-off with effectiveness, for example low-cost suppliers causing quality complaints.

Worked examples

Example 1

A retail company has seen rising stock losses and slow customer returns processing. The audit committee asks the internal auditor which types of audit work are suitable. Advise the committee.

Show the solution

Concern 1 is rising stock losses. This could be poor controls over stock or possible theft. A compliance audit would test whether stock-handling procedures are followed.
If specific theft is suspected, a fraud investigation would be needed. It would be reactive, confidential and carefully documented.
Concern 2 is slow returns processing. This is a process issue, so an operational audit fits. The auditor would map the process, find delays and suggest improvements.
The audit committee can also ask for a VFM review of the costs of stock loss and returns handling, using the 3 Es.
The reports should go to the audit committee to preserve independence.

Answer: Use a compliance audit for stock procedures, a fraud investigation if theft is suspected, and an operational audit for returns processing. A VFM review can assess the cost of these problems. Report to the audit committee.

Example 2

A public hospital spent ₹4,80,00,000 on new equipment. Scans per month rose from 1,000 to 1,200, but waiting times for patients are unchanged and a similar hospital bought comparable equipment for ₹4,00,00,000. Assess the purchase using the 3 Es.

Show the solution

Economy: the hospital paid ₹4,80,00,000 against ₹4,00,00,000 for comparable equipment. The difference is ₹80,00,000, which is 20% more (80,00,000 ÷ 4,00,00,000). Economy appears poor unless the specification was higher.
Efficiency: output rose from 1,000 to 1,200 scans a month. That is an increase of 200, or 20% (200 ÷ 1,000). The equipment is producing more output.
Effectiveness: the objective is likely better patient care. Waiting times are unchanged, so the objective is not yet met even though volume is up.
Conclusion: the 3 Es give a mixed picture. Efficiency improved, economy looks weak and effectiveness is not shown.
Recommend reviewing the procurement process, checking the specification, and investigating why higher scan volume has not cut waiting times.

Answer: Economy is poor (20% above the comparable price), efficiency has improved (20% more scans), and effectiveness is not demonstrated because waiting times are unchanged. Review procurement and the causes of the waiting times.

Exam tips

Match each audit type to a named concern in the scenario. A list of definitions alone scores poorly.
When the question mentions the 3 Es, use them as headings in your answer and give a judgement for each.
Use numbers from the case where possible and check your percentages before writing them.
Mention independence and reporting lines to the audit committee. It shows governance awareness and professional skills.
Do not write a long essay on fraud theory. Give practical steps, such as securing evidence, confidentiality and involving legal advisers.

Practice questions from Audit and compliance

Internal Audit Types: Operational, Value for Money and Fraud in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Internal Audit Types: Operational, Value for Money and Fraud: frequently asked questions

What are the main types of internal audit?

The main types are financial, operational, compliance, value for money and fraud investigation. Each has a different purpose. In the exam, pick the types that match the problems described in the scenario.

What is the difference between operational audit and financial audit?

Financial audit checks whether accounting records and financial information are reliable. Operational audit looks at how processes work and whether they are efficient and meet objectives. Operational audit is forward-looking and aims at improvement.

What are the 3 Es in a value for money audit?

They are economy, efficiency and effectiveness. Economy is about the cost of inputs, efficiency is output relative to input, and effectiveness is whether objectives are achieved. Apply each to the facts in the case.

Is internal audit responsible for detecting fraud?

Management is responsible for preventing and detecting fraud. Internal audit evaluates fraud risk and the controls in place, and it may investigate suspected fraud if asked. Its reports should go to the audit committee.