CS Professional · Internal and Forensic Audit

Internal Audit: Introduction and Overview for CS Professional

Internal audit is an independent, objective assurance and advisory activity that evaluates a company's risk management, internal control and governance processes. To answer questions on it, define the concept, compare it with related ideas, state the legal rule under Section 138, and apply both to the facts given.

What this chapter covers

This chapter is the foundation of Elective 4.2, Internal and Forensic Audit. It explains what internal audit is, who performs it, how it differs from external audit, internal control and internal check, and what the law requires. It also introduces the standards and the steps of an internal audit engagement.

The Internal Audit part of the paper carries 60 marks and the Forensic Audit part carries 40. Later chapters on planning, execution, reporting, risk-based audit and sector audits all assume you know the ideas here. If the basics are shaky, those chapters will feel like a list of unrelated procedures.

The elective is an open book paper, but books do not help much if you cannot find or apply the right point quickly. Treat this chapter as the vocabulary and the legal base. Questions are written and case-based, so you must connect each concept to the facts of a company and reach a clear conclusion.

Almost every answer in the Internal Audit part starts from the concepts in this chapter. Comparison questions, such as internal versus external audit, are easy to score because the structure is predictable. Questions on the legal framework test whether you can state who must appoint an internal auditor and apply that to a company's facts. A student who masters this chapter writes sharper answers throughout the paper and wastes less time searching a book during the exam.

Internal Audit: Introduction and Overview: topics in the order to study them

1Meaning and Concept of Internal AuditStart here because every later topic uses this definition and its key features.
2Internal Audit vs External AuditThis is the most common comparison and it sharpens your understanding of the scope and independence of internal audit.
3Internal Audit vs Internal Control and Internal CheckThese three terms are easily confused, so study them right after the audit comparison while the distinctions are fresh.
4Role and Functions of Internal AuditorOnce the concepts are clear, you can see what the internal auditor actually does for management and the board.
5Types and Approaches of Internal AuditThis builds on the functions and shows how audits are classified and carried out in practice.
6Legal Framework: Section 138 and Internal Audit RulesStudy the law after the concepts so you can apply who must have an internal auditor and what the rules require.
7Internal Audit Standards and Engagement ProcessEnd with the standards and the engagement steps, which lead directly into the planning and execution chapters that follow.

How to prepare Internal Audit: Introduction and Overview

Aim to understand the logic first and then build answer structures you can reproduce in three hours.

Read each topic once for understanding. Write the definition of internal audit in your own words and note its key features.
Make a comparison table on paper for internal versus external audit, and another for audit, control and check. Use the same points on both sides, such as objective, appointment, independence, scope and reporting.
For the legal framework, read the text of Section 138 and the related rules directly. Note which classes of companies are covered and who may be appointed. Check every detail against the current text before you rely on it.
Learn the standards and the engagement process as a sequence. Be able to list the steps in order and say what happens at each one.
Practise two or three short case-based questions. Use a fixed pattern: state the provision, analyse the facts, then give a clear conclusion.
Prepare your open book. Mark the definitions, the comparison points and the legal provisions with tabs so you can find them in seconds, but do not depend on copying text.

Common mistakes in Internal Audit: Introduction and Overview

Treating internal audit as a smaller version of statutory audit.
Fix: State the difference in purpose, appointment, independence, scope and reporting line. Internal audit serves management and the board and covers more than financial statements.
Using internal control, internal check and internal audit as if they mean the same thing.
Fix: Remember the relationship: internal check sits inside internal control, and internal audit independently tests the whole control system.
Stating the Section 138 requirements from memory with wrong classes of companies or thresholds.
Fix: Read the section and the rules directly, and write the conditions exactly. Apply them to the facts in the question before concluding.
Writing long theory answers with no link to the facts in a case question.
Fix: Use the provision, analysis, conclusion pattern. Quote the facts in your analysis and end with a clear answer.
Assuming the open book format removes the need to learn the chapter.
Fix: Learn the core concepts and the comparison points thoroughly. Use the book only to confirm exact wording and legal text.

Last-day revision: Internal Audit: Introduction and Overview

Internal audit is an independent and objective assurance and advisory activity that adds value and improves operations.
Internal audit reviews risk management, control and governance processes.
Internal auditors report to management or the audit committee, while the statutory auditor reports to members.
External audit looks at the true and fair view of financial statements. Internal audit has a wider scope set by management.
Internal control is the system of policies and procedures. Internal audit evaluates that system.
Internal check is part of internal control. It divides duties so that one person's work is checked by another.
The internal auditor advises on weaknesses but does not take management decisions.
Audits can be classified by purpose, such as financial, operational and compliance audits.
Section 138 requires certain prescribed companies to appoint an internal auditor. Check the exact classes in the rules.
The internal auditor may be an individual or a firm, and the rules set out who is eligible. Verify this in the rules.
The engagement process runs from planning to fieldwork, reporting and follow-up.
In case answers, always follow this order: provision, facts, conclusion.

Internal Audit: Introduction and Overview practice questions

Internal Audit: Introduction and Overview in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Internal Audit: Introduction and Overview: frequently asked questions

What is the weightage of this chapter in the exam?

The Internal Audit part of Elective 4.2 carries 60 marks out of 100, but this chapter's share within it is not something we can state. Treat it as a base chapter because later chapters depend on it.

Is Elective 4.2 an open book paper?

Yes, elective papers are open book examinations. You still need to know the concepts well, because questions are written and case-based and you must analyse the facts yourself.

Which topic should I study first in this chapter?

Start with the meaning and concept of internal audit. Then move to the comparison with external audit, and then to internal control and internal check, so the definitions are clear before you study the law and standards.

How should I answer a question on Section 138?

State what the section requires, apply it to the company in the question, and give a clear conclusion. Use the exact conditions from the current text of the section and rules.