ACCA Strategic Professional · Strategic Business Leader · Audit and compliance
Orlando Pharma's board plans to outsource its internal audit function to cut costs. The head of internal audit would be made redundant, and the contract would be managed by the finance director, whose department is the main subject of the audits. The contract's scope will be set annually by the finance director. Which is the most significant weakness in this arrangement?
The key weakness is the reporting line: the finance director controls scope of a provider auditing his own area, damaging independence. Outsourcing is acceptable if the audit committee oversees appointment, scope, fees and receives reports directly.
- AOutsourcing is always inconsistent with good governance
- BThe provider will lack knowledge of the industry, which cannot be addressed by contract
- COversight of the provider by the finance director compromises independence, since the auditee controls scope and reporting; the audit committee should oversee the appointment, scope and reportingCorrect
- DThe redundancy of one employee will reduce morale, which is the only real risk
Explanation
Outsourcing can be acceptable, but independence depends on reporting lines. Where the audited function sets scope and receives reports, objectivity is undermined. The audit committee should approve scope, fees and removal, and receive reports directly. Industry knowledge can be handled by contract and selection.
Did you get it right without looking?
One question tells you little. A timed set on Audit and compliance shows your real accuracy, how long you take and where you lose marks.
More Audit and compliance questions
- Quillon Energy's audit committee receives an internal audit report on a key control. Testing found that the control is well designed, but in…
- At Brandt Logistics, a finance clerk discovers that the finance director has been deferring the recognition of costs to meet a bonus target.…
- Brenmore Ltd operates in a country that has introduced a strict, legally binding code on board audit committees, with penalties for non-comp…
- Brenmoor Ltd's internal audit function reports solely to the finance director. The internal auditors recently found that the finance directo…
- Kestrel Bank must comply with a data protection law that requires notification of regulators within a fixed period after a personal data bre…
- During an operational audit of Karst Retail's returns department, an internal auditor notices that a single clerk both authorises refunds an…