Internal Audit, Management and Operational Audit
Internal Audit, Management and Operational Audit
Internal Audit, Management and Operational Audit
MANAGEMENT AND
OPERATIONAL AUDIT
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
14.1 +91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
Internal Audit
Internal Audit provides Independent assurance on effectiveness of internal controls and risk management
processes to enhance governance and achieve organisational objectives
14
Practices
wReview of compliance with laws and regulations: Review of compliance with newly applicable Tax
Regime.
wRisk management: Evaluation and management of Risk Exposure for complex financial instruments
transactions
wGovernance: Assessment of Governance Process in the accomplishment of objectives on ethics
and values.
Internal Auditor
lIndividual/firm/body corporate - CA/Cost aaccountant /any other professional whether in practice or
not
lMay or may not be employee of Co.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
+91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources 14.2
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
Main Responsibilities of Internal Auditor
wMaintain adequate system of Internal Control (IC) by continuous Examination
wTo operate independently of accounting staff
wNot involve himself in executive functions to maintain objective outlook
wTo observe facts & situations & bring them to notice of authorities
wAssociate closely with Management & keep knowledge upto date about business
wAt all times, enjoy independent status
by process owner
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
14.3 +91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
Ÿ Whether – detailed enough to be identified with specific operating responsibility
Ÿ Review method of establishing stds & norms
Ÿ Wide divergence – b/w actual performance & std – reasons maybe considered
14
to override objectivity especially while arriving at conclusions or reporting opinion.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
+91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources 14.4
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
c)Executive summary of key observations covering important aspects & specific to scope of assignment
d)Summary of corrective actions required (or agreed by management) for each observation
e)Nature of assurance, if any, which can be derived from observations.
Content & form depends on Prof judgment of Internal Auditor in consultation with auditee & Draft report
to be issued before Final Report
Follow Up
Ÿ As per SIA 390 Monitoring & Reporting of Prior Audit Issues(PAI), Chief Internal Auditor responsible
for continuous monitoring closure of PAI through timely implementation of action plans.
Ÿ The responsibility to implement action plans stays with the management.
Ÿ Internal Auditor should review follow up action taken by management based on his observations. If no
action taken in reasonable time - draw management attention to it. Where management not acted on
his suggestions or implemented recommendations - Internal Auditor ascertain reasons
14
Ÿ Where management has accepted recommendations & initiated necessary action, Internal Auditor
periodically review the manner & extent of implementation of recommendations & report which
recomm. not implemented fully/partly.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
14.5 +91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
SA 610 Deals with certain matters with certain aspects on relationship between Internal & External
Auditor:
Determining whether in which Areas & what extent the work of IA function can be used:
Evaluation of IA Function: Includes Appraisal Activity, Evaluation adequacy and effectiveness of
Internal Controls
14
Scope of IA Function: Monitoring Internal controls; Review of operating activities
Objective of evaluation of IA Function: Assurance to management, Evaluate and improve the
effectiveness
Sole responsibility of audit opinion à External Auditor
External auditor has to obtain SAAE that work of INTERNAL AUDITOR Function or
Internal auditor providing direct assistance is adequate for purpose of audit
Scope of SA:
a)Using work of INTERNAL AUDITOR Function in obtaining audit evidence &
b)Using internal auditors to provide direct assistance (DA) under Direction, Supervision &
Review of External auditor (DSR)
This SA doesn't apply if entity doesn't have INTERNAL AUDITOR function
Internal Audit Function: A function of entity that performs assurance and consulting activities
designed to evaluate and improve effectiveness of entity's governance, risk management and
internal control processes (GRC).
Direct Assistance: The use of internal auditors to perform audit procedures under direction,
supervision and review of external auditor.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
+91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources 14.6
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
Evaluating whether work of Internal Audit Function can be used for Audit Purpose
(a)The extent to which internal audit function's organizational status and relevant
policies and procedures support objectivity of internal auditors;
(b)The level of competence of internal audit function; and
(c)Whether internal audit function applies a systematic and disciplined approach, including
quality control. (DISCO)
Determining Nature & Extent of work of Internal Audit Function that can be used
Types of Work of internal audit function that can be used by external auditor include following:
! Testing of operating effectiveness of controls.
! Substantive procedures involving limited judgment.
! Observations of inventory counts.
! Tracing transactions through the information system relevant to financial reporting.
! Testing of compliance with regulatory requirements.
14
! In some circumstances, audits or reviews of financial information of subsidiaries that are not
significant components to group (where this does not conflict with the requirements of SA
600).
To determine adequacy of specific work performed by internal auditors for external auditor's purposes,
external auditor shall evaluate whether:
i.The work was performed by internal auditors having adequate technical training and
proficiency;
ii.The work was properly supervised, reviewed and documented;
iii.Adequate audit evidence has been obtained to enable internal auditors to draw reasonable
conclusions;
iv.Conclusions reached are appropriate in circumstances and any reports prepared by internal
auditors are consistent with results of work performed; and
v.Any exceptions or unusual matters disclosed by internal auditors are properly resolved.
Written Agreements: Prior to using internal auditors to provide direct assistance for purposes of audit
(a)Obtain written agreement from authorized representative of entity that INTERNAL AUDITOR will
be allowed to follow external auditor's instructions, and entity will not intervene in work the
internal auditor performs for external auditor; and
(b)Obtain written agreement from internal auditors that they will keep confidential specific matters
as instructed by external auditor and inform external auditor of any threat to their objectivity.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
14.7 +91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
procedures or evaluating audit evidence gathered is more than limited;
(c)Relate to work with which internal auditors have been involved and which has already been,
or will be, reported to Mgt or TCWG by internal audit function; or
(d)Relate to decisions external auditor makes in accordance with this SA regarding internal audit
function and use of its work or direct assistance.
14
Documentation: External auditor uses Internal Auditor to provide direct assistance
(a)Evaluation of existence and significance of threats to objectivity, and level of competence of
internal auditors used to provide direct assistance;
(b)Basis for decision regarding nature and extent of work performed by internal auditors;
(c)Who reviewed work performed and date and extent of that
review in accordance with SA 230;
(d)Written agreements obtained from authorized representative of entity and the internal auditors
(e)Working papers prepared by internal auditors who provided direct assistance on the audit
engagement.
Management Audit
Management Audit and Operational Audit
The scope and content of management audit should cover everything that we know as operational
audit and, in addition, it should also include review of adequacy and competence of objectives, plans,
policies and decisions of top mgt.
¨Management audit is concerned with “Quality of managing”, whereas operational audit focuses on
“Quality of operations”.
¨Management audit is “Audit of management” while operational audit is “Audit for the
management”. The focus of Management audit is on “Quality of Decision Making” rather than
effectiveness or efficiency of operations.
¨The basic difference b/w two audits, then, is not in method, but in level of appraisal. In a
Management audit, the auditor is to make his tests to the level of top management, its formulation
of objectives, plans and policies and its decision making.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
+91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources 14.8
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
What knowledge necessary to be a mgt. auditor?
i.Purpose for which organization. has been created
ii.Management structure including delegation of authority, planning & budgeting
iii.Reports required & reports actually received for Management
iv.Internal Controls
v.Production Planning
vi.Factory layout, design & installed capacity
vii.Sales Management & sales planning
viii.Personnel policy & personnel mgt including requirements, training, welfare, incentives
& disincentives
evaluates
Ø how well Management accomplish its objectives
Ø how effective management is planning, organising, directing, controlling, & coordinating
org acts.
This evaluation is aided with Management Audit Questionnaire.
¨Managerial problems & operational difficulties can be spotted before the fact. They can help
pinpoint problems developing from small scale.
¨Its another Management tool to achieve org objectives. Capability of mgt audit questionnaire to
pinpoint problem areas is a plus factor.
¨Management audit is Clearly helpful in case of ailing industries, to isolate problems & account for
their ailments.
¨Often, Management audits conducted prior to investments in entity, M&A, or b4 any other
strategic decision.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
14.9 +91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
The function should be entirely independent as possible of pressures from various group.
3.Allocation of Personnel
lIt is important that all Persons selected & assigned should have good understanding of
audit theory, fundamentals of organisation & Management, the principles and effective
method of control and requirement of conducting scientific appraisal
lBasic knowledge of:
ØTechnology & commercial practices
ØCommerce, law, tax, cost a/c, Economics, EDP systems
14
Time and other aspects varies Depending on nature & scope of work.
6.Frequency
It is considered to be long time frame, but interval shouldn't exceed 3 years.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
+91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources 14.10
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
4.Summary written reports:
ØAlso referred as Flash Reports, They summarize individual reports. These are primarily for audit
committees or higher level Management
ØEspecially useful for top level managers who don't actively review individual reports. Also useful
for general auditor to see overall reporting effort with more perspective & on integrated basis
3.Action/response of mgt on Audit report: Where mgt has not acted upon suggestions of
auditor or not implemented his recommendations, auditor should ascertain reasons for same
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
14.11 +91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
Solutions to behavioural problems:
There is a need to demonstrate to extent possible that:
1.The audit is part of an overall programme mandated by higher-level authority to meet higher-
level organisational needs for both protection and maximum constructive benefit.
2.The objective of review is to provide maximum service in all feasible managerInternal Auditorl
dimensions.
3.The review will be conducted with minimum interference with regular operations of the
operating personnel.
4.the responsible officers will be kept fully informed and have opportunity to review findings
and recommendations before any audit report is formally released.
14
1.Constructive criticism - He should also make obvious in his report the value of his comments in
tangible terms. Only then would suggestions carry weight with the auditees and they will feel
convinced that the auditor has been objective in his remarks in the report.
2.Reporting methods - Adopting friendly but firm tone in report. It is always possible to disagree
without being disagreeable and to criticise without being critical. The reports should concentrate on
areas that need improvement rather than listing inefficiencies and deficiencies in performance of
auditee.
3.Participative approach - Auditor's reports have better acceptability if improvements suggested are
discussed with those who have to implement them and made to feel that they have participated in
the recommendations made for improvements.
Operational Audit
Operational Audit: It involves evaluating the effectiveness & efficiency of operations. Not a one-time
activity should be conducted at least once in 3 years.
Operational vs Internal Audit
The difference in approach of both of these audits is illustrated below:
1.Perception - Traditionally, internal auditors have been engaged in a sort of protective function. They
view and examine internal controls in financial and accounting areas to ensure that possibilities of
loss, wastage and fraud are not there; they check accounting books and records to see, whether
internal checks are properly working and resulting accounting data are reliable.
2.Issues - The basic difference that exists in technique of operational auditing is in auditor's role in
recommending corrections or in installing systems and controls.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
+91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources 14.12
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
A further distinction lies in attitude and approach to whole auditing proposition. Every aspect of
operational auditing programme should be geared to management policies, objectives and goals.
3.Objectives - Main objective of operational auditing is to verify fulfilment of plans and sound
business requirements as also to focus on objectives and their achievement objectives; operational
auditor should not only have a proper business sense, he should also be equipped with thorough
knowledge of policies, procedures, systems and controls, he should be intimately familiar with
business.
Today, however, concept of modern internal auditing suggests that there is no difference in internal and
operational auditing. The modern internal auditing performs both protective as well as constructive
functions.
The Auditor should possess some very essential personal qualities to be effective in his work.
1.His knowledge beyond accounting and finance would be scanty and this is reason which should make
him even more inquisitive.
2.He should ask the who, why, how of everything. He should try to visualise whether simpler
alternative means are available to do a particular work.
3.He should try to see everything as to whether that properly fits in business frame and organisational
policy. He should be persistent and should possess attitude of skepticism.
4.He should imbibe collaborative and constructive approach rather than fault-finding approach and
should give feeling that his efforts are to help to attain an improved operation and not merely fault
finding.
5.If auditor succeeds in giving feeling of help and assistance through constructive criticism, he will be
able to obtain co-operation of persons who are involved in operations. Try to develop a team
comprised of people of different backgrounds. The involvement of technical people in operational
auditing is generally helpful.
Operational audit is considered as a specialised management information tool to fill the void that
conventional information sources fail to fill. Conventional sources of management information are
departmental managers, routine performance report, internal audit reports, and periodic special
investigation and survey. These conventional sources fail to provide information for best direction of
departments. The shortcomings of these sources can be stated as under:
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
14.13 +91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
(I)Executives and managers are too preoccupied with implementation of plans and achieving of targets.
(ii)Managers or their aides are generally relied upon for transmitting information than for booking for
information or for analysing situations.
(iii)The information that is transmitted by managers is not necessarily objective - often it may be
biased for various reasons.
(iv)Conventional internal audit reports are often routine and mechanical in character and have
definite leaning towards accounting and financial information. They are also historical in nature.
(v)Other performance reports contained in annual audited accounts and routine reports prepared by
operating departments have own limitations.
(vi)Surveys and special investigations, are very useful but these are at best occasional in character.
Also, they are costly, time consuming and keep departmental key personnel busy during the period
they are on.
14
Functional Audits: Categorizing the activities of business, Focuss on one function of the organization say
production engineering. Considerable expertise in one area. Disadvantage is it fails to evaluate
interrelated functions.
Organizational Audit: Focusses on entire Organizational unit
Special Assignments: They arise at the request of management.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
+91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources 14.14
PAPER 3 -ADVANCED AUDITING AND PROFESSIONAL ETHICS SCORE 70+ IN AUDIT
CA Ravi Agarwal's
AUDITPEDIA 5.0 FOR CA FINAL
accomplished effectively?
2.Does the system or procedure operate within framework of organisational structure?
3.Does system or procedure adequately provide methods of control in order to obtain maximum
performance with least expenditure of time and effort?
4.Does system or procedure provide means for effective coordination between one deptt and another?
5.Have all required functions been established?
¨Designing of MAQ-
lThere are three possible answers to the MAQ: Yes, No, Not Applicable
Ø“Yes” indicates acceptable performance
Ø“No” indicates unacceptable performance & therefore, it requires written explanation
Ø“Not Applicable” indicates that the question does not apply.
JOIN CA RAVI AGARWAL'S MENTORING PROGRAM TO CRACK YOUR CA EXAMS IN ONE ATTEMPT
14.15 +91-8334866117 or visit www.caraviagarwal.com. Join our Telegram Channel https://t.me/caraviagarwaloriginal for free resources