For other uses, see Audit (disambiguation).
|
|
| This article has multiple issues. Please help improve it or discuss these issues on the talk page. |
|
|
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (October 2010) |
|
|
The examples and perspective in this article may not represent a worldwide view of the subject. Please improve this article and discuss the issue on the talk page. (January 2010) |
|
|
Auditing is defined as a systematic and independent examination of data, statements, records, operations and performances (financial or otherwise) of an enterprise for a stated purpose. In any auditing the auditor perceives and recognizes the propositions before him for examination, collects evidence, evaluates the same and on this basis formulates his judgment which is communicated through his audit report.[1]
Any subject matter may be audited. Audits provide third party assurance to various stakeholders that the subject matter is free from material misstatement. The term is most frequently applied to audits of the financial information relating to a legal person. Other areas which are commonly audited include: internal controls, quality management, project management, water management, and energy conservation.
As a result of an audit; stakeholders may effectively evaluate and improve the effectiveness of risk management, control, and the governance process; over the subject manner.
Contents
- 1 Accounting
- 1.1 Integrated audits
- 1.2 Assessments
- 1.3 Auditors
- 2 Performance audits[7]
- 3 Quality audits
- 4 Project management
- 5 Energy audits
- 6 Operations audit
- 7 Forensic audits
- 8 See also
- 9 References
Accounting
Main article: Financial audit
Due to strong incentives (including taxation, misselling and other forms of fraud) to misstate financial information, auditing has become a legal requirement for many entities whom have the power to exploit financial information for personal gain. Traditionally, audits were mainly associated with gaining information about financial systems and the financial records of a company or a business.
Financial audits are performed to ascertain the validity and reliability of information, as well as to provide an assessment of a system's internal control. As a result of this a third party can express an opinion of the person / organization / system (etc.) in question. The opinion given on financial statements will depends on the audit evidence obtained.
Due to constraints, an audit seeks to provide only reasonable assurance that the statements are free from material error. Hence, statistical sampling is often adopted in audits. In the case of financial audits, a set of financial statements are said to be true and fair when they are free of material misstatements – a concept influenced by both quantitative (numerical) and qualitative factors. But recently, the argument that auditing should go beyond just true and fair is gaining momentum.[2] And the US Public Company Accounting Oversight Board has come out with a concept release on the same.[3]
Cost accounting is a process for verifying the cost of manufacturing or producing of any article, on the basis of accounts measuring the use of material, labor or other items of cost. In simple words, the term, cost audit means a systematic and accurate verification of the cost accounts and records, and checking for adherence to the cost accounting objectives. According to the Institute of Cost and Management Accountants of Pakistan, a cost audit is "an examination of cost accounting records and verification of facts to ascertain that the cost of the product has been arrived at, in accordance with principles of cost accounting."[citation needed]
In most nations, an audit must adhere to generally accepted standards established by governing bodies. These standards assure third parties or external users that they can rely upon the auditor's opinion on the fairness of financial statements, or other subjects on which the auditor expresses an opinion.
Integrated audits
In US audits of publicly traded companies are governed by rules laid down by the Public Company Accounting Oversight Board (PCAOB), which was established by Section 404 of the Sarbanes–Oxley Act of 2002. Such an audit is called an integrated audit, where auditors, in addition to an opinion on the financial statements, must also express an opinion on the effectiveness of a company's internal control over financial reporting, in accordance with PCAOB Auditing Standard No. 5.[citation needed]
There are also new types of integrated auditing becoming available that use unified compliance material (see the unified compliance section in Regulatory compliance). Due to the increasing number of regulations and need for operational transparency, organizations are adopting risk-based audits that can cover multiple regulations and standards from a single audit event.[citation needed] This is a very new but necessary approach in some sectors to ensure that all the necessary governance requirements can be met without duplicating effort from both audit and audit hosting resources.[citation needed]
Assessments
The purpose of an assessment is to measure something or calculate a value for it. Although the process of producing an assessment may involve an audit by an independent professional, its purpose is to provide a measurement rather than to express an opinion about the fairness of statements or quality of performance.[citation needed]
Auditors
Auditors of financial statements can be classified into two categories:
- External auditor / Statutory auditor is an independent firm engaged by the client subject to the audit, to express an opinion on whether the company's financial statements are free of material misstatements, whether due to fraud or error. For publicly traded companies, external auditors may also be required to express an opinion over the effectiveness of internal controls over financial reporting. External auditors may also be engaged to perform other agreed-upon procedures, related or unrelated to financial statements. Most importantly, external auditors, though engaged and paid by the company being audited, should be regarded as independent.
The most commonly used external audit standards are the US GAAS of the American Institute of Certified Public Accountants; and the ISA International Standards on Auditing developed by the International Auditing and Assurance Standards Board of the International Federation of Accountants.[citation needed]
- Internal auditors are employed by the organizations they audit. They work for government agencies (federal, state and local); for publicly traded companies; and for non-profit companies across all industries. The internationally recognised standard setting body for the profession is the Institute of Internal Auditors - IIA (www.theiia.org). The IIA has defined internal auditing as follows: "Internal auditing is an independent, objective assurance and consulting activity designed to add value and improve an organization's operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control, and governance processes".[4] Thus professional internal auditors provide independent and objective audit and consulting services focused on evaluating whether the board of directors, shareholders, stakeholders, and corporate executives have reasonable assurance that the organization's governance, risk management, and control processes are designed adequately and function effectively. Internal audit professionals (Certified Internal Auditors - CIAs) are governed by the international professional standards and code of conduct of the Institute of Internal Auditors.[5] While internal auditors are not independent of the companies that employ them, independence and objectivity are a cornerstone of the IIA professional standards; and are discussed at length in the standards and the supporting practice guides and practice advisories. Professional internal auditors are mandated by the IIA standards to be independent of the business activities they audit. This independence and objectivity are achieved through the organizational placement and reporting lines of the internal audit department. Internal auditors of publicly traded companies in the United States are required to report functionally to the board of directors directly, or a sub-committee of the board of directors (typically the audit committee), and not to management except for administrative purposes. As described often in the professional literature for the practice of internal auditing (such as Internal Auditor, the journal of the IIA) -,[6] or other similar and generally recognized frameworks for management control when evaluating an entity's governance and control practices; and apply COSO's "Enterprise Risk Management-Integrated Framework" or other similar and generally recognized frameworks for entity-wide risk management when evaluating an organization's entity-wide risk management practices. Professional internal auditors also use Control Self-Assessment (CSA) as an effective process for performing their work.
- Consultant auditors are external personnel contracted by the firm to perform an audit following the firm's auditing standards. This differs from the external auditor, who follows their own auditing standards. The level of independence is therefore somewhere between the internal auditor and the external auditor. The consultant auditor may work independently, or as part of the audit team that includes internal auditors. Consultant auditors are used when the firm lacks sufficient expertise to audit certain areas, or simply for staff augmentation when staff are not available.
Performance audits[7]
Safety, security, information systems performance, and environmental concerns are increasingly the subject of audits. There are now audit professionals who specialize in security audits and information systems audits. With nonprofit organizations and government agencies, there has been an increasing need for performance audits, examining their success in satisfying mission objectives.
Quality audits
Main article: Quality audit
Quality audits are performed to verify conformance to standards through review of objective evidence. A system of quality audits may verify the effectiveness of a quality management system. This is part of certifications such as ISO 9001. Quality audits are essential to verify the existence of objective evidence showing conformance to required processes, to assess how successfully processes have been implemented, and to judge the effectiveness of achieving any defined target levels. Quality audits are also necessary to provide evidence concerning reduction and elimination of problem areas, and they are a hands-on management tool for achieving continual improvement in an organization.
To benefit the organization, quality auditing should not only report non-conformance and corrective actions but also highlight areas of good practice and provide evidence of conformance. In this way, other departments may share information and amend their working practices as a result, also enhancing continual improvement.
Project management
Projects can undergo 2 types of Project audits:[7]
- Regular Health Check Audits: The aim of a regular health check audit is to understand the current state of a project in order to increase project success.
- Regulatory Audits: The aim of a regulatory audit is to verify that a project is compliant with regulations and standards. Best practices of NEMEA Compliance Center describe that, the regulatory audit must be accurate, objective, and independent while providing oversight and assurance to the organization.
Energy audits
Main article: Energy audit
An energy audit is an inspection, survey and analysis of energy flows for energy conservation in a building, process or system to reduce the amount of energy input into the system without negatively affecting the output(s).
Operations audit
Further information: Operational audit
An operations audit is an examination of the operations of the client's business. In this audit the auditor thoroughly examines the efficiency, effectiveness and economy of the operations with which the management of the entity (client) is achieving its objective. The operational audit goes beyond the internal controls issues since management does not achieve its objectives merely by compliance of satisfactory system of internal controls. Operational audits cover any matters which may be commercially unsound. The objective of operational audit is to examine Three E's, namely:[citation needed] Effectiveness – doing the right things with least wastage of resources. Efficiency – performing work in least possible time. Economy – balance between benefits and costs to run the operations[citation needed]
A control self-assessment is a commonly used tool for completing an operations audit.[8]
Forensic audits
Also refer to forensic accountancy, forensic accountant or forensic accounting.
See also
- Academic audit
- Accounting
- Big Four auditors
- Comptroller, Comptroller General, and Comptroller General of the United States
- Continuous auditing
- COSO framework, Risk management
- EarthCheck
- Financial audit, External auditor, Certified Public Accountant (CPA), and Audit risk
- Independent review
- Information technology audit, Information technology audit process, History of information technology auditing, and Auditing information security
- Internal audit
- Audit Plan
- INTOSAI (International Organization of Supreme Audit Institutions)
- Lead Auditor, under the Chief Audit Executive, or Director of Audit
- Quality audit
- Cost audit
- Technical audit
- Management audit
- Operational audit
- Risk based audit
References
- ^ "Audit assurance".
- ^ McKenna, Francine. "Auditors and Audit Reports: Is The Firm's "John Hancock" Enough?". Forbes. Retrieved 22 July 2011.
- ^ "CONCEPT RELEASE ON POSSIBLE REVISIONS TO PCAOB STANDARDS RELATED TO REPORTS ON AUDITED FINANCIAL STATEMENTS". Retrieved 22 July 2011.
- ^ "Pages - Definition of Internal Auditing". Na.theiia.org. 2000-01-01. Retrieved 2013-09-02.
- ^ "Pages - International Professional Practices Framework (IPPF)". Na.theiia.org. 2000-01-01. Retrieved 2013-09-02.
- ^ "Professional internal auditors, in carrying out their responsibilities, apply COSO's Integrated Framework-Internal Control". Theiia.org.
- ^ a b Different Types of Audits (June 2013) Auditronix Guidance Note
- ^ Gilbert W. Joseph and Terry J. Engle (December 2005). "The Use of Control Self-Assessment by Independent Auditors". The CPA Journal. Retrieved 10 March 2012.
|
Social and environmental accountability
|
|
Ethics and
principles |
- Aarhus Convention
- Corporate accountability / behaviour / social responsibility
- Ethical banking
- Ethical code
- Extended producer responsibility
- Organizational ethics
- Organizational justice
- Principles for Responsible Investment
- Social responsibility
- Stakeholder theory
- Sullivan principles
- Transparency (behavioral
- social)
- UN Global Compact
|
|
|
Social
accounting |
- Double bottom line
- Ethical Positioning Index
- Higg Index
- Impact assessment (environmental
- equality
- social)
- ISO 26000
- Genuine progress indicator
- OHSAS 18001
- Performance indicator
- SA8000
- Social return on investment
- Whole-life cost
|
|
Environmental
accounting |
- Carbon accounting
- Eco-Management and Audit Scheme
- Emission inventory
- Environmental full-cost accounting / impact assessment / management system / profit-and-loss account
- ISO 14000
- ISO 14031:1999
- Life-cycle assessment
- Pollutant release and transfer register
- Sustainability accounting / measurement / metrics and indices / standards and certification / supply chain
- Toxics Release Inventory
- Triple bottom line
|
|
| Reporting |
- Global Reporting Initiative
- GxP guidelines
- Sustainability reporting
|
|
| Auditing |
- Community-based monitoring
- Environmental (certification)
- Fair trade (certification)
- ISO 19011
|
|
| Related |
- Bangladesh Accord
- Benefit corporation
- Child labour
- Community interest company
- Conflict of interest
- Disasters
- Disinvestment
- Eco-labeling
- Environmental pricing reform
- Environmental, social and corporate governance
- Ethical consumerism
- Euthenics
- Health impact assessment
- Market governance mechanism
- Product certification
- Public participation
- Social enterprise
- Socially responsible investing
- Stakeholder (engagement)
- Supply chain management
|
|
- Environment portal
- Category
- Commons
- Organizations
|
|
