What is the first step an internal audit function should take to define its organizational structure, deliverables, communication protocols, and resourcing model?
A.
Recommend improvements to the organization’s governance policies, processes, and structures
B.
Define a hiring plan to address competency gaps needed to execute the audit plan
C.
Construct periodic self-assessments, ongoing monitoring, and external assessments to measure quality
D.
Assess the needs and expectations of the board, senior management, and external auditors
The first step in defining the internal audit function’s structure and processes is to understand the needs and expectations of the board, senior management, and external stakeholders. This ensures alignment with organizational priorities and risk appetite.
Option A (recommend improvements) is a later activity. Option B (hiring plan) comes after the structure and resourcing needs are identified. Option C (quality assessments) occurs after processes are established.
[Reference:, IIA Standards – Standard 1000: Purpose, Authority, and Responsibility., , ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit