FEATURETowards Selecting and Maintaining anEffective Internal Audit Function?BY RAYMOND CORRAY & RYAN CHONG<strong>The</strong> <strong>Malaysian</strong> Code of Corporate Governancerequires listed companies to state whether theyhave an internal audit function or, if not, whatalternative they have in place to provideassurance with regards to the adequacy and integrity of thesystem of controls. In fulfilling this requirement, listedcompanies have either established their own internal audit(“IA”) function or have outsourced the function toprofessional service providers. <strong>The</strong> <strong>Institute</strong> of InternalAuditors has issued <strong>The</strong> International Standard for theProfessional Practice of Internal Auditing (“Standards”)that provides guidance on the principles and frameworksfor setting up an IA function or when outsourcing.When contemplating the appropriate course of actionfor an effective internal audit function, as a first step,organisations should keep in mind the following:• Whether to have an in house function or to outsourcethe function;• <strong>The</strong> expectations of an internal audit function, i.e. to meetregulatory compliance or to be a value adding partner;• <strong>The</strong> independence and stature to be accorded to thefunction;• <strong>The</strong> investment that the organisation is willing to make;and• <strong>The</strong> availability of people resources in terms of skillsand experience.In setting up an in-house function the main challengefaced by organisations is in sourcing skilled and experiencedIA personnel and the costs involved. Due to the lack of suchpersonnel, a solution that is frequently employed is tooutsource the function. When faced with outsourcing andfor purposes of ensuring that an appropriate service provideris selected, organisation needs to bear in mind the following:• Reputation of the service provider;• Standards that the service provider adopts, for example,<strong>The</strong> <strong>Institute</strong> of Internal Auditor’s Standards;• <strong>The</strong> resources of the service provider, both in terms oftechnical and industry and operational skills;• <strong>The</strong> approach and the methodology in maximising theservice;• <strong>The</strong> ability to work with other service providers, to valueadd and respond to sudden request; and• <strong>The</strong> independence and integrity of the firm.Today, internal audit functions, apart from facing theinherent challenges associated with maintaining aprofessional function, are faced with additionalexpectations arising from corporate irregularities. <strong>The</strong>seare casting question marks with regards to:• how internal audits function:• the standards that they employ;• the people that they have; and• ethical standards that they subscribe too.In overcoming and meeting such challenges and forpurposes of being able to respond to changing demandsand remaining relevant, continuous assessment, challengeand improvement need to be undertaken by the internalaudit function. A solution recommended by the <strong>Institute</strong> ofInternal Auditors is to undertake a Quality AssessmentReview (“QAR”).<strong>The</strong> objective of a QAR is to undertake an assessmentof the function for purposes of ensuring that the:• mission;• people;• processes; and• technology,employed within the function are relevant in meeting everchanging stakeholder expectation. <strong>The</strong> objectives behindsuch assessments are:I. To ensure that the mission of the internal auditdepartment is aligned with the overall vision andmission of the organisation;II. That people with relevant skills and experience areemployed to undertake engagements and to providevalue add; andIII. That the processes (methodology) and technologyemployed are designed to foster efficiency, effectivenessand economics of the function.With the present demand for greater governance andtransparency, an organisation cannot afford complacencyor deviations from acceptable practices. Having aneffective internal audit function is a fundamentalrequirement of a well run company and more importantlyprovides an independent framework for check and balanceand value in management.This article first appeared in BizDo, issue 18, August 2007, thenewsletter of BDO Binder. Produced with kind permission.Raymond Corray is a Director and Ryan Chong, PrincipalConsultant of BDO Governance Advisory Sdn Bhd.18 | <strong>The</strong> <strong>Malaysian</strong> <strong>Accountant</strong> | June/August 2007 www.micpa.com.my
PEOPLEBY MALKEET KAURAt <strong>The</strong> Helm<strong>The</strong> recent Annual General Meeting of the MICPAwitnessed the election of a new President and Vice-President. YBhg Dato’ Nordin Baharuddin waselected the 28th President while YBhg Dato’Ahmad JohanMohammad Raslan, the Vice-President of the <strong>Institute</strong>.This is indeed an interesting combination as Dato’Nordin and Dato’ Johan are two extremely remarkableleaders of the accounting profession and with these twostalwart <strong>Accountant</strong>s at the helm, steering the wheel, thenext few years would be an interesting journey for the MICPA.Dato’ Nordin, the former Executive Chairman of Ernst& Young Malaysia from 1999 to 2004 and Dato’ Johan, thecurrent Executive Chairman of PricewaterhouseCoopersMalaysia, between them, possess 60 years work experiencein a vast area of their profession. Both are members of the<strong>Institute</strong> of Chartered <strong>Accountant</strong>s in England and Wales(ICAEW) and of course, the MICPA.Shortly after their election to their posts, Dato’ Nordinand Dato’ Johan spared some time from their busy schedulesto have a chat with <strong>The</strong> <strong>Malaysian</strong> <strong>Accountant</strong> and both hadinteresting views and opinions on a variety of topicstouching the Accountancy profession as well as the <strong>Institute</strong>.www.micpa.com.myJune/August 2007 | <strong>The</strong> <strong>Malaysian</strong> <strong>Accountant</strong> |19