Internal audit, what's management not telling you?
With planning season just around the corner and the increased pressure on internal audit teams, it's more important than ever to examine how you work with your management team.
In a recent video, IIA President and CEO Richard Chambers reviewed the top five things management is reluctant to say to internal auditors.
- You don’t understand the business
- You provide value by focusing on the future, not the past
- You're duplicating work
- You have nothing good to say
- We agree, so you’ll go away
If management doesn’t believe you understand the business, it may discount your recommendations and not come to you. Open the lines of communication—set up meetings to bring both teams together, discuss key issues critical to the business, and get on the same page.
Take a step back, and review at the information you're presenting to management. Do you have more to say about the past than the future? The audit committee report should look primarily to the future as you develop risk-based auditing.
We hear it too often—internal audit is duplicating the work of other individuals and departments in the organization—which means waning support of your efforts. Examine the roles, responsibilities, and effectiveness of your team versus other assurance providers in the organization to keep duplication to a minimum.
Think before you speak, and make sure everything you say is balanced and unbiased. Chambers suggests including a section called "management's accomplishments" to discuss what's being done well—helping to remind the organization that you notice the good things happening, too.
Even if management doesn't agree with your opinion, it may do so to appease your team. It's not about winning arguments. Instead, focus on changing the perception of the situation and internal audit.
Improving communications between management and internal audit will only improve your planning process. "Consider reaching out to someone you trust on your management team," Chambers suggests. Building relationships between the two teams will help avoid damage to internal audit's reputation.