Get to Know the

Global Internal Audit Standards TM

NAOHIRO MOURI CIA, CPA, CHAIRMAN, IIASB

J. MICHAEL PEPPERS CIA, QIAL, CRMA, CPA, IMMEDIATE PAST CHAIRMAN, IIASB

KAT SEEUWS CIA, CGAP, CRMA, CFE, CISA

Welcome
Host
Katleen Seeuws CIA, CGAP, CRMA, CFE, CISA
Vice President, Professional Standards and Guidance, The IIA, Global HQ

General Session Information:

• CPE
• Technical issues
• Q&A

Thank you for joining us!

Speakers
Naohiro Mouri CIA, CPA
Chairman, International Internal Audit Standards Board
EVP and Chief Auditor, AIG

J. Michael Peppers CIA, QIAL, CGAP, CRMA, CPA

Immediate Past Chairman, International Internal Audit Standards Board
Chief Audit Executive, University of Texas System
Speakers
Naji Fayad, CIA, CRMA, CCSA, CISA, CA, GRCP, GRCA, MBA
Member, International Internal Audit Standards Board
Governor—IIA Lebanon Board
Chief Internal Audit Officer, Cenomi Centers, Riyadh, Saudi Arabia

Harriet Richardson CIA, CGAP, CRMA, CPA, MBA

Member, International Internal Audit Standards Board
Inspector General (retired), San Francisco Bay Area Rapid Transit District
Speakers

Doron Ronen CIA, CRMA, CPA, QAR, CRISC, CSX-F, CDPSE, CFE, MA, LLM
Member, International Internal Audit Standards Board
President, IIA Israel
Managing Partner, Kreston IL A2Z Risk Management Solutions

Dominique Vincenti CIA, CRMA

Member, International Internal Audit Standards Board
Chief Audit Executive, Uber, California, United States
Agenda

• IPPF Governance and Standard-setting Process

• Stakeholder Input and Public Comment Survey
• Project Milestones
• New IPPF and Global Internal Audit Standards – Structure
• Global Internal Audit Standards – Contents
• What’s Next
 IPPF Governance and
Standard-setting Process
IPPF Governance Process

IIA Global Board of Directors

strategically direct and govern

Stakeholder Groups
provide knowledge, feedback, & input

IPPF Oversight Council

advise and oversee
Affiliates and Chapters

IIA Global HQ
Staff IIA Member Volunteers
International Internal Audit (Knowledge Groups)
develop, manage,
Standards Board Global Guidance Council
market, and maintain
advise, direct, and approve
advise, direct, and approve
Guidance
projects Direct Stakeholders
Standards (IIA members and other in
the internal audit profession)

Indirect Stakeholders
GB Authorization (Public, non-IA Profession)
IPPFOC Independent Oversight
Project Management
International Internal Audit Standards Board (IIASB)

• Mission: To serve the

public interest by
developing, issuing,
maintaining, and
promoting the
International Standards
for the Professional
Practice of Internal
Auditing on a worldwide
basis.
• Representing the internal
audit profession globally
with 21 members from 18
countries and various
industries and sectors.
 IPPF Oversight Council

• Mission: To evaluate the due process for setting standards

and guidance to promote inclusiveness and transparency,
which ultimately serves the public interest and increases
stakeholder confidence in The IIA’s Standards.

Organizations represented:

Publication:
Framework for Setting Internal Audit
Standards in the Public Interest
Global Internal Audit Standards Draft –
Stakeholder Input and Survey
Stakeholder Engagement on Standards Draft

1,612 Total completed surveys,

with respondents from 135
countries and territories.

18,964 Total # of comments submitted.

This is an average of 12 specific
comments per respondent.
Survey Results – Level of Agreement
To what extent do you agree or disagree with…
Overall Structure 79% 10% 11%
Introduction 82% 12% 6%
Glossary 78% 13% 9%
Domain I. Purpose of Internal Auditing 77% 11% 12%
Domain II. Ethics & Professionalism 77% 11% 12%
Domain III. Governing the Internal Audit Function 72% 12% 16%
Domain IV. Managing the Internal Audit Function 78% 12% 10%
Domain V. Performing Internal Audit Services 75% 13% 12%

Strongly Agree + Agree Neutral Strongly Disagree + Disagree

Disposition of Public Comments

Report on the Standard-setting and Public Comment

Processes for the Global Internal Audit Standards.
Find the report at theiia.org, along with the New
Standards and other resources.

• Condensed version of the Standards – without

Considerations for Implementation and Examples
of Evidence of Conformance sections.

• Two-way mapping of the 2017 Standards to the

2024 Standards.
Project Milestones
IPPF Evolution Milestones

2019 – 2022 2024, Q1

• Research and benchmarking. • Global Internal Audit StandardsTM publication along with disposition
• Outreach to stakeholders. report and other tools.
• Translations begin.
• Development of new Standards.
• Global Internal Audit StandardsTM publication as digitally
enhanced e-book.
• New instructor-led training & updated learning library.
• Expose Topical Requirement on Cybersecurity for public comment.
2023
• IPPF Oversight Council approval of due
process.
2024, Q2 – Q4
• Global Internal Audit StandardsTM (The Redbook) publication
• Translation and 90-day public comment available in hardcover format.
period. • Updated Quality Assessment Manual publication available.
• IIASB working groups disposition of public • Issuance of Topical Requirement on Cybersecurity.
comments. • Development of other Topical Requirements.
• Revisions of exposed draft.
• IIASB approval of final draft. 2025
• Pilot draft of Topical Requirement on • New Standards become effective 12 months after release (Jan. 9).
Cybersecurity. • Updated CIA exam and study materials, not before effective date.
• Updated Internal Audit Practitioner exam, not before effective date.
 New IPPF and
Global Internal Audit Standards –
Structure
The IPPF Evolution

2017 2024
The New Structure
5 Domains
• 15 Principles
• 52 Standards
⁻ Requirements
⁻ Considerations for Implementation
⁻ Examples of Evidence of Conformance

Additional features:
• Fundamentals
• Applying the Global Internal Audit Standards
in the Public Sector
• Glossary
Global Internal Audit Standards
5 Domains, 15 Principles
Domain I: Purpose of Internal Auditing

II. Ethics and Professionalism

1. Demonstrate 2. Maintain 3. Demonstrate 4. Exercise Due 5. Maintain
Integrity Objectivity Competency Professional Care Confidentiality

III. Governing the Internal Audit IV. Managing the Internal Audit V. Performing Internal Audit
Function Function Services

6. Authorized by the Board 9. Plan Strategically 13. Plan Engagements Effectively

10. Manage Resources
7. Positioned Independently 14. Conduct Engagement Work
11. Communicate Effectively
15. Communicate Engagement
8. Overseen by the Board Conclusions and Monitor Action
12. Enhance Quality Plans
Global Internal Audit Standards –
Contents
Fundamentals of the Global Internal Audit Standards

Internal Auditing and the Public Interest

• Describes the commitment of The IIA and the responsibility of the IIASB to set standards in the public interest.
• Defines public interest and internal auditing’s role in enhancing an organization’s ability to serve the public interest.
Demonstrating Conformance with the Standards
• Internal auditors may be unable to conform with a requirement yet still achieve the standard’s intent.
• Chief audit executive is responsible for documenting, conveying the rationale and the alternative actions for EQA.
• Details in relevant Standards.
Application in Small Internal Audit Functions
• Too many variables to define “small.” However, single-person functions need assistance to implement an adequate
QAIP.
• Additional details in Standards 10.1 Financial Resource Management, 12.1 Internal Quality Assessment, and 12.3
Oversee and Improve Engagement Performance.
Application in the Public Sector
• Mentioned in Fundamentals and has its own section, “Applying the Global Internal Audit Standards in the Public
Sector,” following Domain V: Performing Internal Audit Services.
Applying the Global Internal Audit Standards
in the Public Sector
Internal auditors in the public sector operate in a political environment, which sometimes differs from private sector
in how they apply the Standards and use terminology, specifically related to the following areas:

Laws and/or Regulations

• Acknowledges the legal framework under which internal auditors in the public sector work.
• Recognizes conform or explain approach, as described in Fundamentals and the Standards.

Governance and Organizational Structure

• Explanations and examples describing governance and organizational structures in the public sector.
• Situations to be aware of and ideas for internal audit functions to adjust the application of certain standards while
safeguarding independence.

Funding
• Some structures do not give the board and senior management authority over the budget.
• Chief audit executives in the public sector may have limits on the way they may access and use resources.
• Examples to be aware of and ways to adapt.
Global Internal Audit Standards –
Glossary
 Glossary
Old Term or Concept Updated Term New to the Glossary
consulting services advisory services Assurance engagement Internal audit public sector risk tolerance
supervisor charter
engagement opinion engagement
conclusion
competency finding internal audit residual risk root cause
internal audit activity internal audit
manual
function
purpose, authority, responsibility internal audit
mandate condition impact internal audit results of senior
plan internal audit management
policies and procedures (internal methodologies services
audit)

Existing Terms With New Definitions criteria inherent risk likelihood risk and stakeholder
control
board
matrix
control processes
engagement integrity may risk workpapers
fraud planning assessment
internal auditing
risk appetite *Not a comprehensive list.
 Global Internal Audit Standards –
Domain I. Purpose of Internal Auditing
 Domain I. Purpose of Internal Auditing
Purpose Statement:
Internal auditing strengthens the organization’s ability to create, protect, and sustain value by providing
the board and management with independent, risk-based, and objective assurance, advice, insight, and foresight.

Internal auditing enhances the organization’s: Internal auditing is most effective when:
• Successful achievement of its objectives. • It is performed by qualified internal auditors in
conformance with the Global Internal Audit
• Governance, risk management, and control
Standards, which are set in the public interest.
processes.
• The internal audit function is independently
• Decision-making and oversight.
positioned with direct accountability to the
• Reputation and credibility with its stakeholders. board.

• Ability to serve the public interest. • Internal auditors are free from undue influence
and committed to making objective assessments.
 Global Internal Audit Standards –
Domain II. Ethics and Professionalism
 Domain II: Ethics and Professionalism
1. Demonstrate 2. Maintain 3. Demonstrate 4. Exercise Due 5. Maintain
Integrity Objectivity Competency Professional Care Confidentiality
Internal auditors Internal auditors Internal auditors apply Internal auditors apply Internal auditors use
demonstrate integrity in maintain an impartial the knowledge, skills, due professional care in and protect information
their work and behavior. and unbiased attitude and abilities to fulfill planning and performing appropriately.
when performing their roles and internal audit services.
internal audit services responsibilities
and making decisions. successfully.
1.1 Honesty and 4.1 Conformance
2.1 Individual 5.1 Use of
Professional 3.1 Competency with Global Internal
Objectivity Information
Courage Audit Standards
3.2 Continuing
1.2 Organization’s 2.2 Safeguarding 4.2 Due 5.2 Protection of
Professional
Ethical Expectations Objectivity Professional Care Information
Development

2.3 Disclosing
1.3 Legal and 4.3 Professional
Impairments to
Ethical Behavior Skepticism
Objectivity
Global Internal Audit Standards –
Domain III. Governing the
Internal Audit Function
Domain III: Governing the Internal Audit Function
Domain III standards include “essential conditions” for an effective internal audit function.

6. Authorized by the Board 7. Positioned Independently 8. Overseen by the Board

The board establishes, approves, and The board establishes and protects The board oversees the internal audit
supports the mandate of the internal the internal audit function’s function to ensure the function’s
audit function. independence and qualifications. effectiveness.

6.1 Internal Audit Mandate 8.1 Board Interaction

7.1 Organizational Independence

8.2 Resources
7.2 Chief Audit Executive
6.2 Internal Audit Charter Qualifications
8.3 Quality

6.3 Board and Senior

Management Support 8.4 External Quality Assessment
Global Internal Audit Standards –
Domain IV. Managing the
Internal Audit Function
Domain IV. Managing the Internal Audit Function
9. Plan Strategically 10. Manage Resources 11. Communicate 12. Enhance Quality
The chief audit executive plans The chief audit executive Effectively The chief audit executive is
strategically to position the manages resources to The chief audit executive guides responsible for the internal
internal audit function to fulfill its implement the internal audit the internal audit function to audit function’s conformance
mandate and achieve long-term function’s strategy and achieve communicate effectively with its with the Global Internal Audit
success. its plan and mandate. stakeholders. Standards and continuous
performance improvement.
9.1 Understanding Governance,
Risk Management, and 10.1 Financial Resource 11.1 Building Relationships and
Management Communicating with Stakeholders
Control Processes 12.1 Internal Quality Assessment

10.2 Human Resource

9.2 Internal Audit Strategy Management 11.2 Effective Communication
12.2 Performance Measurement

9.3 Methodologies 10.3 Technological Resources 11.3 Communicating Results 12.3 Oversee and Improve
Engagement Performance

9.4 Internal Audit Plan 11.4 Errors and Omissions

9.5 Coordination and Reliance 11.5 Communicating the

Acceptance of Risks
Global Internal Audit Standards –
Domain V.
Performing Internal Audit Services
 Domain V. Performing Internal Audit Services
13. Plan Engagements Effectively 14. Conduct Engagement Work 15. Communicate Engagement
Internal auditors plan each engagement Internal auditors implement the engagement Conclusions and Monitor Actions
using a systematic, disciplined approach. work program to achieve the engagement Plans
objectives.
Internal auditors communicate the
13.1 Engagement Communication engagement results to the appropriate
14.1 Gathering Information for Analyses parties and monitor management’s
and Evaluation progress toward implementation of
13.2 Engagement Risk Assessment 14.2 Analyses and Potential Engagement recommendations or action plans.
Findings
13.3 Engagement Objectives and Scope 15.1 Final Engagement Communication
14.3 Evaluation of Findings

13.4 Evaluation Criteria

14.4 Recommendations and Action Plans 15.2 Confirming the Implementation of
Action Plans
13.5 Engagement Resources 14.5 Developing Engagement Conclusions

13.6 Work Program 14.6 Documenting Engagements

What’s Next?
• Topical Requirements
• Quality Assessments
• Certifications
• Learn More

Keep up with the latest!

theiia.org/IPPFEvolution
Topical Requirements

Topical • Required when auditing an identified topic.

• Cover aspects of governance, risk management, and control processes.
Requirements
• Also includes considerations.
Defined
• In development.

Topics • Cybersecurity
Under Consideration • Sustainability: Environmental, Social & Governance
• Third-party Management
• Information Technology Governance
• Assessing Organizational Governance
• Fraud Risk Management
• Privacy Risk Management
• Public Sector: Performance Audits
External Quality Assessments
Options for Planning EQAs
based on the January 2024 issuance of the Global Internal Audit Standards and the effective date of 2025.

If the EQA is due in 2024:

2024
• The quality assessment should be conducted as scheduled in conformance with the current IPPF.
• A gap assessment should be considered in 2024 in addition to the current EQA to prepare for
the transition.

2025 or If the EQA is due in 2025 or beyond:

beyond
• The quality assessment can be accelerated into 2024 to allow for the assessment to be
conducted in conformance with the current IPPF.
• A readiness assessment can be conducted in 2024 to identify any gaps for the implementation
of the Global Internal Audit Standards.
Changes to Examinations for IIA Credentials

Exam
- No changes before May 2025. - No changes before effective date.
- More information to come in early 2024.
Transition period
- Information about changes will be
communicated at least 1 year in advance.
- In-process candidates will receive detailed - Not affected; remains the same.
information.
Study materials
- Not before March 2025. More information
theiia.org/cia2025
Learn More About the Global Internal Audit Standards
Webinars
- What the New Standards Mean to Quality Assessments on February 13, 2024

Courses
- Navigating the Global Internal Audit Standards (16 CPE hours, in-person and online)

- Ethically Mastering the Global Internal Audit Standards (8 CPE hours, online only)

Check Standards Knowledge Center on theiia.org website for more details on offering dates.

Pre-Conference Workshops
- Raising the Bar: Performing at a High Level (GAM – March 10, 2024)

- Global Internal Audit Standards: Improving Individual, Team, and Organizational

Performance (International Conference – July 14, 2024)
https://www.theiia.org/en/standards/2024-standards/standards-knowledge-center/
Questions?

Q&A
 Thank you!

Elevating the Standards.

Elevating the Profession.
Elevating Impact!