ITI Presentation
ITI Presentation
• No, the second line of defense develops risk management policies and
procedures for the first line of defense. The second line of defense is
responsible for overseeing the first line of defense.
• First line of defense
• This line is responsible for managing risk in an organization's daily
operations. This includes identifying, assessing, and mitigating risks.
• Second line of defense
• This line is responsible for developing and implementing risk management
policies and procedures. They also oversee the first line of defense and
challenge practices to ensure risk is addressed effectively.
• Third line of defense
• This line is responsible for independently assessing and reporting on the work
of the first and second lines. This includes internal and external auditors.
External Audit
This is done to reduce Audit Risk – the risk that the auditor may give
and incorrect opinion
Three Stages of Audit
Audit Planning
Fieldwork
Reporting
Audit Planning
Overall Materiality
Unqualified Opinion – the audit tests have confirmed that there are
no material misstatements
Qualified opinion: The auditor found material misstatements or
there was a limitation in scope.
Adverse opinion: The auditor does not believe the financial
statements accurately portray the company's financial position or
results.
Disclaimer of opinion: The auditor was unable to obtain sufficient
evidence to issue an opinion.
Ends