Search results

This study challenges the conventional theoretical approach of the ‘Three Lines of Defence’ Model adopted by most of the Maltese credit institutions. The authors propose a paradigm shifting conceptualised framework that would alter the corporate governance structures of banks. The objective is to test the feasibility and willingness of credit institutions to adopt such an approach.

This study challenges the current practices of the internal auditing profession and organisations and invites them to evaluate their structures whilst recognising the benefits of adopting a combined assurance function.

In order to test this hypothesis, the authors sought out semi-structured interviews with controllers (Internal Auditors, Risk Managers and Compliance Officers) within Maltese Credit Institutions, varying in size from significant, medium-sized and small institutions; personal from the Malta Financial Services Authority – The regulator, the Big four audit firms and members of the Malta Forum of Internal Auditors, and practitioners working both within and outside the financial industry.

There were two contrasting opinions regarding the suggested proposition. On the one hand, those operating within the credit institutions, as well as the regulator and the external auditors, do not believe that the proposition of integrating risk, compliance and internal audit functions (IAF) in one team would be possible; the reason being that independence, which is the cornerstone of every IAF, would be severely impacted. On the other hand, there were those practitioners working outside the banking industry but with sufficient experience and knowledge in the field, who challenged the traditional concept of independence. They argue that the functions should not be separate from each other because they have much in common.

Four themes emerged from the study: (1) challenges as a concept, (2) benefits, (3) risks and (4) condition for successful implementation. All interviewees, from risk departments, boards, external auditors and regulators agree that a strong, knowledgeable and independent IAF is fundamental to every organisation but more so within the financial industry. Nevertheless, this study revealed two schools of thought that emerged from the findings in relation to the IAF and its regulation, and specifically, when the authors presented the proposition of an integrated function.

Purpose – The purpose of the study is to investigate the role of the internal audit function in the public sector entities in Ghana and the factors limiting the effectiveness of internal audit in the sector.

Design/Methodology/Approach – The study collected the data from 120 internal auditors in 40 ministries, departments and agencies (MDAs) through a self-administered questionnaire. A semi-structured interview with a senior manager of the Internal Audit Agency, the oversight body was also carried out as a follow up.

Findings – The scope of internal audit services in the sector is limited to regular audit activities, mainly pre-audit of payment vouchers which take estimated 74% of the average productive audit time. The effectiveness of internal audit in the Ghanaian public sector is hampered by several factors: low professional proficiency of internal auditors; lack of management ownership and support for internal audit activities, lack of budget authority of the internal audit units and weak functioning of audit committees, among others. Some remedial programmes are ongoing.

Research limitations – Inherent in the study result is the limitation associated with non-probability sampling methods because of the use of purposive sampling technique to select the internal auditors and the organisations.

Practical implication – The result of the study may have policy implication for government in the design of programmes for improving the effectiveness of internal audit as an element of public financial management reforms.

Originality/Value – Despite several studies on internal audit effectiveness in the public sector organisations, none relates to Ghana. This study fills the gap.

Financial crises in the international markets, which have global effects, have increased the importance of internal auditing especially in the banking sector in recent years. Minimizing the negative effects of crises is closely related to the establishment and functioning of an effective internal control system. International internal audit standards (IIAS) issued by the International Internal Audit Standards Boards are internationally applicable standards that contain the basic requirements for the professional implementation and evaluation of the effectiveness of internal auditing. In developing countries where the effects of crises are intensely felt, public banks are one of the most important actors of the financial system. An effective internal control structure in public banks and in compliance with international standards is necessary for a strong and fragile financial system. The purpose of this study is to examine the internal audit activities in public banks in terms of compliance with international standards. In this study conducted at one of the leading state-owned bank in Turkey, the bank’s internal control procedures and internal control activities reports were examined. In addition, the Bank’s internal audit activities were analyzed by conducting interviews with bank officials for a better understanding of the internal control system. The IIAS, which are grouped under two main headings, are related to the internal audit activities of the related bank. It is thought that the study will guide banks and auditors in terms of demonstrating the application of IIAS, which usually consist of abstract statements.

In this paper we report on the approach we have developed and the lessons we have learned in an implementation of the monitoring and control layer for continuous monitoring of business process controls (CMBPC) in the US internal IT audit department of Siemens Corporation. The architecture developed by us implements a completely independent CMBPC system running on top of Siemens’ own enterprise information system which has read-only interaction with the application tier of the enterprise system. Among our key conclusions is that “formalizability” of audit procedures and audit judgment is grossly underestimated. Additionally, while cost savings and expedience force the implementation to closely follow the existing and approved internal audit program, a certain level of reengineering of audit processes is inevitable due to the necessity to separate formalizable and non-formalizable parts of the program. Our study identifies the management of audit alarms and the prevention of the alarm floods as critical tasks in the CMBPC implementation process. We develop an approach to solving these problems utilizing the hierarchical structure of alarms and the role-based approach to assigning alarm destinations. We also discuss the content of the audit trail of CMBPC.

Casino gambling in the United States has increased significantly in the last 30 years, going from just 2 states (Nevada and New Jersey) in 1988 to 41 states with over 980 casinos. This rapid growth of casino gambling has resulted in additional social costs, including workplace embezzlements committed by problem gamblers. Embezzlements contribute to greater fraud risk for organizations in casino regions and are expected to rise as casinos multiply and increasingly cater to convenience gamblers. The purpose of this chapter is to highlight the proximity of casinos as a fraud risk factor for embezzlement. The authors recommend that internal and external auditors for companies located in casino areas assess this fraud risk and where appropriate, perform audit procedures to address this risk. There is also an opportunity for external auditors to assist those companies located in casino regions (that may lack internal auditors) in establishing fraud prevention programs.

Country and company bankruptcies at international level have put the economies of the world and countries in a difficult position. As a result of these negative developments, the measurement of the effectiveness of internal audits system together with accounting and audits have become important. The unit that plays a key role in measuring the effectiveness of internal control, whether in the private or public sector, is internal audit. In this respect, the purpose of the present study was to outline the criteria that increase the effectiveness of internal audit in public institutions. For this purpose, the SWARA Method was used. The SWARA Method is a multi-criterion decision-making method that is employed by decision-makers to determine the weights of the criteria and to sort them out. The Questionnaire of the study was applied to a participant group that consisted of 11 experts. According to the findings, the criteria that had the highest importance were “the presence of an independent internal audit activity and impartial internal auditors,” “Performing internal audit activities in line with ethical rules, standards, and relevant regulations,” and “Determining the risks regarding the objectives and the purpose of the institution, and measuring the effects of these risks.”

This chapter analyzes and discusses the empirical results of the study. The discussion is organized under the following themes: independent director, audit committee, auditor independence, corporate code of conduct, adoption of IFRS, and measures for improvement. Three main findings emerge from the analysis. First, the current institutional environment does not yet fully support the Anglo-American practices. Second, in recent years the quality of financial reporting has improved considerably, which is largely attributable to strengthened accounting rules and regulations. However, the imported Anglo-American models of corporate governance and financial reporting, except for enhancing auditor independence, have had only a minor impact on financial reporting quality. Third, although the imported practices are not working as intended, the vast majority of interviewees stated that it was appropriate to move toward internationally acceptable principles and standards. Improving laws and regulations seems to be the main measure for rendering the institutional environment in China more supportive of Anglo-American models of corporate governance and financial reporting.