The internal audit (IA) profession has undergone remarkable growth since 2004, when we published the first edition of our Guide to Internal Audit. At that time, we determined guidance was needed to address a number of pivotal regulatory developments, most notably the revised listing requirements from the New York Stock Exchange (NYSE) that stated for the first time, “Every listed company must have an internal audit function.”
Five years later, companies are far more likely to have in place highly developed IA functions that address not only the NYSE standards, but also the SEC’s interpretive guidance on Section 404 of the Sarbanes-Oxley Act and PCAOB Auditing Standard No. 5 (AS5), An Audit of Internal Control Over Financial Reporting That Is Integrated With an Audit of Financial Statements, both of which were finalized in 2007. These regulatory developments have had a significant impact on internal audit functions. Given these and other changes, as well as the many lessons learned since the enactment of Sarbanes-Oxley in 2002, we decided the business community could benefit from a second edition of our resource guide of frequently asked questions about the practice of internal auditing.
Guide to Internal Audit is designed to be a helpful and easy-to-access resource that IA professionals can refer to regularly in their jobs. The publication offers detailed insights into everything from building an IA function to managing and improving the function as the organization evolves. To facilitate the location of topics of most interest to our readers, the questions are divided into eight sections. In the table of contents, new and significantly revised questions from the first edition are noted with an asterisk. Many of these new questions focus on Sarbanes-Oxley best practices and the ever-expanding role of IA functions.

( 86 pages, 3.4 MB)
Internal Control Framework Poll