Reliance on work of internal auditors
(i) As requested, the external auditors will seek to rely on the work of internal audit to the maximum extent possible. This might cover planning, risk assessment, tests of controls and substantive testing.
(ii) In all cases, the external auditor should be aware that the purpose of internal audit‘s work will not be primarily directed towards the financial statements.
(iii) In relation to the audit of internal controls, it may be possible to rely on the work of internal audit in relation to all of the areas noted, but only if the internal controls audited affect the financial statements. It may be that internal audit‘s work on operations and customer support is less relevant than its work in other areas.
(iv) In relation to the four-year review of internal controls – the extent of reliance will depend on how long ago the last review was conducted. If it was conducted recently, it will provide help in relation to the external auditor‘s assessment of the accounting and internal control systems.
(v) In relation to risk management – the relevance of internal audit work depends on the extent to which risks in relation to reporting in general, and the financial statements in particular, have been addressed separately by management. This work will be relevant to
the external auditor‘s risk assessment and planning