Need Tally
for Clients?

Contact Us! Here

  Tally Auditor

License (Renewal)
  Tally Gold

License Renewal

  Tally Silver

License Renewal
  Tally Silver

New Licence
  Tally Gold

New Licence
 
Open DEMAT Account with in 24 Hrs and start investing now!
« Professional Updates »
Open DEMAT Account in 24 hrs
  Auditing and Assurance Standards Board - Online Panel of Experts for addressing Bank Branch Audit related queries
 Board of Internal Audit and Management Accounting of ICAI is organizing Webinar on "Identifying Red Flags and Report Writing by Internal Auditors" - March 27,
 Revised Applicability of Peer Review Mandate (Phase II & III)
 Important Announcement - Reschedulement of Chartered Accountant Examinations, May 2024
  IMPORTANT ANNOUNCEMENT
 Extension of Last Date for Online Empanelment of Members to act as Observers for May/June 2024 Examinations up to 15th March 2024
 Empanelment of Members to act as Observers at the Examination Centres for the Chartered Accountants Examinations May/June 2024
 Guidance Note on Audit of Banks (2024 Edition)
 Issuance of SA 800 (Revised), SA 805 (Revised), SA 810 (Revised)
 Implementation Guide on Reporting on Audit Trail under Rule 11(g) of the Companies (Audit and Auditors) Rules, 2014 (Revised 2024 Edition) - (12-02-2024)
 Important Announcement for May-June 2024 CA Examinations

Revised Standard on Auditing (SA) 610, Using the Work of Internal Auditors
February, 06th 2016
                         Standard on Auditing (SA) 610 (Revised)
                           Using the Work of Internal Auditors
March
                                                          Contents
                                                                                                                  Paragraph(s)
Introduction
Scope of this SA ............................................................................................. 1-5
Relationship between Revised SA 315 and SA 610 (Revised) ...................... 6-10
The External Auditor's Responsibility for t he Audit ...........................................11
Effective Date ...................................................................................................12
Objectives .......................................................................................................13
Definitions ........................................................................................................14
Requirements
Determining Whether, in Which Areas, and to What Extent the
Work of the Internal Audit Function Can Be Used ...................................... 15-20
Using the Work of the Internal Audit Function ............................................. 21-25
Determining Whether, in Which Areas, and to What Extent Internal
Auditors Can Be Used to Provide Direct Assistance .................................... 26-32
Using Internal Auditors to Provide Direct Assistance .................................. 33-35
Documentation ............................................................................................ 36-37
Application and Other Explanatory Material
Definition of Internal Audit Function ............................................................ A1-A4
Determining Whether, in Which Areas, and to What Extent the
Work of the Internal Audit Function Can Be Used .................................... A5-A23
Using the Work of the Internal Audit Function ......................................... A24-A30
Determining Whether, in Which Areas, and to What Extent Internal
Auditors Can Be Used to Provide Direct Assistance ................................ A31-A39
Using Internal Auditors to Provide Direct Assistance .............................. A40-A41
Standard on Auditing ( SA ) 610 (Revised ), Using the Work of Internal Auditors, should be
read in conjunction with SA 200, Overall Objectives of the Independent Auditor and the
Conduct of an Audit in Accordance with Standards on Auditing.
Introduction
Scope of this SA
1.      This Standard on Auditing (SA) deals with the external auditor's responsibilities if using
the work of internal auditors. This includes (a) using the work of the internal audit function in
obtaining audit evidence and (b) using internal auditors to provide direct assistance under the
direction, supervision and review of the external auditor.
2.     This SA does not apply if the entity does not have an internal audit function. (Ref:
Para. A2)
3.     If the entity has an internal audit function, the requirements in this SA relating to using
the work of that function do not apply if:
(a)     The responsibilities and activities of the function are not relevant to the audit; or

(b)     Based on the auditor's preliminary understanding of the function obtained as a result
of procedures performed under SA 315,1 the external auditor does not expect to use the work
of the function in obtaining audit evidence.
Nothing in this SA requires the external auditor to use the work of the internal audit function
to modify the nature or timing, or reduce the extent, of audit procedures to be performed
directly by the external auditor; it remains a decision of the external auditor in establishing
the overall audit strategy.

4.     Furthermore, the requirements in this SA relating to direct assistance do not apply if
the external auditor does not plan to use internal auditors to provide direct assistance.

5.      In some cases, the external auditor may be prohibited, or restricted to some extent, by
law or regulation from using the work of the internal audit function or using internal auditors to
provide direct assistance. The SAs do not override laws or regulations that govern an audit of
financial statements.2 Such prohibitions or restrictions will therefore not prevent the external
auditor from complying with the SAs. (Ref: Para. A31)
Relationship between SA 315 and SA 610 (Revised)
6.     Many entities establish internal audit functions as part of their internal control and
governance structures. The objectives and scope of an internal audit function, the nature of its
responsibilities and its organizational status, including the function's authority and
accountability, vary widely and depend on the size and structure of the entity and the
requirements of management and, where applicable, those charged with governance.
7.       SA 315 addresses how the knowledge and experience of the internal audit function
can inform the external auditor's understanding of the entity and its environment and
identification and assessment of risks of material misstatement. SA 3153 also explains how


1 Please see the conforming amendments to Revised SA 315, Identifying and Assessing the Risks of Material
Misstatement through Understanding the Entity and Its Environment, arising pursuant to issuance of this SA 610
(Revised). These are given at the end of the document.
2 SA 200, Overall Objectives of the Independent Auditor and the Conduct of an Audit in Accordance with

Standards on Auditing, paragraph A55.
3 Please see the conforming amendments to Revised SA 315, Identifying and Assessing the Risks of Material

Misstatement through Understanding the Entity and Its Environment, arising pursuant to issuance of this SA 610
(Revised). These are given at the end of the document. (Para A116 of SA 315 in those conforming amendments)
                                                      2
effective communication between the internal and external auditors also creates an
environment in which the external auditor can be informed of significant matters that may
affect the external auditor's work.

8.       Depending on whether the internal audit function's organizational status and relevant
policies and procedures adequately support the objectivity of the internal auditors, the level of
competency of the internal audit function, and whether the function applies a systematic and
disciplined approach, the external auditor may also be able to use the work of the internal
audit function in a constructive and complementary manner. This SA addresses the external
auditor's responsibilities when, based on the external auditor's preliminary understanding of
the internal audit function obtained as a result of procedures performed under SA 315, the
external auditor expects to use the work of the internal audit function as part of the audit
evidence obtained.4 Such use of that work modifies the nature or timing, or reduces the
extent, of audit procedures to be performed directly by the external auditor.
9.      In addition, this SA also addresses the external auditor's responsibilities if considering
using internal auditors to provide direct assistance under the direction, supervision and review
of the external auditor.
10.     There may be individuals in an entity that perform procedures similar to those
performed by an internal audit function. However, unless performed by an objective and
competent function that applies a systematic and disciplined approach, including quality
control, such procedures would be considered internal controls and obtaining evidence
regarding the effectiveness of such controls would be part of the auditor's responses to
assessed risks in accordance with SA 330.5
The External Auditor's Responsibility for the Audit
11.     The external auditor has sole responsibility for the audit opinion expressed, and that
responsibility is not reduced by the external auditor's use of the work of the internal audit
function or internal auditors to provide direct assistance on the engagement. Although they
may perform audit procedures similar to those performed by the external auditor, neither the
internal audit function nor the internal auditors are independent of the entity as is required of
the external auditor in an audit of financial statements in accordance with SA 200.6 This SA,
therefore, defines the conditions that are necessary for the external auditor to be able to use
the work of internal auditors. It also defines the necessary work effort to obtain sufficient
appropriate evidence that the work of the internal audit function, or internal auditors providing
direct assistance, is adequate for the purposes of the audit. The requirements are designed to
provide a framework for the external auditor's judgments regarding the use of the work of
internal auditors to prevent over or undue use of such work.
Effective Date
12.  This SA is effective for audits of financial statements for periods beginning on or after
  st
01 April, 2016.

Objectives
13.     The objectives of the external auditor, where the entity has an internal audit function

4 See paragraphs 15­25.
5 SA 330,The Auditor's Responses to Assessed Risks.
6 SA 200, paragraph 14.

                                                      3
and the external auditor expects to use the work of the function to modify the nature or timing,
or reduce the extent, of audit procedures to be performed directly by the external auditor, or to
use internal auditors to provide direct assistance, are:

(a)    To determine whether the work of the internal audit function or direct assistance from
       internal auditors can be used, and if so, in which areas and to what extent;

and having made that determination:
(b)    If using the work of the internal audit function, to determine whether that work is
       adequate for purposes of the audit; and
(c)    If using internal auditors to provide direct assistance, to appropriately direct,
       supervise and review their work.

Definitions
14.    For purposes of the SAs, the following terms have the meanings attributed below:
(a)    Internal audit function ­ A function of an entity that performs assurance and
       consulting activities designed to evaluate and improve the effectiveness of the entity's
       governance, risk management and internal control processes. (Ref: Para. A1­A4)

(b)    Direct assistance ­ The use of internal auditors to perform audit procedures under
       the direction, supervision and review of the external auditor.

Requirements
Determining Whether, in Which Areas, and to What Extent the Work of the
Internal Audit Function Can Be Used
Evaluating the Internal Audit Function
15.   The external auditor shall determine whether the work of the internal audit function can
be used for purposes of the audit by evaluating the following:
(a)    The extent to which the internal audit function's organizational status and relevant
       policies and procedures support the objectivity of the internal auditors; (Ref: Para.
       A5­A9)

(b)    The level of competence of the internal audit function; and (Ref: Para. A5­A9)
(c)    Whether the internal audit function applies a systematic and disciplined approach,
       including quality control. (Ref: Para. A10­A11)
16.     The external auditor shall not use the work of the internal audit function if the external
auditor determines that:
(a)    The function's organizational status and relevant policies and procedures do not
       adequately support the objectivity of internal auditors;
(b)    The function lacks sufficient competence; or
(c)    The function does not apply a systematic and disciplined approach, including quality
       control. (Ref: Para. A12­A14)
Determining the Nature and Extent of Work of the Internal Audit Function that Can Be
                                               4
Used
17.     As a basis for determining the areas and the extent to which the work of the internal
audit function can be used, the external auditor shall consider the nature and scope of the
work that has been performed, or is planned to be performed, by the internal audit function
and its relevance to the external auditor's overall audit strategy and audit plan. (Ref: Para.
A15­A17)
18.    The external auditor shall make all significant judgments in the audit engagement and,
to prevent undue use of the work of the internal audit function, shall plan to use less of the
work of the function and perform more of the work directly: (Ref: Para. A15­A17)
(a)       The more judgment is involved in:
          (i)      Planning and performing relevant audit procedures; and
          (ii)     Evaluating the audit evidence gathered; (Ref: Para. A18­A19)
(b)       The higher the assessed risk of material misstatement at the assertion level, with
          special consideration given to risks identified as significant; (Ref: Para. A20­A22)
(c)       The less the internal audit function's organizational status and relevant policies and
          procedures adequately support the objectivity of the internal auditors; and
(d)       The lower the level of competence of the internal audit function.
19.     The external auditor shall also evaluate whether, in aggregate, using the work of the
internal audit function to the extent planned would still result in the external auditor being
sufficiently involved in the audit, given the external auditor's sole responsibility for the audit
opinion expressed. (Ref: Para. A15­A22)
20.     The external auditor shall, in communicating with those charged with governance an
overview of the planned scope and timing of the audit in accordance with SA 260,7
communicate how the external auditor has planned to use the work of the internal audit
function. (Ref: Para. A23)
Using the Work of the Internal Audit Function
21.     If the external auditor plans to use the work of the internal audit function, the external
auditor shall discuss the planned use of its work with the function as a basis for coordinating
their respective activities. (Ref: Para. A24­A26)
22.    The external auditor shall read the reports of the internal audit function relating to the
work of the function that the external auditor plans to use to obtain an understanding of the
nature and extent of audit procedures it performed and the related findings.

23.     The external auditor shall perform sufficient audit procedures on the body of work of
the internal audit function as a whole that the external auditor plans to use to determine its
adequacy for purposes of the audit, including evaluating whether:
(a)       The work of the function had been properly planned, performed, supervised,
          reviewed and documented;


7   SA 260, Communication with Those Charged with Governance, paragraph 11.
                                                     5
(b)       Sufficient appropriate evidence had been obtained to enable the function to draw
          reasonable conclusions; and
(c)       Conclusions reached are appropriate in the circumstances and the reports prepared
          by the function are consistent with the results of the work performed. (Ref: Para.
          A27­A30)

24.    The nature and extent of the external auditor's audit procedures shall be responsive to
the external auditor's evaluation of:

(a)       The amount of judgment involved;
(b)       The assessed risk of material misstatement;
(c)       The extent to which the internal audit function's organizational status and relevant
          policies and procedures support the objectivity of the internal auditors; and
(d)       The level of competence of the function;8 (Ref: Para. A27­A29)
and shall include reperformance of some of the work. (Ref: Para. A30)
25.    The external auditor shall also evaluate whether the external auditor's conclusions
regarding the internal audit function in paragraph 15 of this SA and the determination of the
nature and extent of use of the work of the function for purposes of the audit in paragraphs
18­19 of this SA remain appropriate.
Determining Whether, in Which Areas, and to What Extent Internal Auditors
Can Be Used to Provide Direct Assistance
Determining Whether Internal Auditors Can Be Used to Provide Direct Assistance for
Purposes of the Audit
26.    The external auditor may be prohibited by law or regulation from obtaining direct
assistance from internal auditors. If so, paragraphs 27­35 and 37 do not apply. (Ref: Para.
A31)
27.     If using internal auditors to provide direct assistance is not prohibited by law or
regulation, and the external auditor plans to use internal auditors to provide direct assistance
on the audit, the external auditor shall evaluate the existence and significance of threats to
objectivity and the level of competence of the internal auditors who will be providing such
assistance. The external auditor's evaluation of the existence and significance of threats to
the internal auditors' objectivity shall include inquiry of the internal auditors regarding interests
and relationships that may create a threat to their objectivity. (Ref: Para. A32­A34)
28.       The external auditor shall not use an internal auditor to provide direct assistance if:






(a)       There are significant threats to the objectivity of the internal auditor; or
(b)       The internal auditor lacks sufficient competence to perform the proposed work. (Ref:
          Para. A32­A34)
Determining the Nature and Extent of Work that Can Be Assigned to Internal Auditors
Providing Direct Assistance


8   See paragraph 18.
                                                   6
29.    In determining the nature and extent of work that may be assigned to internal auditors
and the nature, timing and extent of direction, supervision and review that is appropriate in the
circumstances, the external auditor shall consider:

(a)       The amount of judgment involved in:
          (i)      Planning and performing relevant audit procedures; and
          (ii)     Evaluating the audit evidence gathered;

(b)       The assessed risk of material misstatement; and
(c)       The external auditor's evaluation of the existence and significance of threats to the
          objectivity and level of competence of the internal auditors who will be providing such
          assistance. (Ref: Para. A35­A39)
30.    The external auditor shall not use internal auditors to provide direct assistance to
perform procedures that:
(a)       Involve making significant judgments in the audit; (Ref: Para. A19)

(b)       Relate to higher assessed risks of material misstatement where the judgment
          required in performing the relevant audit procedures or evaluating the audit evidence
          gathered is more than limited; (Ref: Para. A38)

(c)       Relate to work with which the internal auditors have been involved and which has
          already been, or will be, reported to management or those charged with governance
          by the internal audit function; or

(d)       Relate to decisions the external auditor makes in accordance with this SA regarding
          the internal audit function and the use of its work or direct assistance. (Ref: Para.
          A35­A39)

31.     Having appropriately evaluated whether and, if so, to what extent internal auditors can
be used to provide direct assistance on the audit, the external auditor shall, in communicating
with those charged with governance an overview of the planned scope and timing of the audit
in accordance with SA 260,9 communicate the nature and extent of the planned use of internal
auditors to provide direct assistance so as to reach a mutual understanding that such use is
not excessive in the circumstances of the engagement. (Ref: Para. A39)

32.     The external auditor shall evaluate whether, in aggregate, using internal auditors to
provide direct assistance to the extent planned, together with the planned use of the work of
the internal audit function, would still result in the external auditor being sufficiently involved in
the audit, given the external auditor's sole responsibility for the audit opinion expressed.
Using Internal Auditors to Provide Direct Assistance
33.    Prior to using internal auditors to provide direct assistance for purposes of the audit,
the external auditor shall:
(a)       Obtain written agreement from an authorized representative of the entity that the
          internal auditors will be allowed to follow the external auditor's instructions, and that

9   SA 260, paragraph 11.
                                                 7
           the entity will not intervene in the work the internal auditor performs for the external
           auditor; and
(b)        Obtain written agreement from the internal auditors that they will keep confidential
           specific matters as instructed by the external auditor and inform the external auditor
           of any threat to their objectivity.

34.    The external auditor shall direct, supervise and review the work performed by internal
auditors on the engagement in accordance with SA 220.10 In so doing:

(a)        The nature, timing and extent of direction, supervision, and review shall recognize
           that the internal auditors are not independent of the entity and be responsive to the
           outcome of the evaluation of the factors in paragraph 29 of this SA; and
(b)        The review procedures shall include the external auditor checking back to the
           underlying audit evidence for some of the work performed by the internal auditors.
The direction, supervision and review by the external auditor of the work performed by the
internal auditors shall be sufficient in order for the external auditor to be satisfied that the
internal auditors have obtained sufficient appropriate audit evidence to support the
conclusions based on that work. (Ref: Para. A40­A41)

35.    In directing, supervising and reviewing the work performed by internal auditors, the
external auditor shall remain alert for indications that the external auditor's evaluations in
paragraph 27 are no longer appropriate.
Documentation
36.     If the external auditor uses the work of the internal audit function, the external auditor
shall include in the audit documentation:
(a)        The evaluation of:
           (i)      Whether the function's organizational status and relevant policies and
                    procedures adequately support the objectivity of the internal auditors;
           (ii)     The level of competence of the function; and
           (iii)    Whether the function applies a systematic and disciplined approach, including
                    quality control;
(b)        The nature and extent of the work used and the basis for that decision; and

(c)        The audit procedures performed by the external auditor to evaluate the adequacy of
           the work used.

37.    If the external auditor uses internal auditors to provide direct assistance on the audit,
the external auditor shall include in the audit documentation:

(a)        The evaluation of the existence and significance of threats to the objectivity of the
           internal auditors, and the level of competence of the internal auditors used to provide
           direct assistance;
(b)        The basis for the decision regarding the nature and extent of the work performed by

10   SA 220, Quality Control for an Audit of Financial Statements.
                                                          8
           the internal auditors;
(c)        Who reviewed the work performed and the date and extent of that review in
           accordance with SA 230;11
(d)        The written agreements obtained from an authorized representative of the entity and
           the internal auditors under paragraph 33 of this SA; and
(e)        The working papers prepared by the internal auditors who provided direct assistance
           on the audit engagement.

                                                 ***

Application and Other Explanatory Material
Definition of Internal Audit Function (Ref: Para. 2, 14(a))
A1.    The objectives and scope of internal audit functions typically include assurance and
consulting activities designed to evaluate and improve the effectiveness of the entity's
governance processes, risk management and internal control such as the following:
Activities Relating to Governance

           The internal audit function may assess the governance process in its
           accomplishment of objectives on ethics and values, performance management and
           accountability, communicating risk and control information to appropriate areas of the
           organization and effectiveness of communication among those charged with
           governance, external and internal auditors, and management.

Activities Relating to Risk Management
           The internal audit function may assist the entity by identifying and evaluating
           significant exposures to risk and contributing to the improvement of risk management
           and internal control (including effectiveness of the financial reporting process).

           The internal audit function may perform procedures to assist the entity in the
           detection of fraud.
Activities Relating to Internal Control
           Evaluation of internal control. The internal audit function may be assigned specific
           responsibility for reviewing controls, evaluating their operation and recommending
           improvements thereto. In doing so, the internal audit function provides assurance on
           the control. For example, the internal audit function might plan and perform tests or
           other procedures to provide assurance to management and those charged with
           governance regarding the design, implementation and operating effectiveness of
           internal control, including those controls that are relevant to the audit.
           Examination of financial and operating information. The internal audit function may
           be assigned to review the means used to identify, recognize, measure, classify and
           report financial and operating information, and to make specific inquiry into individual
           items, including detailed testing of transactions, balances and procedures.
           Review of operating activities. The internal audit function may be assigned to review


11   SA 230, Audit Documentation.
                                                  9
        the economy, efficiency and effectiveness of operating activities, including non-
        financial activities of an entity.
        Review of compliance with laws and regulations. The internal audit function may be
        assigned to review compliance with laws, regulations and other external
        requirements, and with management policies and directives and other internal
        requirements.
A2.     Activities similar to those performed by an internal audit function may be conducted by
functions with other titles within an entity. Some or all of the activities of an internal audit
function may also be outsourced to a third-party service provider. Neither the title of the
function, nor whether it is performed by the entity or a third-party service provider, are sole
determinants of whether or not the external auditor can use the work of the function. Rather, it
is the nature of the activities; the extent to which the internal audit function's organizational
status and relevant policies and procedures support the objectivity of the internal auditors;
competence; and systematic and disciplined approach of the function that are relevant.
References in this SA to the work of the internal audit function include relevant activities of
other functions or third-party providers that have these characteristics.
A3.     In addition, those in the entity with operational and managerial duties and
responsibilities outside of the internal audit function would ordinarily face threats to their
objectivity that would preclude them from being treated as part of an internal audit function for
the purpose of this SA , although they may perform control activities that can be tested in
accordance with SA 330.12 For this reason, monitoring controls performed by an owner-
manager would not be considered equivalent to an internal audit function.
A4.    While the objectives of an entity's internal audit function and the external auditor differ,
the function may perform audit procedures similar to those performed by the external auditor
in an audit of financial statements. If so, the external auditor may make use of the function for
purposes of the audit in one or more of the following ways:
        To obtain information that is relevant to the external auditor's assessments of the
        risks of material misstatement due to error or fraud. In this regard, SA 31513 requires
        the external auditor to obtain an understanding of the nature of the internal audit
        function's responsibilities, its status within the organization, and the activities
        performed, or to be performed, and make inquiries of appropriate individuals within
        the internal audit function (if the entity has such a function); or
        Unless prohibited, or restricted to some extent, by law or regulation, the external
        auditor, after appropriate evaluation, may decide to use work that has been
        performed by the internal audit function during the period in partial substitution for
        audit evidence to be obtained directly by the external auditor.14
In addition, unless prohibited, or restricted to some extent, by law or regulation, the external
auditor may use internal auditors to perform audit procedures under the direction,
supervision and review of the external auditor (referred to as "direct assistance" in this SA).15

12 See paragraph 10.
13 Please see the conforming amendments to Revised SA 315, Identifying and Assessing the Risks of Material
Misstatement through Understanding the Entity and Its Environment, arising pursuant to issuance of this SA 610
(Revised). These are given at the end of the document.(please see SA 315, paragraph 6(a) therein)
14 See paragraphs 15­25.
15 See paragraphs 26­35.

                                                     10
Determining Whether, in Which Areas, and to What Extent the Work of the
Internal Audit Function Can Be Used
Evaluating the Internal Audit Function
Objectivity and Competence (Ref: Para. 15(a)­(b))

A5.     The external auditor exercises professional judgment in determining whether the work
of the internal audit function can be used for purposes of the audit, and the nature and extent
to which the work of the internal audit function can be used in the circumstances.
A6.     The extent to which the internal audit function's organizational status and relevant
policies and procedures support the objectivity of the internal auditors and the level of
competence of the function are particularly important in determining whether to use and, if so,
the nature and extent of the use of the work of the function that is appropriate in the
circumstances.
A7.     Objectivity refers to the ability to perform those tasks without allowing bias, conflict of
interest or undue influence of others to override professional judgments. Factors that may
affect the external auditor's evaluation include the following:
       Whether the organizational status of the internal audit function, including the
       function's authority and accountability, supports the ability of the function to be free
       from bias, conflict of interest or undue influence of others to override professional
       judgments. For example, whether the internal audit function reports to those charged
       with governance or an officer with appropriate authority, or if the function reports to
       management, whether it has direct access to those charged with governance.
       Whether the internal audit function is free of any conflicting responsibilities, for
       example, having managerial or operational duties or responsibilities that are outside
       of the internal audit function.
       Whether those charged with governance oversee employment decisions related to
       the internal audit function, for example, determining the appropriate remuneration
       policy.
       Whether there are any constraints or restrictions placed on the internal audit function
       by management or those charged with governance, for example, in communicating
       the internal audit function's findings to the external auditor.

       Whether the internal auditors are members of relevant professional bodies and their
       memberships obligate their compliance with relevant professional standards relating
       to objectivity, or whether their internal policies achieve the same objectives.
A8.    Competence of the internal audit function refers to the attainment and maintenance of
knowledge and skills of the function as a whole at the level required to enable assigned tasks
to be performed diligently and in accordance with applicable professional standards. Factors
that may affect the external auditor's determination include the following:

       Whether the internal audit function is adequately and appropriately resourced relative
       to the size of the entity and the nature of its operations.

       Whether there are established policies for hiring, training and assigning internal
       auditors to internal audit engagements.
                                               11
       Whether the internal auditors have adequate technical training and proficiency in
       auditing. Relevant criteria that may be considered by the external auditor in making
       the assessment may include, for example, the internal auditors' possession of a
       relevant professional designation and experience.
       Whether the internal auditors possess the required knowledge relating to the entity's
       financial reporting and the applicable financial reporting framework and whether the
       internal audit function possesses the necessary skills (for example, industry-specific
       knowledge) to perform work related to the entity's financial statements.

       Whether the internal auditors are members of relevant professional bodies that oblige
       them to comply with the relevant professional standards including continuing
       professional development requirements.
A9.     Objectivity and competence may be viewed as a continuum. The more the internal
audit function's organizational status and relevant policies and procedures adequately support
the objectivity of the internal auditors and the higher the level of competence of the function,
the more likely the external auditor may make use of the work of the function and in more
areas. However, an organizational status and relevant policies and procedures that provide
strong support for the objectivity of the internal auditors cannot compensate for the lack of
sufficient competence of the internal audit function. Equally, a high level of competence of the
internal audit function cannot compensate for an organizational status and policies and
procedures that do not adequately support the objectivity of the internal auditors.
Application of a Systematic and Disciplined Approach (Ref: Para. 15(c))
A10. The application of a systematic and disciplined approach to planning, performing,
supervising, reviewing and documenting its activities distinguishes the activities of the internal
audit function from other monitoring control activities that may be performed within the entity.
A11. Factors that may affect the external auditor's determination of whether the internal audit
function applies a systematic and disciplined approach include the following:
       The existence, adequacy and use of documented internal audit procedures or
       guidance covering such areas as risk assessments, work programs, documentation
       and reporting, the nature and extent of which is commensurate with the size and
       circumstances of an entity.
       Whether the internal audit function has appropriate quality control policies and
       procedures, for example, such as those policies and procedures in SQC 116 that
       would be applicable to an internal audit function (such as those relating to leadership,
       human resources and engagement performance) or quality control requirements in
       standards set by the relevant professional bodies for internal auditors. Such bodies
       may also establish other appropriate requirements such as conducting periodic
       external quality assessments.

Circumstances When Work of the Internal Audit Function Cannot Be Used (Ref: Para. 16)

A12. The external auditor's evaluation of whether the internal audit function's organizational
status and relevant policies and procedures adequately support the objectivity of the internal

16 Standard on Quality Control (SQC) 1, Quality Control for Firms that Perform Audits and Reviews of
Historical Financial Information, and Other Assurance and Related Services Engagements.
                                                12
auditors, the level of competence of the internal audit function, and whether it applies a
systematic and disciplined approach may indicate that the risks to the quality of the work of
the function are too significant and therefore it is not appropriate to use any of the work of the
function as audit evidence.

A13. Consideration of the factors in paragraphs A7, A8 and A11 of this SA individually and in
aggregate is important because an individual factor is often not sufficient to conclude that the
work of the internal audit function cannot be used for purposes of the audit. For example, the
internal audit function's organizational status is particularly important in evaluating threats to
the objectivity of the internal auditors. If the internal audit function reports to management, this
would be considered a significant threat to the function's objectivity unless other factors such
as those described in paragraph A7 of this SA collectively provide sufficient safeguards to
reduce the threat to an acceptable level.

A14. In addition, a self-review threat17 is created when the external auditor accepts an
engagement to provide internal audit services to an audit client, and the results of those
services will be used in conducting the audit. This is because of the possibility that the
engagement team will use the results of the internal audit service without properly evaluating
those results or without exercising the same level of professional skepticism as would be
exercised when the internal audit work is performed by individuals who are not members of
the firm. Paragraph 290.173 of the Code of Ethics, issued by the Institute of Chartered
Accountants of India therefore in the context of provision of internal audit service to financial
statement audit clients, specifically provides that "a statutory auditor of an entity cannot be its
internal auditor as it will not be possible for him to give an independent and objective opinion".
The said Code of Ethics discusses the threats and the safeguards that can be applied to
reduce the threats to an acceptable level in other circumstances.

Determining the Nature and Extent of Work of the Internal Audit Function that Can Be
Used
Factors Affecting the Determination of the Nature and Extent of the Work of the Internal
Audit Function that Can Be Used (Ref: Para. 17­19)
A15. Once the external auditor has determined that the work of the internal audit function can
be used for purposes of the audit, a first consideration is whether the planned nature and
scope of the work of the internal audit function that has been performed, or is planned to be
performed, is relevant to the overall audit strategy and audit plan that the external auditor has
established in accordance with SA 300.18
A16. Examples of work of the internal audit function that can be used by the external auditor
include the following:
        Testing of the operating effectiveness of controls.
        Substantive procedures involving limited judgment.
        Observations of inventory counts.


17 Attention of the members is also invited to paragraph 2.1 of the Guidance Note on Independence of Auditors,
issued by the Institute of Chartered Accountants of India.
18 SA 300, Planning an Audit of Financial Statements.

                                                     13
           Tracing transactions through the information system relevant to financial reporting.
           Testing of compliance with regulatory requirements.
           In some circumstances, audits or reviews of the financial information of subsidiaries
           that are not significant components to the group (where this does not conflict with the
           requirements of SA 600).19
A17. The external auditor's determination of the planned nature and extent of use of the work
of the internal audit function will be influenced by the external auditor's evaluation of the
extent to which the internal audit function's organizational status and relevant policies and
procedures adequately support the objectivity of the internal auditors and the level of
competence of the internal audit function in paragraph 18 of this SA. In addition, the amount
of judgment needed in planning, performing and evaluating such work and the assessed risk
of material misstatement at the assertion level are inputs to the external auditor's
determination. Further, there are circumstances in which the external auditor cannot use the
work of the internal audit function for purpose of the audit as described in paragraph 16 of this
SA.
Judgments in planning and performing audit procedures and evaluating results (Ref: Para.
18(a), 30(a))
A18. The greater the judgment needed to be exercised in planning and performing the audit
procedures and evaluating the audit evidence, the external auditor will need to perform more
procedures directly in accordance with paragraph 18 of this SA, because using the work of
the internal audit function alone will not provide the external auditor with sufficient appropriate
audit evidence.
A19. Since the external auditor has sole responsibility for the audit opinion expressed, the
external auditor needs to make the significant judgments in the audit engagement in
accordance with paragraph 18. Significant judgments include the following:
           Assessing the risks of material misstatement;
           Evaluating the sufficiency of tests performed;

           Evaluating the appropriateness of management's use of the going concern
           assumption;

           Evaluating significant accounting estimates; and
           Evaluating the adequacy of disclosures in the financial statements, and other matters
           affecting the auditor's report.
Assessed risk of material misstatement (Ref: Para. 18(b))
A20. For a particular account balance, class of transaction or disclosure, the higher an
assessed risk of material misstatement at the assertion level, the more judgment is often
involved in planning and performing the audit procedures and evaluating the results thereof.
In such circumstances, the external auditor will need to perform more procedures directly in
accordance with paragraph 18 of this SA, and accordingly, make less use of the work of the
internal audit function in obtaining sufficient appropriate audit evidence. Furthermore, as


19   SA 600, Using the Work of Another Auditor.
                                                  14
explained in SA 200,20 the higher the assessed risks of material misstatement, the more
persuasive the audit evidence required by the external auditor will need to be, and, therefore,
the external auditor will need to perform more of the work directly.

A21. As explained in SA 315,21 significant risks require special audit consideration and
therefore the external auditor's ability to use the work of the internal audit function in relation
to significant risks will be restricted to procedures that involve limited judgment. In addition,
where the risks of material misstatement is other than low, the use of the work of the internal
audit function alone is unlikely to reduce audit risk to an acceptably low level and eliminate the
need for the external auditor to perform some tests directly.
A22. Carrying out procedures in accordance with this SA may cause the external auditor to
reevaluate the external auditor's assessment of the risks of material misstatement.
Consequently, this may affect the external auditor's determination of whether to use the work
of the internal audit function and whether further application of this SA is necessary.
Communication with Those Charged with Governance (Ref: Para. 20)
A23. In accordance with SA 260,22 the external auditor is required to communicate with
those charged with governance an overview of the planned scope and timing of the audit. The
planned use of the work of the internal audit function is an integral part of the external
auditor's overall audit strategy and is therefore relevant to those charged with governance for
their understanding of the proposed audit approach.
Using the Work of the Internal Audit Function
Discussion and Coordination with the Internal Audit Function (Ref: Para. 21)
A24. In discussing the planned use of their work with the internal audit function as a basis for
coordinating the respective activities, it may be useful to address the following:
        The timing of such work.
        The nature of the work performed.
        The extent of audit coverage.

        Materiality for the financial statements as a whole (and, if applicable, materiality level
        or levels for particular classes of transactions, account balances or disclosures), and
        performance materiality.
        Proposed methods of item selection and sample sizes.

        Documentation of the work performed.
        Review and reporting procedures.
A25. Coordination between the external auditor and the internal audit function is effective
when, for example:
        Discussions take place at appropriate intervals throughout the period.


20 SA 200, paragraph A29.
21 SA 315, paragraph 4(e).
22 SA 260, paragraph 11.

                                               15
        The external auditor informs the internal audit function of significant matters that may
        affect the function.
        The external auditor is advised of and has access to relevant reports of the internal
        audit function and is informed of any significant matters that come to the attention of
        the function when such matters may affect the work of the external auditor so that the
        external auditor is able to consider the implications of such matters for the audit
        engagement.
A26. SA 20023 discusses the importance of the auditor planning and performing the audit with
professional skepticism, including being alert to information that brings into question the
reliability of documents and responses to inquiries to be used as audit evidence. Accordingly,
communication with the internal audit function throughout the engagement may provide
opportunities for internal auditors to bring matters that may affect the work of the external
auditor to the external auditor's attention.24 The external auditor is then able to take such
information into account in the external auditor's identification and assessment of risks of
material misstatement. In addition, if such information may be indicative of a heightened risk
of a material misstatement of the financial statements or may be regarding any actual,
suspected or alleged fraud, the external auditor can take this into account in the external
auditor's identification of risk of material misstatement due to fraud in accordance with SA
240.25

Procedures to Determine the Adequacy of Work of the Internal Audit Function (Ref:
Para. 23­24)

A27. The external auditor's audit procedures on the body of work of the internal audit function
as a whole that the external auditor plans to use provide a basis for evaluating the overall
quality of the function's work and the objectivity with which it has been performed.

A28. The procedures the external auditor may perform to evaluate the quality of the work
performed and the conclusions reached by the internal audit function, in addition to
reperformance in accordance with paragraph 24, include the following:

        Making inquiries of appropriate individuals within the internal audit function.
        Observing procedures performed by the internal audit function.
        Reviewing the internal audit function's work program and working papers.

A29. The more judgment involved, the higher the assessed risk of material misstatement,
the less the internal audit function's organizational status and relevant policies and
procedures adequately support the objectivity of the internal auditors, or the lower the level of
competence of the internal audit function, the more audit procedures are needed to be
performed by the external auditor on the overall body of work of the function to support the
decision to use the work of the function in obtaining sufficient appropriate audit evidence on
which to base the audit opinion.

23 SA 200, paragraphs 15 and A18.
24 Please see the conforming amendments to Revised SA 315, Identifying and Assessing the Risks of Material
Misstatement through Understanding the Entity and Its Environment, arising pursuant to issuance of this SA 610
(Revised). These are given at the end of the document.(please see SA 315, paragraph A116 therein).
25 SA 315, paragraph A11 (as given in the conforming amendments) in relation to SA 240, The Auditor's

Responsibilities Relating to Fraud in an Audit of Financial Statements.
                                                     16
Reperformance (Ref: Para. 24)

A30. For purposes of this SA, reperformance involves the external auditor's independent
execution of procedures to validate the conclusions reached by the internal audit function.
This objective may be accomplished by examining items already examined by the internal
audit function or, where it is not possible to do so, the same objective may also be
accomplished by examining sufficient other similar items not actually examined by the internal
audit function. Reperformance provides more persuasive evidence regarding the adequacy of
the work of the internal audit function compared to other procedures the external auditor may
perform in paragraph A28. While it is not necessary for the external auditor to do
reperformance in each area of work of the internal audit function that is being used, some
reperformance is required on the body of work of the internal audit function as a whole that
the external auditor plans to use in accordance with paragraph 24. The external auditor is
more likely to focus reperformance in those areas where more judgment was exercised by the
internal audit function in planning, performing and evaluating the results of the audit
procedures and in areas of higher risk of material misstatement.

Determining Whether, in Which Areas and to What Extent Internal Auditors
Can Be Used to Provide Direct Assistance
Determining Whether Internal Auditors Can Be Used to Provide Direct Assistance for
Purposes of the Audit (Ref: Para. 5, 26­28)
A31. In case where the external auditor is prohibited by law or regulation from using internal
auditors to provide direct assistance, it is relevant for the principal auditors to consider
whether the prohibition also extends to component auditors and, if so, to address this in the
communication to the component auditors.
A32. As stated in paragraph A7 of this SA, objectivity refers to the ability to perform the
proposed work without allowing bias, conflict of interest or undue influence of others to
override professional judgments. In evaluating the existence and significance of threats to the
objectivity of an internal auditor, the following factors may be relevant:

           The extent to which the internal audit function's organizational status and relevant
           policies and procedures support the objectivity of the internal auditors.26

           Family and personal relationships with an individual working in, or responsible for,
           the aspect of the entity to which the work relates.

           Association with the division or department in the entity to which the work relates.
           Significant financial interests in the entity other than remuneration on terms
           consistent with those applicable to other employees at a similar level of seniority.
Material issued by relevant professional bodies for internal auditors may provide additional
useful guidance.
A33. There may also be some circumstances in which the significance of the threats to the
objectivity of an internal auditor is such that there are no safeguards that could reduce them
to an acceptable level. For example, because the adequacy of safeguards is influenced by

26   See paragraph A7.
                                                 17
the significance of the work in the context of the audit, paragraph 30(a) and (b) prohibits the
use of internal auditors to provide direct assistance in relation to performing procedures that
involve making significant judgments in the audit or that relate to higher assessed risks of
material misstatement where the judgment required in performing the relevant audit
procedures or evaluating the audit evidence gathered is more than limited. This would also
be the case where the work involved creates a self-review threat, which is why internal
auditors are prohibited from performing procedures in the circumstances described in
paragraph 30(c) and (d).
A34. In evaluating the level of competence of an internal auditor, many of the factors in
paragraph A8 of this SA may also be relevant, applied in the context of individual internal
auditors and the work to which they may be assigned.

Determining the Nature and Extent of Work that Can Be Assigned to Internal Auditors
Providing Direct Assistance (Ref: Para. 29­31)
A35. Paragraphs A15­A22 of this SA provide relevant guidance in determining the nature
and extent of work that may be assigned to internal auditors.
A36. In determining the nature of work that may be assigned to internal auditors, the external
auditor is careful to limit such work to those areas that would be appropriate to be assigned.
Examples of activities and tasks that would not be appropriate to use internal auditors to
provide direct assistance include the following:
           Discussion of fraud risks. However, the external auditors may make inquiries of
           internal auditors about fraud risks in the organization in accordance with SA 315.27
           Determination of unannounced audit procedures as addressed in SA 240.
A37. Similarly, since in accordance with SA 50528 the external auditor is required to maintain
control over external confirmation requests and evaluate the results of external confirmation
procedures, it would not be appropriate to assign these responsibilities to internal auditors.
However, internal auditors may assist in assembling information necessary for the external
auditor to resolve exceptions in confirmation responses.
A38. The amount of judgment involved and the risk of material misstatement are also
relevant in determining the work that may be assigned to internal auditors providing direct
assistance. For example, in circumstances where the valuation of accounts receivable is
assessed as an area of higher risk, the external auditor could assign the checking of the
accuracy of the aging to an internal auditor providing direct assistance. However, because
the evaluation of the adequacy of the provision based on the aging would involve more than
limited judgment, it would not be appropriate to assign that latter procedure to an internal
auditor providing direct assistance.
A39. Notwithstanding the direction, supervision and review by the external auditor, excessive
use of internal auditors to provide direct assistance may affect perceptions regarding the
independence of the external audit engagement.
Using Internal Auditors to Provide Direct Assistance (Ref: Para. 34)
A40. As individuals in the internal audit function are not independent of the entity as is

27   SA 315, paragraph 6(a).
28   SA 505, External Confirmations, paragraphs 7 and 16.
                                                       18
required of the external auditor when expressing an opinion on financial statements, the
external auditor's direction, supervision and review of the work performed by internal
auditors providing direct assistance will generally be of a different nature and more extensive
than if members of the engagement team perform the work.
A41. In directing the internal auditors, the external auditor may, for example, remind the
internal auditors to bring accounting and auditing issues identified during the audit to the
attention of the external auditor. In reviewing the work performed by the internal auditors, the
external auditor's considerations include whether the evidence obtained is sufficient and
appropriate in the circumstances, and that it supports the conclusions reached.









                                              19
                            RELATED CONFORMING AMENDMENTS
Note: The following are conforming amendments to SQC 1 and other SAs as a result of SA
610 (Revised), Using the Work of Internal Auditors. The footnote numbers within these
amendments do not align with the SAs that will be amended, and reference should be made
to those SAs.
SQC 1, Quality Control for Firms that Perform Audits and Reviews of Historical
Financial Information, and Other Assurance and Related Services
Engagements
Definitions
6.        In this SQC, the following terms have the meanings attributed below:
(e)        Engagement team ­ all personnel performing an engagement, including any
experts contracted by the firm in connection with that engagement. The term "engagement
team" excludes individuals within the client's internal audit function who provide direct
assistance on an audit engagement when the external auditor complies with the
requirements of SA 610 (Revised).29
SA 220, Quality Control for an Audit of Financial Statements
Definitions
7.        For purposes of the SAs, the following terms have the meanings attributed below:
(d)        Engagement team ­ all personnel performing an engagement, including any
experts contracted by the firm in connection with that engagement. The term "engagement
team" excludes individuals within the client's internal audit function who provide direct
assistance on an audit engagement when the external auditor complies with the
requirements of SA 610 (Revised).30
SA 260, Communication with Those Charged with Governance
A18. Other planning matters that it may be appropriate to discuss with those charged with
governance include:
           Where the entity has an internal audit function, the extent to which the auditor will
           use the work of internal audit, and how the external and internal auditors can best
           work together in a constructive and complementary manner, and the nature and
           extent of any planned use of internal auditors to provide direct assistance.31
SA 300, Planning an Audit of Financial Statements
Appendix

Characteristics of the Engagement


29 SA 610 (Revised), Using the Work of Internal Auditors, establishes limits on the use of direct assistance. It also acknowledges that the
external auditor may be prohibited by law or regulation from obtaining direct assistance from internal auditors. Therefore, the use of direct
assistance is restricted to situations where it is permitted.
30 SA 610 (Revised), Using the Work of Internal Auditors, establishes limits on the use of direct assistance. It also acknowledges that the

external auditor may be prohibited by law or regulation from obtaining direct assistance from internal auditors. Therefore, the use of direct
assistance is restricted to situations where it is permitted.
31 SA 610 (Revised), paragraphs 20 and 31.

                                                                    20
...

          The availability of the work of internal auditors and the extent of the auditor's potential
          reliance on such work, or internal auditors can be used to provide direct assistance.

         ...

SA 315, Identifying and Assessing the Risks of Material Misstatement Through
Understanding the Entity and Its Environment
6.        The risk assessment procedures shall include the following:
      (a) Inquiries of management, of appropriate individuals within the internal audit function (if
          the function exists), and of others within the entity who in the auditor's judgment may have
          information that is likely to assist in identifying risks of material misstatement due to fraud or
          error. (Ref: Para. A6-A13)
      ............
23.      If the entity has an internal audit function,32 the auditor shall obtain an understanding of the
following in order to determine whether the internal audit function is likely to be relevant to the audit:
(a) Tthe nature of the internal audit function's responsibilities, and how the internal audit function fits
    in the entity's its organisational structurestatus, ; and
(b) T the activities performed, or to be performed. , by the internal audit function. (Ref: Para. A101
    109 -A103 116)
Inquiries of Management, the Internal Audit Function and Others Within the Entity (Ref: Para. 6(a))
A6. Much of the information obtained by the auditor's inquiries is obtained from management and
those responsible for financial reporting. Information may also be obtained by the auditor through
inquiries with the internal audit function, if the entity has such a function, and others within the
entity.
A7. However, tThe auditor may also obtain information, or a different perspective in identifying risks of
material misstatement, through inquiries of others within the entity and other employees with different
levels of authority. For example:
      .................................
Inquiries directed toward internal audit personnel may provide information about internal audit
   procedures performed during the year relating to the design and effective ness of the entity's
   internal control and whether management has satisfactorily responded to findings from those
   procedures.
      ................................
      ..................................
      ............................
Inquiries of the Internal Audit Function
A9. If an entity has an internal audit function, inquiries of the appropriate individuals within the
function may provide information that is useful to the auditor in obtaining an understanding of the entity

32SA 610(Revised), "Using the Work of Internal Auditors", paragraph 7(a)14(a), defines the term "internal audit function" for
purposes of the SAs.
                                                              21
and its environment, and in identifying and assessing risks of material misstatement at the
financial statement and assertion levels. In performing its work, the internal audit function is
likely to have obtained insight into the entity's operations and business risks, and may have findings
based on its work, such as identified control deficiencies or risks, that may provide valuable
input into the auditor's understanding of the entity, the auditor's risk assessments or other
aspects of the audit. The auditor's inquiries are therefore made whether or not t he auditor expects to
use the work of the internal audit function to modify the nature or timing, or reduce the extent, of audit
procedures to be performed.33 Inquiries of particular relevance may be about matters the internal
audit function has raised with those charged with governance and the outcomes of the function's own
risk assessment process.
A10. If, based on responses to the auditor's inquiries, it appears that there are findings that
may be relevant to the entity's financial reporting and the audit, the auditor may consider it
appropriate to read related reports of the internal audit function. Examples of reports of the internal
audit function that may be relevant include the function's strategy and planning documents and reports
that have been prepared for management or those charged with governance describing the
findings of the internal audit function's examinations.
A11. In addition, in accordance with SA 240,34 if the internal audit function provides information
to the auditor regarding any actual, suspected or alleged fraud, the auditor takes this into account in
the auditor's identification of risk of material misstatement due to fraud.
A12. Appropriate individuals within the internal audit function with whom inquiries are made are
those who, in the auditor's judgment, have the appropriate knowledge, experience and authority, such
as the chief internal audit executive or, depending on the circumstances, other personnel within
the function. The auditor may also consider it appropriate to have periodic meetings with these
individuals.
Considerations specific to public sector entities (Ref: Para 6(a))
A13. Auditors of public sector entities often have additional responsibilities with regard to internal
control and compliance with applicable laws and regulations. Inquiries of appropriate individuals
in the internal audit function can assist the auditors in identifying the risk of material noncompliance
with applicable laws and regulations and the risk of deficiencies in internal control over financial
reporting.
A79. The auditor may also consider how management has responded to the findings and
recommendations of the internal audit function regarding identified deficiencies in internal control relevant
to the audit, including whether and how such responses have been implemented, and whether they have
been subsequently evaluated by the internal audit function.
The Entity's Internal Audit Functions (Ref: Para 23)
A109101.           If the The entity's has an internal audit function, obtaining an understanding of that
function contributes to the auditor's understanding of the entity and its environment, including internal
control, in particular the role that the function plays in the entity's monitoring of internal control over
financial reporting. This understanding, together with the information obtained from the auditor's
inquiries in paragraph 6(a) of this SA, may also provide information that is directly relevant to the
auditor's identification and assessment of the risks of material misstatement. is likely to be relevant to
the audit if the nature of the internal audit function's res ponsibilities and activities are related to the

33   The relevant requirements are contained in SA 610 (Revised).
34   SA 240, paragraph 19.
                                                    22
entity's financial reporting, and the auditor expects to use the work of the internal auditors to modify the
nature or timing, or reduce the extent, of audit procedures to be performed. When the auditor
determines that the internal audit function is likely to be relevant to the audit, SA 610 applies.
A110102.         The objectives and scope of an internal audit function, and therefore the nature of its
responsibilities and its status within the organisation, including the function's authority and
accountability, vary widely and depend on the size and structure of the entity and the requirements of
management and, where applicable, those charged with governance. The responsibilities of an internal
audit function may include, for example, monitoring of internal control, risk management, and review of
compliance with laws and regulations. On the other hand, the responsibilities of the internal audit
function may be limited to the review of the economy, efficiency and effectiveness of operations, for
example, and accordingly, may not relate to the entity's financial reporting. These matters may be set
out in an internal audit charter or terms of reference.
A111. The responsibilities of an internal audit function may include performing procedures and
evaluating the results to provide assurance to management and those charged with governance
regarding the design and effectiveness of risk management, internal control and governance
processes. If so, the internal audit function may play an important role in the entity's monitoring of
internal control over financial reporting. However, the responsibilities of the internal audit function may
be focussed on evaluating the economy, efficiency and effectiveness of operations and, if so, the
work of the function may not directly relate to the entity's financial reporting.
A112. The auditor's inquiries of appropriate individuals within the internal audit function in accordance
with paragraph 6(a) of this SA help the auditor obtain an understanding of the nature of the
internal audit function's responsibilities. If the auditor determines that the function's
responsibilities are related to the entity's financial reporting, the auditor may obtain further
understanding of the activities performed, or to be performed, by the internal audit function by
reviewing the internal audit function's audit plan for the period, if any, and discussing that plan with the
appropriate individuals within the function.
A113103.          If the nature of the internal audit function's responsibilities and assurance activities are
related to the entity's financial reporting, the auditor may also be able to use the work of the
internal audit function to modify the nature or timing, or reduce the extent, of audit procedures to be
performed directly by the auditor in obtaining audit evidence. Auditors may be more likely to be able to
use the work of an entity's internal audit function when it appears, for example, based on
experience in previous audits or the auditor's risk assessment procedures, that the entity has
an internal audit function that is adequately and appropriately resourced relative to the size of
the entity and the nature of its operations, and has a direct reporting relationship to those charged
with governance.the external auditor's consideration of the activities performed, or to be performed by,
the internal audit function may include review of the internal audit function's audit plan for the period, if
any, and discussion of that plan with the internal auditors.

A114. If, based on the auditor's preliminary understanding of the internal audit function, the auditor
expects to use the work of the internal audit function to modify the nature or timing, or reduce the extent, of audit
procedures to be performed, SA 610 (Revised) applies.

A115. As is further discussed in SA 610 (Revised), the activities of an internal audit function are distinct from
other monitoring controls that may be relevant to financial reporting, such as reviews of management
accounting information that are designed to contribute to how the entity prevents or detects misstatements.

A116. Establishing communications with the appropriate individuals within an entity's internal audit
function early in the engagement, and maintaining such communications throughout the
                                                        23
engagement, can facilitate effective sharing of information. It creates an environment in which the auditor can be
informed of significant matters that may come to the attention of the internal audit function when such matters
may affect the work of the auditor. SA 200 discusses the importance of the auditor planning and performing the
audit with professional skepticism, including being alert to information that brings into question the reliability
of documents and responses to inquiries to be used as audit evidence. Accordingly, communication with the
internal audit function throughout the engagement may provide opportunities for internal auditors to bring
such information to the auditor's attention. The auditor is then able to take such information into account
in the auditor's identification and assessment of risks of material misstatement.




                                                       24

Home | About Us | Terms and Conditions | Contact Us
Copyright 2024 CAinINDIA All Right Reserved.
Designed and Developed by Ritz Consulting