The role of external and internal audit

Welcome to Your Guide on Internal and External Audit!

Hello there! You are currently diving into Section B of the BA4 curriculum, which focuses on Corporate Governance. In this chapter, we are going to look at one of the most important "safety nets" in the business world: Auditing.

If you have ever felt confused about the difference between an internal and external auditor, don't worry—you are not alone! Think of an audit like a health checkup for a business. Sometimes you check your own temperature (internal), and sometimes you go to a specialist doctor for a formal report (external). Both are vital to make sure the "body" of the business is healthy and following the rules. Let’s break it down step-by-step.

1. What exactly is an Audit?

Before we look at the two types, let's define what we mean by an audit. At its simplest, an audit is an independent examination of data, statements, or records to provide an opinion on whether they are accurate and follow the rules.

Why do we need them? In large companies, the people who own the business (Shareholders) are often not the same people who run it (Directors). This creates a "gap" in information. Audits help bridge that gap by providing Assurance—basically a fancy word for "peace of mind"—that the information being reported is reliable.

2. The External Audit: The "Independent Watchdog"

The External Audit is a formal process usually required by law (this is called a Statutory Audit) for companies over a certain size.

What is their goal?

The primary goal of an external auditor is to provide an opinion on whether the company's Financial Statements (the numbers at the end of the year) give a True and Fair View of the company’s financial position. They aren't there to find every single tiny mistake; they are there to make sure the big picture is correct.

Who do they report to?

This is a common exam trap! Even though management pays their fees, external auditors report directly to the Shareholders. They are there to protect the owners from being misled by the managers.

Key Characteristics of External Audit:

1. Independence: They must be completely separate from the company. They cannot be employees or have close personal relationships with the directors.
2. Focus: They focus almost entirely on the financial records and the systems that produce those numbers.
3. Public Report: Their final "Audit Opinion" is a public document included in the annual report.

Analogy: Think of an external auditor like a Food Health Inspector. They don't work for the restaurant; they come in from the outside to make sure the kitchen follows the law so the customers (shareholders) don't get "sick" from bad information.

Quick Review: The External Audit

Objective: To express an opinion on the "True and Fair" view of financial statements.
Reporting to: The Shareholders.
Requirement: Often required by law (Statutory).
Main Focus: Accuracy of financial reporting.

3. The Internal Audit: The "Business Consultant"

While the external auditor is like an outside inspector, the Internal Auditor is more like a dedicated coach working inside the team.

What is their goal?

The internal audit function is a part of the company's Internal Control System. Their job is much broader than just looking at numbers. They look at Risk Management, Corporate Governance, and Operational Efficiency.

Who do they report to?

Internal auditors usually report to Management or, ideally, the Audit Committee (a sub-group of the Board of Directors). This helps them stay objective even though they are employees of the company.

Key Characteristics of Internal Audit:

1. Scope: They can look at anything! They might check if the IT system is secure, if the company is following environmental laws, or if the HR department is hiring people correctly.
2. Value-adding: Their goal is to help the company improve its operations and achieve its targets.
3. Not always mandatory: While good governance (like the UK Corporate Governance Code) suggests having one, it isn't always a strict legal requirement for every single company.

Analogy: Think of an internal auditor like a Personal Trainer. You hire them to watch how you exercise. They tell you if your form is wrong (identifying risk) and how to get stronger (improving efficiency) before you enter a competition.

Did You Know?

Internal auditors often perform Value for Money (VFM) audits. They look at the "Three Es":
Economy: Are we buying resources at the best price?
Efficiency: Are we getting the most output for our input?
Effectiveness: Are we actually achieving our goals?

4. Comparing Internal and External Audit

Understanding the differences is key for your BA4 exam. Here is a simple breakdown:

1. Appointment: External auditors are appointed by shareholders. Internal auditors are appointed by the Board/Audit Committee.
2. Objective: External is about "True and Fair" financial views. Internal is about "Risk, Control, and Efficiency."
3. Relationship: External auditors are independent third parties. Internal auditors are often employees (though they can be outsourced).
4. Reporting: External reports to Shareholders via the Audit Report. Internal reports to the Board/Audit Committee via internal memos.

Memory Aid: The "Who and Why" Mnemonic

External = Everyone (reports to shareholders/public) to find Errors in the accounts.
Internal = Inside (reports to management) to Improve the business.

5. The Audit Committee: The Bridge

You might be wondering: "If internal auditors work for the company, how can they be honest about the bosses?" Great question! This is where the Audit Committee comes in.

The Audit Committee is made up of Independent Non-Executive Directors (NEDs). They act as a "buffer" or a middle-man. Both the internal and external auditors talk to the Audit Committee. This ensures that if the auditors find a problem with the CEO, they have a safe, independent place to report it without fear of being fired.

Responsibilities of the Audit Committee regarding Audit:

1. Monitoring the integrity of the financial statements.
2. Reviewing the company’s internal financial controls.
3. Monitoring and reviewing the effectiveness of the internal audit function.
4. Recommending the appointment or removal of the external auditor.

6. Common Mistakes to Avoid

Mistake 1: Thinking auditors "guarantee" there is no fraud.
This is a huge misconception called the Expectation Gap. Auditors (especially external) only provide "reasonable assurance." They don't check every single transaction, so they might not catch a very clever, small-scale fraud.

Mistake 2: Confusing who they report to.
Always remember: External = Shareholders. Internal = Management/Audit Committee. If you see an exam question saying external auditors report to the Finance Director, it is wrong!

Mistake 3: Thinking Internal Audit only looks at money.
Internal audit is "operational." They check safety, IT, legal compliance, and even culture. They are much broader than external auditors.

7. Final Summary - Key Takeaways

The Core Difference: External audit is about Accountability to the outside world; Internal audit is about Improvement for the inside of the company.

Independence: This is the "Golden Rule" of auditing. Without independence, the audit has no value because no one will trust the results.

Governance Connection: Audits are a critical part of Corporate Governance because they ensure transparency and help manage the risks that could cause a company to fail.

Don't worry if the terminology feels heavy at first. Just keep coming back to the analogies: The Outside Inspector (External) and the Internal Coach (Internal). You've got this!