Blog: ​I Still Believe Internal Audit Shouldn’t Report to the CFO

In his blog, IIA President and CEO Richard Chambers, CIA, QIAL, CGAP, CCSA, CRMA, shares his personal reflections and insights on the internal audit profession. Here’s an excerpt from his latest post:

Readers of my blog know there are a few things I have harped on over the years. One of them is what I consider to be the outdated practice of having internal audit report administratively to the chief financial officer (CFO).

For years, The IIA has conducted research on internal audit reporting relationships. The good news is our surveys have found a consistently high percentage of chief audit executives (CAEs) who say they report functionally to the audit committee. In fact, more than 80% of North American CAEs surveyed for The IIA’s upcoming 2021 North American Pulse of Internal Audit report say they report functionally to the “audit committee, board, or equivalent.” We see a similar trend globally.

But if an internal audit department suffers from even the appearance of an independence or objectivity impairment, it is not from the functional reporting relationship. Instead, the problem emanates from where it reports administratively. And the most controversial reporting relationship remains to the CFO. It is stunning how often CAEs in North America respond to IIA surveys that they report administratively to the CFO. In the soon-to-be-released Pulse report, we show 73% of internal audit departments with this reporting line.

Read the full InternalAuditor.org blog post from IIA President and CEO Richard Chambers.