Feedback on the effectiveness of the internal audit function is also important. While research is limited in this area, it has unequivocally demonstrated that the internal audit function is most effective when it has independence (in “fact” and in “appearance”) from top management. Felix et al. (2005) and Cohen et al. (2004) suggest that internal audit can play an important role in the quality of the financial reporting process. All parties in the governance structure individually and
jointly impact financial reporting quality. Thus, auditors could review the results of the quality assurance review QAR of the internal audit function and assess the quality of the QAR process to ensure the internal audit function is an effective ally in promoting the integrity of the financial reporting process. Auditors also should communicate to the audit committee significant concerns they may have about the effectiveness of internal audit as a result of experiences with them during
the engagement. Including the internal audit department in relevant communications between the audit committee and the auditor also would help to achieve the goal of increased financial and industry expertise (Table 1, #6).
An area connected to internal audit that is getting increased attention is the policies and procedures surrounding whistle-blowing complaints related to both the integrity of the financial reports and the financial reporting process. Research shows that whistle-blowing policies that are clearly articulated and protect employee confidentiality are needed to ensure a strong control environment and that the “tone at the top” needs to indicate strong support for addressing whistleblowing
complaints. The whistle-blowing program should be administered by internal audit or an independent third party with oversight from the audit committee, and its existence should be
widely communicated across the organization. The audit committee should review valid whistleblowing complaints and communicate to the auditor any complaints that relate to the financial
reporting process. Because large corporations can have a number of false or frivolous complaints from employees, the internal audit function or an independent third party, where appropriate,
should screen these complaints and ensure that only meritorious ones are brought to the attention of the audit committee. In addition, the auditor should review such complaints and also evaluate the effectiveness of policies and procedures surrounding the whistle-blowing program.