Internal audit independence concerns the auditor’s relationship to the work being evaluated. Objectivity concerns the ability to judge evidence fairly. Both matter: a different department name does not eliminate every conflict, and extensive technical knowledge does not automatically make an assignment unsuitable.
The internal audit guide places these considerations alongside competence and programme planning. The practical arrangements below illustrate ways to support credible evaluation; they are not a mandatory organisational chart for every business.
Identify the actual conflict
Consider whether the proposed auditor designed, performed, approved or manages the activity under review. Ask whether the outcome could affect their own performance assessment, financial interests or previous advice. Familiarity and pressure from management can also influence judgement.
A person who implemented a new approval workflow may be well placed to explain its design. Asking that same person to independently conclude that the workflow is effective raises a different issue. Technical contribution and evaluation responsibility can be separated.
Conflicts are not limited to direct ownership. A senior manager’s expectation of a clean report can influence an auditor from another function. Evaluate the circumstances rather than relying only on job titles.
Match independence with competence
An auditor who has no connection to the process but cannot understand its requirements may provide weak assurance. The organisation needs both sufficient capability and an appropriate relationship to the work.
Possible arrangements include cross-functional auditors, paired assignments, technical support and external assistance. A technical expert can help explain specialist evidence while the auditor retains responsibility for evaluating it against criteria.
Do not use a training certificate as the sole test of competence. Observation, report review and relevant experience can help show whether the person can plan, collect evidence, recognise limitations and communicate supported conclusions.
Use proportionate arrangements in small organisations
Small teams may have overlapping responsibilities. This makes conflict management more deliberate, not irrelevant. One option is to arrange reciprocal audits between suitable functions or obtain external support for activities that cannot be evaluated objectively within the team.
Consider whether a reciprocal arrangement creates its own pressure to avoid findings. Agree criteria, reporting access and evidence review so that the exchange does not become an informal agreement to approve each other’s work.
| Potential conflict | Possible response |
|---|---|
| Auditor operates the process | Assign another competent evaluator |
| Specialist designed a control | Use expertise for explanation with independent evaluation |
| Management pressures the outcome | Provide a reporting route and review the evidence |
| Few internal resources exist | Consider external or cross-functional assistance |
These options require judgement. Merely recording a conflict without addressing its effect is not necessarily sufficient.
Protect evidence-based judgement during the audit
Auditors should remain open to evidence that changes an initial view. Objectivity includes correcting an inaccurate finding, acknowledging uncertainty and distinguishing a preferred method from an actual requirement.
Discuss factual accuracy with the process owner. This can resolve misunderstood dates, records or responsibilities. It should not become negotiation over whether an inconvenient fact will be reported.
Avoid taking ownership of the solution while evaluating the problem. An auditor can explain the criterion and evidence, but prescribing the exact corrective action may compromise later judgement about whether that advice worked.
Give the programme appropriate reporting access
Findings need to reach people who can act. If a process owner can suppress every adverse report about their own operation, the organisation may receive an incomplete picture. Establish reporting and escalation arrangements suited to the organisation’s structure.
A review of report quality can test whether conclusions follow from evidence. It should not remove justified findings merely because they are uncomfortable. Preserve consequential revisions and the reasons for them through controlled records.
Performance incentives also deserve attention. Rewarding auditors for zero findings, or demanding a fixed finding quota, can distort judgement. Evaluate the relevance and reliability of the work rather than treating the number of findings as the definition of success.
Apply the same care to follow-up
The person who implemented an action can provide evidence of completion. Where the consequence warrants it, another suitable person should evaluate the evidence supporting effectiveness. The organisation’s arrangements should address the risk of self-approval.
The follow-up article explains why completion and effectiveness are different decisions. An action may be correctly installed but fail under the conditions that caused the original problem.
Review assignments as responsibilities change. A previously independent auditor may become the process owner after a reorganisation. Credible internal auditing relies on ongoing attention to conflicts, capability and reporting, with decisions that can be explained through the actual circumstances rather than a formal label alone.
External assistance also requires scrutiny. A consultant who recently designed the entire system may face the same self-review problem as an employee assessing their own process. Define the assignment and consider alternative review arrangements where that conflict would undermine confidence in the conclusions.