# Internal Auditor (IA): Role and the Internal Auditing Process

![Internal Auditor (IA)](https://www.investopedia.com/thmb/t6ritwgRpQRm1RVuNVjZBjqAbv4=/1500x0/filters:no_upscale():max_bytes(150000):strip_icc()/Internal-Auditor-Final-75ee0c4674e74d2f9eded0e7cc832551.jpg)

*— Investopedia / Yurle Villegas*

> **Definition**
>
> An internal auditor is a company employee who oversees its financial controls and recordkeeping processes and is responsible for identifying any deficiencies in them.

## What Is an Internal Auditor (IA)?

An internal auditor (IA) evaluates a company's financial controls and record-keeping processes for accuracy, efficiency, and compliance with relevant laws and regulations. The internal auditor is a company employee whose job is to identify and correct any deficiencies in its financial recordkeeping before they are discovered in an external audit.

Companies are not required to employ an internal auditor but many do so that problems can be prevented or addressed quickly.

### Key Takeaways

*   An internal auditor works for the company but is tasked with providing independent and objective evaluations of its financial and operational activities and recommending corrective action as needed.
*   An external auditor is an independent professional hired by shareholders to examine the company's financial and operational activities.
*   If an external auditor finds issues or errors, the internal auditor implements the necessary changes.

## The Role of an Internal Auditor (IA)

The main job of an internal auditor (IA) is to identify problems and correct them before they are discovered during an external audit by an outside firm or regulatory agencies, such as the [Securities and Exchange Commission](https://www.investopedia.com/articles/investing/112914/understanding-sec.asp) (SEC). One of the roles of the SEC is to regulate how companies report their financial statements to help ensure that investors have access to all of the necessary information before investing.

An internal audit generally performs the three tasks outlined below.

*   Assess any risks and the internal controls within a company
*   Ensure that a company and its employees are in compliance with federal and state laws and regulations
*   Make suggestions as to what needs to be done to rectify a failed audit or issues that were identified as problematic during the audit

## Internal Auditing Process

To achieve this goal, [internal auditors](https://www.investopedia.com/articles/professionals/011116/internal-auditor-job-description-average-salary.asp) will typically perform a multitude of tasks, including examining financial statements, expense reports, [inventory](https://www.investopedia.com/terms/i/inventory.asp), financial data, budgeting and accounting practices, as well as creating [risk assessments](https://www.investopedia.com/terms/r/risk-assessment.asp) for each department. Detailed notes are taken, interviews with employees are conducted, work schedules are supervised, [physical assets](https://www.investopedia.com/terms/p/physicalasset.asp) are verified, and financial statements are scrutinized to eliminate potentially damaging errors or falsehoods and find ways to boost productivity.

Once an internal auditor has completed the examination, the findings are presented in a formal report. The audit report describes how the audit was done, what it discovered and, if necessary, suggestions for what improvements could be made. It is usually presented to senior executives at the company.

If changes are recommended, it's common for an internal auditor to be asked to complete a follow-up audit to determine how well the advised changes have been executed.

Properly managed [publicly traded companies](https://www.investopedia.com/terms/p/publiccompany.asp) also carry out internal audits to ensure that the company is complying with federal and state regulations, including those mandated by the SEC. However, companies must also ensure that their accounting practices follow the accounting guidelines as laid out by the [Generally Accepted Accounting Principles (GAAP).](https://www.investopedia.com/terms/g/gaap.asp)

## Requirements for Internal Auditors

The [Institute of Internal Auditors](https://www.investopedia.com/terms/i/institute-of-internal-auditors.asp) (IIA), established in 1941 and headquartered in Florida, is the international professional [organization that sets standards](https://www.investopedia.com/articles/professionals/120115/internal-auditor-career-path-qualifications.asp), guidance, best practices, and code of ethics for practitioners.

On its [website](https://na.theiia.org/standards-guidance/mandatory-guidance/pages/definition-of-internal-auditing.aspx), the IIA defines internal auditing as: “an independent, objective assurance and consulting activity designed to add value and improve an organization's operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of [risk management](https://www.investopedia.com/terms/r/riskmanagement.asp), [control](https://www.investopedia.com/terms/i/internalcontrols.asp), and governance processes.”

## Internal Auditor vs. External Auditor

Sometimes, the role of internal and [external auditors](https://www.investopedia.com/terms/i/independentauditor.asp) can be confused. The main difference between the two is that internal auditors (IA) work on behalf of company management. Internal auditors are hired by the company, while external auditors are appointed by a [shareholder](https://www.investopedia.com/terms/s/shareholder.asp) vote.

Internal auditors are employed to educate management and staff about how the business can function better. External auditors, on the other hand, have no such obligations. They are responsible for reviewing financial statements to ensure that they are accurate and conform to GAAP. Their findings are then reported back to shareholders, rather than management.

According to the Association of Certified Fraud Examiners, the role of the external auditor is to: “inspect clients’ accounting records and express an opinion as to whether financial statements are presented fairly in accordance with the applicable accounting standards of the entity, such as Generally Accepted Accounting Principles (GAAP) or [International Financial Reporting Standards](https://www.investopedia.com/terms/i/ifrs.asp) (IFRS). They must assert whether financial statements are free of material misstatement, whether due to error or fraud.” 

It is a legal requirement for all financial statements from public companies to be audited by a third-party accountant, in accordance with the [Securities Act of 1933](https://www.investopedia.com/terms/s/securitiesact1933.asp) and the [Securities Exchange Act of 1934](https://www.investopedia.com/terms/s/seact1934.asp). 

## Benefits of Hiring an IA

Many companies choose to employ an internal auditor, despite not being legally obligated to do so. Robust internal audits are viewed as a key way to correct issues quickly, maintain a good reputation, and prevent money from being wasted. Reports filed by internal auditors (IA) can help companies to prosper and operate at maximum efficiency. For this reason, many executives view them as a necessary expense.

The job of an internal auditor is essentially to help catch and fix issues before an external auditor has the chance to so do. For this reason, many executives view them as a necessary expense.

> **Article Sources**
>
> 1.  Institute of Internal Auditors. "[About the IIA](https://na.theiia.org/about-us/Pages/About-The-Institute-of-Internal-Auditors.aspx)."
>     
> 2.  Association of Certified Fraud Examiners. "[External Auditor](https://www.acfe.com/career-path-external-auditor.aspx)."
>     
> 3.  Government Publishing Office. "[Securities Exchange Act of 1934](https://www.govinfo.gov/content/pkg/COMPS-1885/pdf/COMPS-1885.pdf)," Page 91.
>     
> 4.  Government Publishing Office. "[Securities Act of 1933](https://www.govinfo.gov/content/pkg/COMPS-1884/pdf/COMPS-1884.pdf)," Page 72.
>     
> 5.  U.S. Securities and Exchange Commission. "[All About Auditors: What Investors Need to Know](https://www.sec.gov/reportspubs/investor-publications/investorpubsaboutauditorshtm.html)."