9.2.4 - Internal audit : Ensuring auditor independence

ISO 37001

 The ISO 37001 Anti-Bribery Management Systems standard, instituted by the International Organization for Standardization in 2016, directs organizations globally in fortifying their anti-corruption frameworks. This standard is pivotal for both private and public entities of any size, focusing on active prevention, detection, and management of bribery risks.

How to Respond to This Question  

Organizations need to establish clear and robust mechanisms to ensure the independence and objectivity of auditors when conducting audits of their anti-corruption management systems. Here’s how organizations can ensure this critical aspect:

-   Selection of Auditors  : Select auditors who are not only qualified but also have no direct ties to the departments or functions they are auditing. This can include internal auditors from separate departments or external third-party auditors.

-   Structural Independence  : Position the audit function at a high level within the organization to prevent influence or interference from the functions being audited.

-   Reporting Lines  : Ensure that auditors report to a level within the organization that allows them to perform their duties freely, such as directly to the board or audit committee.

-   Rotation of Auditors  : Implement policies to rotate auditors periodically to avoid familiarity and potential conflicts of interest.

-   Audit Committee Oversight  : Have an independent audit committee oversee the audit process, including the selection and performance of auditors.

For more detailed guidance, organizations can refer to international standards like [ISO 37001](https://www.iso.org/standard/iso37001.html) on anti-bribery management systems, which provide frameworks for maintaining auditor independence.

Why It’s Important  

The independence of auditors is crucial for several reasons:

-   Credibility  : Independent audits enhance the credibility of the findings, both internally and externally.

-   Objectivity  : Independence reduces the risk of bias in audit activities and decisions, leading to more objective results.

-   Transparency  : It fosters transparency, making it clear to all stakeholders that the organization is committed to unbiased evaluation and compliance.

-   Effectiveness  : Independent audits are more likely to identify real and potential issues within the anti-corruption management system, leading to effective remedies and improvements.

The [Institute of Internal Auditors](https://www.theiia.org) provides further insights into best practices for maintaining auditor independence in various operational contexts.

Examples  

-   Example A  :

 -   Context  : A multinational corporation implements a rule that auditors must be rotated every three years to maintain independence.

 -   Action  : The company uses both internal and external auditors to review its anti-corruption measures.

 -   Outcome  : The rotation and use of external auditors prevent conflicts of interest and bring fresh perspectives to the audit process.

-   Example B  :

 -   Context  : A government agency ensures its auditors report directly to an independent audit committee.

 -   Action  : The audit committee reviews and approves all audit plans and findings without interference from the agency's management.

 -   Outcome  : The agency successfully identifies and mitigates several compliance risks, reinforcing trust in its operations.

For practical application of these principles, organizations can explore resources available at [Transparency International](https://www.transparency.org), which offers guidelines and tools for setting up independent audit functions in various sectors.