Northwind Logistics has just established its first internal audit function. The audit committee chair asks the newly appointed chief audit executive to state, in one sentence, what internal auditing is fundamentally there to achieve so the mandate can be finalised. Which statement best reflects the purpose of internal auditing under the Global Internal Audit Standards?
- ATo detect and investigate fraud on behalf of the board, taking the lead role whenever a suspected irregularity is reported anywhere within the organisation.
- BTo prepare and operate the organisation's system of internal controls so that management can rely on those controls when reporting to the board and to regulators.
- CTo guarantee that the organisation meets every financial target and that no material risk will ever crystallise during the coming reporting period.
- DTo strengthen the organisation's ability to create, protect, and sustain value by providing the board and senior management independent, risk-based, and objective assurance and advice. Correct
Why A is wrong: Fraud detection is tempting because auditors do consider fraud risk, but leading investigations is a management responsibility; internal audit coordinates and supports rather than owning the investigation, so this misstates the purpose.
Why B is wrong: Designing and operating controls is a first line management task; if internal audit owned it, the function could not independently assure it later, so this confuses the purpose with a management duty.
Why C is wrong: Guaranteeing outcomes overstates what assurance can offer and uses an absolute claim no function can honour, so it mischaracterises the purpose, which is about strengthening value, not eliminating all risk.
Why D is correct: This mirrors the Purpose of Internal Auditing in the Global Internal Audit Standards, framing value creation, protection, and sustaining alongside independent, risk-based, objective assurance and advice to the board and senior management.