Effectiveness of cybersecurity audit

The aim of this paper is to analyze the effectiveness of internal audit of cybersecurity. We developed a Cybersecurity Audit Index composed of three dimensions – planning, performing and reporting – to address this question. We hypothesize that cybersecurity audit effectiveness is positively related to cyber risk management maturity and negatively to the probability of a successful cyber attack. We tested our hypotheses in a survey with auditors and Chief Audit Executives from various countries and industries. We found that Cybersecurity Audit Index scores significantly vary, with a mean of 58 on a scale from 0 to 100. While the planning and performing phases are strongly and positively correlated, they are less strongly related to reporting about cyber risk management effectiveness to the Board of Directors. As predicted, the Cybersecurity Audit Index is positively associated with maturity, but contrary to expectations, it is not related to the probability of a successful cyber attack. This is the first paper that comprehensively measures the effectiveness of cybersecurity audit and its effects on cyber risk management.     

The influence of litigation risk and internal audit source on reliance decisions

External auditor reliance on the work of internal auditors in an integrated audit of the financial statements and internal control is an important audit planning procedure that can impact audit efficiency and effectiveness. The purpose of this study is to examine how perceived auditor litigation risk and internal audit source affect external auditors' reliance decisions in an integrated audit environment under varying levels of risk of material misstatement. In an experimental study using 89 practicing Big 4 auditors, this study finds that auditors who perceive low litigation risk from placing reliance on the work of internal auditors will rely more on outsourced internal auditors than in-house internal auditors. The results also show that auditors' reliance decisions are sensitive to the level of account risk consistent with the risk-based approach to the integrated audit encouraged by the PCAOB.     

External auditors’ reliance on internal audit: the impact of sourcing arrangements and consulting activities

This study examines the impact of internal audit outsourcing and involvement in consulting on external auditors’ reliance on the work of internal audit. We test whether these factors influence reliance on internal audit work already undertaken and the use of internal auditors as assistants, distinguishing between control evaluation and substantive testing. Involvement in consulting impacts reliance on work undertaken and the use of internal auditors as assistants for control evaluation. External auditors make greater use of internal auditors as assistants for substantive testing when internal audit is provided in‐house. Overall, external auditors use internal audit more for control evaluation tasks.     

Internal audit,alternative internal audit structures and the level of misappropriation of assets fraud

In recent years, the importance of good corporate governance has received significant public and regulatory attention. A crucial part of an entity's corporate governance is its internal audit function. At the same time, there has been significant public concern about the level of fraud within organizations. The purpose of this study is to assess whether organizations with an internal audit function are more likely to detect and self‐report fraud than those without. In this study, we use a unique self‐reported measure of misappropriation of assets fraud for the first time. The fraud data are from the 2004 KPMG Fraud Survey, which reported fraud from 491 organizations in the private and public sector across Australia and New Zealand. The internal audit data are from a separate mail survey sent to the respondents of the KPMG Fraud Survey. We find that organizations with an internal audit function are more likely than those without such a function to detect and self‐report fraud. Furthermore, organizations that rely solely on outsourcing for their internal audit function are less likely to detect and self‐report fraud than those that undertake at least part of their internal audit function themselves. These findings suggest that internal audit adds value through improving the control and monitoring environment within organizations to detect and self‐report fraud. These results also suggest that keeping the internal audit function within the organization is more effective than completely outsourcing that function.     

Factors affecting the internal audit effectiveness: A survey of the Saudi public sector

This study assesses factors influencing internal audit effectiveness (IAE) in Saudi Arabia. Data were obtained from 203 managers and 239 internal auditors from 79 Saudi Arabian public sector organizations. Multiple regression analysis examines the association between IAE and five principal factors. Results suggest that management support for IAE drives perceived effectiveness of the internal audit function from both management's and the internal auditors’ perspective. Management support is linked to hiring trained and experienced staff, providing sufficient resources, enhancing the relationship with external auditors, and having an independent internal audit department. Saudi Arabia is representative of many developed and developing environments, and its recent tradition of governance and audit is mirrored in countries worldwide. Moreover, its specific cultural traditions involving clan and tribal allegiances, and pervasive and core religious beliefs, characterize the GCC countries, the Arab World generally, and indeed, many other developing countries, irrespective of wealth. Thus, links between management support and internal audit effectiveness are likely generalizable beyond the Saudi public sector context.     

Relation between external audit fees, audit committee characteristics and internal audit

This study examines whether the existence of an audit committee, audit committee characteristics and the use of internal audit are associated with higher external audit fees. Higher audit fees imply increased audit testing and higher audit quality. We find that the existence of an audit committee, more frequent committee meetings and increased use of internal audit are related to higher audit fees. The expertise of audit committee members is associated with higher audit fees when meeting frequency and independence are low. These findings are consistent with an increased demand for higher quality auditing by audit committees, and by firms that make greater use of internal audit.     

医院外包业务的内部控制优化

医院外包业务的规模及费用逐年递增,内部控制不力造成外包业务效益低下已成为目前较为突出的问题。鉴于承包方选择阶段是外包业务开展的重要环节,该阶段有效的内部控制能合理保证外包业务的顺利开展。针对外包业务承包方选择阶段存在的风险,从内部控制的角度进行原因分析,通过引用层次分析法,量化综合评标法的评价过程等达到内部控制优化的目的。     

Internal audit: A comfort provider to the audit committee

This study, based upon four Belgian case studies, provides insights on (1) what drives the audit committee to look for the support of the internal audit function; and (2) what makes the internal audit function an expert at providing comfort to the audit committee [Pentland, B.T., 1993. Getting comfortable with the numbers: auditing and the micro-production of macro-order. Accounting, Organizations and Society 18 (7–8), 605–620; Carrington, T., Catasús, B., 2007. Auditing stories about discomfort: becoming comfortable with comfort theory. European Accounting Review 16 (1), 35–58]. We found that audit committees seek comfort, with respect to the control environment and internal controls, two areas in which they confront considerable discomfort. Besides the internal audit function's traditional assurance role, its involvement in improving internal controls provides a significant level of comfort to the audit committee. Internal auditors' unique knowledge about risk management and internal control, combined with appropriate inter-personal and behavioural skills, enables them to provide this comfort. Besides, their internal position, their familiarity with the company, and their position close to people across the company facilitate internal auditors being a major source of comfort for the audit committee. Formal audit reports and presentations, together with informal contacts, seem to be important symbols of comfort [Power, M., 1997. The Audit Society: Rituals of Verification. Oxford University Press, Oxford]. In addition, we found that the overall level of comfort to the audit committee can be enhanced via collaboration between internal and external auditing (the so-called ‘joint audit approach’).     

Public sector audit history in Britain and Australia

The introduction of an independent public sector audit function was a critical element in the nineteenth century constitutional reforms of parliamentary and government accountability and created an essential precedent for current practice. By examining the extent of scholarly research on public sector audit history, findings reveal considerable research examined the teleological development of public sector audit and the modern history in a New Public Management context. However, there has been very little published regarding the complex rationales around the origins, development and importance of independent public sector audit notwithstanding that without an appreciation of these precedents it becomes very difficult to protect the Westminster‐based system of democratic government.     

现代企业制度下我国内部审计的建制构想

内部审计是我国社会主义审计体系的重要组成部分。如何完善我国内部审计制度 ,使之不断满足建立现代企业制度的要求 ?如何强化行业监管 ,遏制企业腐败 ,确保国有资产及其权益不受侵犯 ?要解决目前我国内部审计所存在的问题 ,就需要在市场经济的大环境下 ,基于现代企业制度 ,对内部审计加以重新认识和定位 ,并对我国内部审计的建制提出构想。     

Perceived auditor independence and audit firm fees

Regulations requiring the disclosure of fees paid to an auditor for audit and non-audit services (NAS) respond to concerns that such payments are potentially detrimental to auditors' actual or perceived independence. Although empirical studies have failed to produce unequivocal evidence of detrimental effects on auditor independence, the actions of regulators, audit firms and companies are consistent with the belief that economic bonding generated by fees can impair perceived levels of auditor independence.

Using a sample of UK companies over a six year period to March 2006, we study perceived impairment of auditor independence by examining the relationship between levels of total relative fees (combined audit and NAS fees payable by a company to its auditor as a proportion of the audit firm's UK income) and market value. This paper's methodological innovation is its use of a valuation framework in this setting. A further contribution lies in dropping the assumption of linearity found in most prior empirical studies. We provide evidence that shareholders perceive a threat to auditor independence only at high total relative fee levels. At lower levels, total relative fees are positively related to company value. These results suggest that disclosure of NAS and audit fees are of relevance to investors, as is information about auditor income. Our results support the view that regulation by reference to the threshold at which total relative fees are perceived negatively is more consistent with investor preferences than prohibition of the supply of NAS by auditors to their audit clients.     

Effects of audit committee chair characteristics on auditor choice,audit fee and audit quality

We investigate whether the characteristics of audit committee (AC) chairs are associated with decisions about auditor choice, audit fees and audit quality. Using hand-collected Australian data, firms with AC chairs who have longer tenure and multiple AC memberships across several boards are found to be more likely to choose Big 4 and/or industry specialist auditors, pay higher audit fees and have lower discretionary accruals. Those AC chairs with higher business qualifications are more likely to hire a Big 4 auditor, pay higher audit fees and have lower discretionary accruals, while AC chairs with professional qualifications are more likely to hire a Big 4 and/or industry specialist auditor. In contrast, firms with AC chairs who are executive directors are less likely to hire a Big 4 auditor and have higher discretionary accruals. Our findings contribute to the literature by documenting that various characteristics of AC chairs are important for enhancement of auditor selection and audit quality.     

Internal control risk and audit fees: Evidence from China

This study examines the association between internal control risk and audit fees under the voluntary adopting regime of the Basic Standard of Enterprise Internal Control in China. We find that audit fees are positively related to disclosed internal control weaknesses (ICWs). In particular, they are significantly associated with non-financial reporting-related, but not with financial reporting-related, ICWs.Our results also indicate that voluntary assurance in internal control reports can mitigate higher audit fees associated with ICWs. Our study provides timely evidence relating to the debate on whether the scope of internal control should be expanded to non-financial reporting-related areas.     

Internal governance structures and earnings management

This paper investigates the role of a firm's internal governance structure in constraining earnings management. It is hypothesized that the practice of earnings management is systematically related to the strength of internal corporate governance mechanisms, including the board of directors, the audit committee, the internal audit function and the choice of external auditor. Based on a broad cross‐sectional sample of 434 listed Australian firms, for the financial year ending in 2000, a majority of non‐executive directors on the board and on the audit committee are found to be significantly associated with a lower likelihood of earnings management, as measured by the absolute level of discretionary accruals. The voluntary establishment of an internal audit function and the choice of auditor are not significantly related to a reduction in the level of discretionary accruals. Our additional analysis, using small increases in earnings as a measure of earnings management, also found a negative association between this measure and the existence of an audit committee.     

The effect of audit market structure on audit quality and audit pricing in the private-client market

This study examines whether audit market structure affects audit quality and audit pricing. We analyze two conceptually distinct dimensions of market structure: audit market concentration and client mobility. Focusing on the private-client segment of the Belgian audit market, we compare the pricing and quality effects of market structure between the segment of small and medium-sized (SME) clients and the segment of large clients to test how audit complexity moderates such effects. We find that market concentration impairs price and quality competition in the SME-client segment. Market concentration is unrelated to audit quality in the large-client segment, where we argue that concentration is endogenous to audit complexity. Furthermore, we find that client mobility stimulates price competition in both segments but improves audit quality only in the large-client segment. We interpret our findings as evidence that (a) audit market concentration impairs competition especially when audits have low complexity and that (b) the large-client market segment, characterized by higher audit complexity and higher market concentration, can also be price and quality competitive if clients are sufficiently mobile, and change auditors relatively frequently.     

Audit office size,audit quality and audit pricing: evidence from small- and medium-sized enterprises

Using Swedish data, we investigate how audit quality and audit pricing vary with audit firm and office size. In contrast to prior studies, we use disciplinary sanctions issued against auditors not meeting the quality requirement as the measure of audit quality. We find no significant differences in the likelihood of sanctions between Big 4 audit firms and the fifth and sixth largest audit firms in Sweden (Grant Thornton and BDO). We refer to these collectively as ‘Top 6’. However, we find that the probabilities of warnings or exclusions from the profession are much higher for non-Top 6 auditors in Sweden than for Top 6 auditors. Furthermore, we find a strong negative association between the likelihood of sanctions and audit office size for non-Top 6 auditors. This association is insignificant for Top 6 audit firms. Audit fees follow a similar pattern and indicate that larger audit firms and offices put in more effort or have greater expertise. These results suggest that audit quality is differentiated in the private segment market. However, contrary to prior studies, our results suggest that the important dimensions are Top 6 versus non-Top 6 and the office size of non-Top 6 audit firms.     

Accounting and the management of outsourcing: An empirical study in the hotel industry

Interview and survey data have been collected to study the nature and antecedents of accounting systems involved in hotel outsourcing decision-making and control. It has been found that there is considerable cross-hotel variation in the degree of accounting system involvement in outsourcing management. Performance and whether outsourcing decisions are made in the context of a long-term strategic agenda, appear to be variables affecting both the nature of accounting involvement and the degree of accounting sophistication in hotel outsourcing management. Hotel quality was also a significant factor affecting the degree of accounting sophistication in hotel outsourcing. It appears that accounting appraisal of outsourcing proposals rarely include long-term oriented sophisticated techniques such as the discounting of future cash flows. It is conjectured that this may be because outsourcing decisions are not conducted in the context of the formal capital budgeting process.     

Auditor specialization, perceived audit quality, and audit fees in the local government audit market

Prior governmental research implies a positive relation between auditor specialization and audit quality, but the effect of specialization on audit fees is mixed. However, no single governmental study investigates the effect of auditor specialization on both audit quality and audit fees. Also, prior studies focus on either large- or small audit firms and often employ indirect proxies for audit quality. We study the effects of auditor specialization on perceived audit quality and audit fees. Our data represent both Big 5 and smaller audit firms and include three market-based measures of specialization. We survey 241 Florida local government finance directors and find that specialization is positively associated with perceived audit quality but not with audit fees. We also find that Big 5 auditors, often used as a proxy for higher audit quality in prior research, are not uniformly associated with increased perceived audit quality but consistently charge higher audit fees. Our results confirm a relation between measures of audit firm specialization and audit quality and raise questions regarding audit firm size and audit quality in the municipal sector. Our findings suggest that engaging specialized auditors may be good policy for many local governments.     

Money laundering and audit fees

We investigate the association between state-level money laundering sentences and audit fees in the US. Money laundering measures a broad category of offenses involving financial transactions using funds or monetary instruments gained through criminal activities and tax evasion. We find that firms headquartered in US states with high rates of money laundering sentences pay more audit fees. Our results suggest that auditors incorporate, as a fee premium, the higher risks involved when clients operate in those states. Our result remains robust to alternative specifications of money laundering proxies, and to the inclusion of a number of firm-level and state-level control variables. We also conduct two-stage least squares and propensity score matching analysis to mitigate the endogeneity problem that might arise from omitted variables, reverse causality, or model misspecification problems.