An Understanding of the Differences between Internal and External Auditors in Obtaining Information About Internal Control Weaknesses

Abstract

The Institute of Internal Auditors argues that internal auditors often have a strong “employee” identity within their organization. While external auditors are concerned that this employee identity might negatively impact internal auditors’ objectivity, the IIA argues this identity can actually be beneficial as employees may be more willing to share sensitive and audit-relevant information with the internal auditor than they would with the external auditor. Through an experiment relying on the social identity and organizational silence literatures, I test the prediction that non-audit employees will identify more highly with the internal than the external auditor and they will thus, be willing to share more information about internal control weaknesses with the internal than the external auditor. Results support these predictions and also indicate the effect is stronger as the severity of the internal control weakness increases. Overall, this research informs external auditors and regulators about conditions under which the internal auditor may have an advantage over the external auditor in obtaining information that could help improve audit quality. It also informs managers about an important role played by their internal auditors that may result in increased quality of the internal control system while also potentially lowering audit fees.