Chief Audit Executives Research Articles

Evaluating Corporate Governance: Guiding Principles and Calls for Future Research

SYNOPSIS Prior research finds that companies’ evaluation of corporate governance is often piecemeal and symbolic, leaving companies vulnerable to systematic risks associated with governance failures. In this paper, we use interview data from 29 chief audit executives (CAEs) from publicly traded companies in the U.S. to propose guiding principles for how companies can formally evaluate their overall internal corporate governance systems. Our guiding principles can be adapted for a variety of governance-related objectives and leverage existing frameworks. We conclude by offering suggestions for future research. JEL Classifications: G34; M42.

The Preference for Competent Chief Audit Executives in Family Firms: Mitigating Agency Issues with Nonfamily Executives

The Preference for Competent Chief Audit Executives in Family Firms: Mitigating Agency Issues with Nonfamily Executives

Key drivers of cybersecurity audit effectiveness: A neo‐institutional perspective

The aim of this paper is to analyse which factors explain the effectiveness of internal audit in providing assurance about cybersecurity risk management. On the basis of neo‐institutional theory, we hypothesize that coercive (cybersecurity regulation), normative (professionalization of internal auditors and Boards) and mimetic forces (outsourcing of cyber security assurance services) positively contribute to cybersecurity audit (CSA) effectiveness. As these forces do not come about in an interest free model, we study the role of and the interaction with other actors who shape the CSA practices—Boards and security experts. We hypothesize that Board's support to CSA and the level of internal auditors' cooperation with the first and the second line of defence positively affect CSA effectiveness. To test our hypothesis, we conducted a survey involving IT auditors and Chief Audit Executives from various industries, organizations of different sizes and countries. We examined the hypothesized relationships in a series of regression analyses. We find that normative forces (professionalization of the internal auditors and Boards' competences), Board's support to CSA and cooperation between the internal audit function (IAF) and the first two line of defence significantly explain the CSA effectiveness. We find no support for the effect of regulation as a coercive force and outsourcing as a mimetic force. We discuss potential reasons for our findings and their implications. The paper is an original analysis that advances our understanding of key drivers of CSA effectiveness and their relationships.

Development of a Framework of Key Internal Control and Governance Principles for Robotic Process Automation (RPA)

ABSTRACT Although robotic process automation (RPA) usage is growing rapidly in accounting, concerns are emerging regarding the internal controls and overall governance structure surrounding RPA. To help address these concerns, we use a design science research approach and work with a Fortune 500 company to develop an RPA governance framework. The framework consists of four governance areas and 14 control requirements, which help maximize the benefits and minimize the risks associated with the use of RPA. We validate that the framework is useful and generalizable to many organizations by presenting the framework to and subsequently interviewing and surveying 86 professionals at different organizations, including internal and external auditors, chief audit executives at several multinational corporations, academics, accounting and finance professionals, and other RPA stakeholders. Their feedback suggests the framework is successful in achieving its objectives.

Can nudging with descriptive norms help internal auditors stop runaway information systems projects?

AbstractAlthough internal auditors are expected to play an important role in corporate governance, they are not always effective in bringing their message to management’s attention when they observe that a risky course of action is being taken that could harm the organization. When information systems projects go awry, for example, internal auditors often struggle to get managers to listen to their warnings. Instead, managers may turn a deaf ear to the auditor’s warnings. In this paper, we build on the idea that internal auditors can follow an approach that combines two elements to reduce this so-called deaf effect: (1) the auditor can apply communication techniques to more effectively deliver the message, and (2) the internal auditor can develop a relationship with the manager such that the auditor is viewed as a ‘partner’ rather than an ‘opponent.’Following a mixed method approach, we examined how ‘nudging with a descriptive norm’ as a communication technique could help internal auditors to reduce the deaf effect and how this can be understood in the context of the auditor-manager relationship (AMR). We conducted two experiments showing consistent evidence that both (1) nudging with a descriptive norm and (2) AMR, had significant indirect effects on the deaf effect that were mediated through perceived social norms. A complementary series of ten interviews with Chief Audit Executives shed further light on how internal auditors could apply ‘nudging with a descriptive norm’ as a communication technique, and what should be considered, including the auditor-manager relationship. Implications for both internal audit research and practice are discussed.

INTERNAL AUDITORS AS CHANGE AGENTS: WHAT A DIFFERENCE A YEAR MAKES!

It was evidenced in a multiple-case study that the pattern of interaction between Chief Audit Executives and Senior Management is a key determinant of Internal Audit effectiveness. There are notable differences among Internal Audit Functions. The effectiveness of Internal Audit is largely determined by “soft factors.” Therefore, where Senior Management, possibly pushed by the supervisory board or the owner himself, truly supports the Internal Audit Function and wants it to look at the right matters, its effectiveness will be fundamentally different from cases where the management and/or board is passive, and does not push the Internal Audit Function to become effective by unearthing matters they may not wish to be found. In the upper echelon of Management, interaction with the chief stakeholder/s typically happens frequently, in a timely manner, and the communication is geared toward problem-solving. The relationship is strongly based on shared goals, shared knowledge, and mutual respect. At the other end of this spectrum, interaction with the chief stakeholder/s happens in-frequently, is typically delayed, and the communication is rather geared toward finger-pointing. In this context, functional goals prevail, knowledge is preferably exclusive, and relations can be impaired by disrespect. This article provides conceptual and practical insights into features within the more immediate control of the Chief Audit Executives, helping or hindering Internal Audit effectiveness. Self-perception and external perception can differ greatly. Positioning and communication are instrumental when identifying successful Internal Audit Functions; these make a fundamental difference as to whether the Internal Audit Function is positioned as police, servant, consultant, doctor or change agent. Practical insights then demonstrate what a difference a year makes. Guided by the change agent, the more effective Internal Audit Function can prove also with hard data that there are fewer overdue findings, that reports are delivered more swiftly, and quantum leaps of productivity can be achieved.

A Study of Diversity and Performance in Internal Audit Teams: Insights from Chief Audit Executives

ABSTRACT Given heterogeneous findings on how diversity impacts performance, we investigate diversity in internal audit teams. Using responses from 302 chief audit executives, we analyze demographic and cognitive diversity’s effects on perceived internal audit performance. Our metrics go beyond gender diversity to include nationality and education. National diversity gains importance with the increasing internationalization of companies and the global focus of internal auditing. Our findings highlight that gender diversity is conducive to team performance, whereas a skewed gender composition may impede it. We find that national and educational diversity might enhance perceived performance. However, our results indicate that in certain configurations, such as gender-uniform groups, perceived performance may be higher, revealing a complex relation between our measures for diversity and perceived performance. Our findings reveal diversity may induce biases to exclude minority groups, such that teams do not integrate additional perspectives to improve decision-making and offset the expected benefits of diversity. Data Availability: The data that support the findings of this study are available from the authors upon request.

Internal auditing's role in preventing and detecting fraud: An empirical analysis

Internal auditing plays a pivotal role in preventing and detecting fraudulent activities. However, the orientation and role of internal auditing in dealing with fraud risk can vary significantly across different companies. This study examines the relationship between the internal audit function (IAF) and fraud, providing new insights into the current practices of internal auditing. Using a survey dataset comprising responses from 275 Chief Audit Executives across Germany, Switzerland and Austria, we investigate factors that correlate with an increased propensity for IAFs to engage in fraud prevention and detection. Our findings suggest that a robust corporate governance environment significantly influences the extent to which the IAF is involved in preventing and detecting fraud. Shedding light on the positioning of internal auditing between management and the audit committee with respect to fraud, our results show that increased IAF involvement with management positively affects the level of activities to prevent and detect fraud, while increased IAF involvement with the audit committee has the opposite effect. Furthermore, we find that the propensity of IAFs to engage in fraud prevention and detection increases when the IAF applies technology‐based auditing techniques for risk identification. Our results have implications for building appropriate protection against the steadily increasing risk of fraud within organizations, while holistically addressing the ambiguity regarding the responsibility for preventing and detecting fraud.

The effect of the internal audit function’s perceived assurance versus advisory purpose on the external auditor’s reliance decision

PurposeThis study aims to examine the extent to which external auditors (EAs) use the work of the internal audit function (IAF) based on the purpose of its primary activities. The authors rely on attribution theory, which suggests that individuals search for meaning when an event occurs. In this setting, the authors explore how the overall (assurance vs advisory) or specific (e.g. risk management and evaluating internal controls) focus of IAF activities influences perceived EA reliance on the IAF’s work.Design/methodology/approachThe authors first explore the research question with data extracted from a broad, longitudinal survey conducted triennially by the national chapters of the Institute of Internal Auditors in Austria, Germany and Switzerland. The data includes responses from 2014, 2017 and 2020 administrations of the survey. The authors conduct a parallel survey with practicing EAs attending two training sessions of a European office of a global network firm. Hypotheses were tested using ordered logistic regression.FindingsAmong the chief audit executive (CAE) participants, the authors observe that a balanced or primarily assurance-related purpose of the IAF, relative to a primarily advisory-related purpose, is associated with higher perceived EA reliance. The authors observe similar perceptions of the extent of reliance among the EA participants.Originality/valueWith a unique data set of practicing internal auditors from three countries, coupled with a sample of EAs, to the best of the authors’ knowledge, this study is the first to examine differences in EA reliance across the IAF’s primary roles. The study relies on data from three European countries, which differs from prior EA reliance literature with a largely North American focus. Further, comparison between perceptions of EAs and CAEs is a novel approach and this paper’s findings suggest that perceptions of CAEs could be a reliable proxy for EA-intended behavior.

The involvement of internal audit in environmental, social, and governance practices and risks: Stakeholders' salience and insights from audit committees and chief executive officers

We conducted 31 interviews with audit committee (AC) members, chief executive officers (CEOs), and chief audit executives (CAEs) to investigate the role of the internal audit function (IAF) in environmental, social, and governance (ESG) processes and related risks. We find that multiple possible combinations of the maturity of companies' ESG practices and CAE's perception of the IAF stakeholders' salience drive the type of IAF's involvement in ESG. In ESG‐mature companies with more salient ACs, the IAF provides assurance over ESG practices, ESG reporting, and reputation risks related to ESG, and it focuses on the governance dimension of ESG. When the CEO is perceived as more salient, the type of IAF's involvement includes both assurance over ESG controls in the supply chain and consulting on ESG activities. In contrast, in low ESG maturity companies with more salient AC, the IAF's role is limited to providing assurance over internal controls established to comply with environmental, health, and safety legal requirements, and prevent managers' unethical behavior. Finally, we discuss the implications for the IAF's ability to add value to the organization. We contribute to the underexplored research area of IAF's involvement in ESG practices and related risk.

The Moderating Effect of Audit Committee Meetings on The Relationship Between Internal Auditors’ Attributes and Financial Sustainability

The study aimed to establish the moderating effect of audit committee meetings on the relationship between internal auditors’ attributes and financial sustainability of municipalities. The study used census balanced panel data design and survey approach. The primary data was collected through 621 structured questionnaires distributed to chief audit executives and board of directors and audit committee chairpersons in 207 out of the 260 municipalities. The secondary data was collected from the Auditor General’s report. The study used panel data comprising both cross section and time series. The study sampled observations for a five-year period (from 2016 to 2020) with 1035 observations for 207 municipalities. Data collected were analysed using partial least square-structural equation modelling. The findings indicated that audit committee meetings, internal auditor independence, internal audit size with the exception of internal auditor competence, have direct significant influence on financial sustainability. However, audit committee meetings failed to significantly moderate the relationship between internal auditors’ attributes and financial sustainability.

Do Chief Audit Executives Able to Influence Real Earnings Management Practices? Evidence from Indonesia

Purpose : This study aims to investigate the relationship between financial expertise and tenure of the Chief Audit Executive [CAE] on real earnings management [REM] practices
 Method : This study uses a sample of 797 observations from companies in the manufacturing sector in Indonesia during the period 2012 – 2019. For data analysis, regression of feasible generalized least squares was used. Data related to financial expertise and tenure of CAE were manually collected from the annual report and financial data was obtained from Thomson-Reuters Database. 
 Findings : The results of this study indicate that CAE with better financial expertise is associated with lower REM. Conversely, this study also indicates that CAE tenure has an association with higher REM. This result is robust by using an alternative REM measurement. By breaking down the indicators of CAE’s financial expertise, namely CAE’s certification, experience in financial positions within/inside the company or outside the company, the results show that CAE certification has the largest effect on REM.
 Novelty : This study contributes to the real earnings management and internal audit literature by demonstrating the importance of attributes possessed by CAEs as leaders of the internal audit function in mitigating REM practices.
 Keywords : Chief Audit Executive, Financial Expertise, Tenure, Real Earnings Management

Does Internal Audit Quality Improve Firm Performance? The Moderating Effect of Chief Audit Executive Gender

This study aims to investigate the association between the quality of the Internal Audit Function (IAF) and firm performance and to examine whether the gender of the Chief Audit Executive (CAE) affects this relationship. Based on a sample of 75 Tunisian-listed companies from 2015 to 2019, the authors use GLS regression methods to analyze the data. The results show that internal audit quality has a positive and significant relationship with firm performance proxied by Tobin's Q. There is also evidence that the presence of a female CAE positively moderates the relationship between internal audit quality and firm performance. This study provides useful insights to regulatory authorities concerning the role of women in the internal audit function in improving the firm's financial performance. Our study is the first to examine the moderating effect of CAE gender on the relationship between internal audit quality and firm performance in the Tunisian context.

CORPORATE SOCIAL RESPONSIBILITY DISCLOSURE AND VALUE OF LISTED OIL AND GAS COMPANIES IN NIGERIA: THE MODERATING EFFECT OF FOREIGN OWNERSHIP

This study examines the moderating effect of foreign ownership on the relationship between corporate social responsibility disclosure and the value of listed oil and gas companies in Nigeria. This study adopted an explanatory research design to achieve this objective using secondary data collected from annual reports and accounts of the sampled companies for four years (2018-2021). The study employs multiple regression using panel-corrected standard error (PCSE) to analyze data for the study. Findings indicate that corporate social responsibility disclosure has a positive significant impact on firm value. Results also revealed that foreign ownership has a positive but insignificant impact on firm value. Furthermore, on the interaction effect of foreign ownership on the relationship between corporate social responsibility disclosure and firm value, the result indicates that foreign ownership has moderated the relationship between corporate social responsibility disclosure and the value of listed oil and gas companies in Nigeria by strengthening the existing relationship. The findings of this study encourage more investment from foreign investors to increase the disclosure of CSR to enhance the value of listed oil and gas companies in Nigeria. Finally, the study recommends that the management of listed oil and gas companies should diversify to attract more foreign investors to improve the value of their companies.

CEO power, audit committee effectiveness and earnings quality

PurposeThe purpose of this study is to establish the relationship between chief executive officer (CEO) power, audit committee effectiveness and earnings quality in regulated firms in Uganda.Design/methodology/approachThe authors employed cross-sectional and correlational research designs, based on a sample of 136 regulated firms in Uganda. Data were collected using a questionnaire survey from Chief Finance Officers and Chief Audit Executives. Data were analyzed using a Statistical Package for Social Sciences and Partial Least Squares Structural Equation Modeling.FindingsResults indicate that CEO power causes negative variances in earnings quality. The results also reveal that audit committee effectiveness positively relates relatively similarly with earnings quality. In addition, CEO power and audit committee effectiveness are negative and significantly related. The results further indicate that CEO power and earnings quality are mediated by audit committee effectiveness.Research limitations/implicationsCEO power creates an opaque accounting environment which may leave the stakeholders unable to evaluate the true economic reality of the firm. Audit committee effectiveness is an important enabler for reporting high-quality earnings even in the presence of a powerful CEO.Originality/valueThis study contributes toward a methodological stance of using perceptions to understand earnings quality in regulated firms in Uganda. This is probably the first study that has specifically explored earnings quality using only the fundamental qualitative characteristics of accounting information (as proxies) as enshrined in the Conceptual Framework for Financial Reporting 2018 particularly in Uganda since Her adoption of International Financial Reporting Standards in 1998. Second, the indirect effect of audit committee effectiveness and CEO power is tested.

Role of quality determinants of the internal audit function in corporate governance effectiveness. Senior management support as moderator: Evidence from Yemeni commercial banks

The purpose of this study was to determine if senior management support (SMSI) in Yemeni commercial banks mediates the association between internal audit function (IAF) quality characteristics and improved corporate governance effectiveness (CGE). Internal auditors, heads of internal audit, chairmen and participants in audit committees, CEOs, and financial management of Yemeni commercial banks were given a list of questions to answer. 158 full lists were obtained to evaluate after distributing the survey. For data analysis and hypothesis testing in this work, Smart PLS 3 was used. The study findings demonstrate a substantial relationship between CGE and IAF competence and due professional care (CPCI), IAF independence and objectivity (INOI), and IAF professional ethics (PEI). The outcomes of the study also demonstrate that there is no relationship between CGE and chief audit executive (CAE) Leadership Style (CLS). In terms of the moderate variable’s influence, the findings revealed that SMSI positively changes the link between CLS, CPCI, and corporate governance effectiveness. SMSI, on the other hand, has no influence on the link between INOI, PEI, and the efficacy of corporate governance. The findings add to the knowledge on IAF factors affecting the efficacy of CG and the role of SMSI in changing this relationship in developing countries such as Yemen. AcknowledgmentThe authors extend their appreciation to the deanship of scientific research at King Khalid University for funding this work through large groups project under grant number (RGP.2/189/44).

Relational contracting theory and internal audit: Chief audit executives' perspectives on creating and strengthening trust by building credibility and clarity

Using the lens of relational contracting, we examine internal auditors' efforts in building a relationship of trust with management within the context of operational audits. We gain insights into the day‐to‐day practices of internal auditors by interviewing 28 chief audit executives of internal audit departments across Australia and find that internal auditors undertake numerous measures to demonstrate credibility and provide clarity on their intentions in an attempt to gain managements' respect and confidence. However, we also find that some of the measures auditors undertake in a defensive corporate culture support the notion of ‘trust begets trust’. Consequently, such measures may not only assist in establishing a relational contract with management but also highlight the potential risks to internal auditor independence.

The Impact of Audit Technology on Audit Task Outcomes: Evidence for Technology‐Based Audit Techniques*

ABSTRACTAs audit technology becomes more widespread, practice and academia are raising concerns about the costs and benefits of these technologies. We examine how internal auditors use technology‐based audit techniques (TBATs) and how TBATs impact the efficiency and effectiveness of their audits. We use two surveys and interviews of individual auditors and chief audit executives (CAE) to examine their perceptions of TBATs. Auditors perceive TBATs as beneficial. Specifically, an increase in the use of TBATs is associated with completing more audits, finding more risk factors, providing more recommendations, and decreasing audit days. However, CAEs also perceive TBATs to be costly. An increase in the use of TBATs is associated with an increase in the size of the internal audit function. Finally, interviews with CAEs suggest that TBATs are not used more often because of difficulties in quantifying their benefits, observing their benefits in a timely manner, and hiring auditors with appropriate skills. Overall, TBATs stand to increase the efficiency and effectiveness of audit tasks, but auditors struggle to quantify their net cost‐benefit tradeoff. Our findings validate the issues raised by both proponents and opponents of audit technologies and help provide empirical data to inform their decision‐making process regarding the future of these tools. Additionally, our study prompts several avenues for future research that can help inform regulators, practitioners, and researchers on how these technologies are impacting the auditing profession.

When Does the Internal Audit Function Enhance Audit Committee Effectiveness?

ABSTRACTI examine whether audit committees (ACs) improve financial reporting reliability by utilizing an internal audit function (IAF) as a resource and use semistructured interviews with chief audit executives and AC chairs to develop an understanding of the nature of AC-IAF relations. Using AC charters, I measure AC interaction with IAFs, finding improvement in financial reporting reliability for firms that introduce a new IAF under a New York Stock Exchange (NYSE) mandate. This improvement is limited to firms with significant interaction between ACs and new IAFs. Using detailed hand-coded data, I investigate the different kinds of interactions between ACs and IAFs, finding evidence of the importance of private meetings to review the IAF's scope, findings, and recommendations. The value of the IAF as a resource to the AC is greater when the AC ensures free and open communication, promotes IAF independence, and stands in greater ex ante need of monitoring assistance.JEL Classifications: G39; M40; M41.

INTERNAL AUDITOR CHARACTERISTICS AND FINANCIAL REPORTING QUALITY: EVIDENCE FROM BANGLADESH

This study aims to examine the relationship between internal auditor characteristics and financial reporting quality in the context of the banking sector in Bangladesh. To achieve this objective, this study used a quantitative research methodology by using a questionnaire survey. Data were collected (495 respondents from 45 banks) from the internal auditors of banking companies in Bangladesh which cover 78% of the population. This study uses five important characteristics of internal auditors as exogenous variables such as auditors’ independence, auditor proficiency, professional qualification, auditors’ experiences, and the leadership style of the chief audit executive. SmartPls-4 is used as statistical software to determine the relationship between exogenous and endogenous constructs. Findings indicate that professional qualification has the highest positive significant impact on financial reporting quality. Results also revealed that other characteristics like au auditors’ independence, auditor proficiency, and auditors’ experiences has also positive significant effects on financial reporting quality. However, the leadership style of the chief audit executive has no positive significant impact on financial reporting quality. The findings of this study encourage the level of understanding of the internal auditors, regulators, top management, policy maker of the organization, investors, and other stakeholders regarding the quality of financial reporting of banking sectors in the perspective of an emerging economy.