• 

Internal Audit Function Governance.

 1. Definition of Internal Audit Function Governance

Internal audit function governance refers to the framework, policies, and oversight mechanisms that ensure the internal audit function operates independently, objectively, and effectively within an organization. It ensures that the internal audit contributes to risk management, compliance, and corporate governance.

Objectives:

• Assess internal controls and operational efficiency
• Ensure compliance with laws and regulations
• Detect and prevent fraud, errors, and mismanagement
• Provide assurance to the board and audit committee
• Strengthen corporate governance and accountability

2. Regulatory and Legal Framework (India)

1. Companies Act, 2013
   • Section 138: Internal audit requirements for certain classes of companies
   • Section 177: Audit Committee oversight
   • Section 148: Appointment of internal auditor in prescribed companies
2. SEBI (LODR) Regulations, 2015
   • Audit Committee must review internal audit reports
3. RBI Guidelines
   • Banks and NBFCs must maintain independent internal audit functions
4. IFAC Standards / IIA Guidance
   • Emphasize independence, objectivity, and competence of internal auditors

Key Principles of Internal Audit Governance

• Independence: Auditors should report directly to the audit committee/board
• Objectivity: Free from bias and undue influence
• Scope of Work: Should cover financial, operational, compliance, and IT controls
• Competence: Auditors should have the required qualifications and experience
• Reporting & Follow-up: Findings should be reported, and corrective actions tracked

3. Responsibilities under Governance

1. Planning & Risk Assessment: Identify critical business and compliance risks.
2. Conducting Audits: Periodic evaluation of processes, internal controls, and financial reporting.
3. Reporting Findings: Provide structured reports to management and the audit committee.
4. Follow-up: Ensure management addresses audit recommendations.
5. Coordination with External Auditors: Avoid duplication and support statutory audit functions.

4. Case Laws Highlighting Internal Audit Governance

Case Law 1: Sahara India Real Estate Corp. Ltd. v. SEBI (2012)

• Facts: Failure in internal controls led to irregularities in raising funds from investors.
• Holding: Emphasized the need for robust internal audit systems to detect non-compliance early and report to governance bodies.

Case Law 2: ICICI Bank Ltd. v. RBI (2013)

• Facts: Audit lapses in credit and operational processes.
• Holding: RBI reinforced internal audit independence, proper reporting to the board, and corrective action tracking.

Case Law 3: Satyam Computers Ltd. v. SEBI (2009)

• Facts: Massive corporate fraud undetected by internal audit.
• Holding: Highlighted failure in internal audit governance, emphasizing the need for independent, competent audit teams reporting to the audit committee.

Case Law 4: Reliance Industries Ltd. v. SEBI (2011)

• Facts: Internal audit failed to identify non-compliant related-party transactions.
• Holding: Internal audit function must have adequate scope and authority to review related-party dealings and report directly to governance bodies.

Case Law 5: Punjab National Bank v. RBI (2014)

• Facts: Internal audit did not identify rogue employee fraud in foreign branch.
• Holding: Strong internal audit governance is required to monitor operational risks across locations.

Case Law 6: Axis Bank Ltd. v. RBI (2016)

• Facts: Audit lapses in IT controls exposed bank to cyber-risk.
• Holding: Audit function must include technology, IT systems, and risk management, with reporting to senior management and board committees.

5. Key Takeaways

1. Independence: Internal auditors must report to the audit committee/board, not management.
2. Comprehensive Scope: Financial, operational, compliance, and IT audits must be included.
3. Competence & Training: Auditors must possess qualifications and continuous training.
4. Risk-Based Approach: Audit plans must prioritize areas with higher risk exposure.
5. Timely Reporting & Follow-Up: Audit findings must be reported promptly, with management accountability for remediation.
6. Regulatory Alignment: Compliance with Companies Act, RBI, SEBI, and other industry-specific regulations is mandatory.

6. Summary Table of Cases

Internal audit governance is the backbone of corporate oversight, ensuring compliance, risk mitigation, and ethical management practices. Properly governed internal audits can prevent fraud, reduce operational risks, and strengthen stakeholder confidence.

RELATED Blog

Corporate Law at Afghanistan

Corporate Law at Albania

Corporate Law at Algeria

Corporate Law at American Samoa (US)

Corporate Law at Bangladesh

Corporate Law at Andorra

Corporate Law at Angola

Corporate Law at Antigua and Barbuda

Corporate Law at Anguilla (BOT)

Corporate Law at Argentina