{"schema_version":"ICEQC_NEWS_ARTICLE_V1","id":"iceqc-news-ace15c95d7b347a2","slug":"2017-01-24-monitoring-exceptions-in-internal-audit","language":"en","publication_status":"READY_FOR_IMPORT","publication_date":"2017-01-24","last_modified_date":"2017-01-24","title":"Monitoring exceptions in internal audit","summary":"Describes how improvement in monitoring exceptions in internal audit can be planned, measured and maintained through clear responsibility and follow-up evidence.","category":{"code":"QUALITY_IMPROVEMENT_METHODS","label":"Quality Improvement Methods"},"article_type":"Quality improvement method","publisher":"International Council for Education Quality Certification (ICEQC)","jurisdictional_scope":"International","historical_reference_basis":"Independent assurance within education providers","reference_authority":"Relevant public authorities and official international sources","sections":[{"heading":null,"paragraphs":["In 2017, consideration of exceptions in internal audit must take account of the independent assurance within education providers and the responsibilities it places before education systems. A decision concerning the issue under review should recognise that improvement should begin with a defined problem, a credible account of its causes and a measure capable of showing whether the response has worked.","Risk assessment of the issue under review should give particular attention to material risks omitted from reporting, conflicts not identified, and corrective action closed without verification. A provider should also consider governing bodies receiving activity data instead of outcome evidence and authority assigned without accountability."]},{"heading":"Improvement objective and baseline","paragraphs":["A proper review of exceptions in internal audit should establish the intended outcome before selecting controls or indicators. For the issue under review, effectiveness should be judged against an agreed outcome and reference period, not against completion of activities alone. In relation to monitoring exceptions in internal audit, a chosen approach should be justified against its context, with departures and review points under documented control.","The historical reference basis is the independent assurance within education providers. Its relevance to the improvement objective should be assessed against the affected jurisdiction, learner population and form of provision. The international development warrants attention, but a consequential conclusion still requires current, attributable and representative evidence for the affected scope.","A focused examination of the improvement objective requires a clear analytical discipline. A decision concerning the practice should recognise that the subject should be examined as a connected system of policy, people, resources, decisions and evidence. Transfer points should be tested because responsibility and information may be lost between otherwise sound functions."],"bullets":["Verify corrective action independently.","Assign decision authority explicitly, identifying the accountable function and affected scope.","Define information required for oversight.","Test management assurance.","Separate incompatible responsibilities."]},{"heading":"Controls and accountable action","paragraphs":["Interpretation of exceptions in internal audit should avoid two errors: treating a formal commitment as proof of effect, and treating one adverse case as proof that every part of the system has failed. For the intervention, governance structures do not provide assurance merely because committees exist. In relation to monitoring exceptions in internal audit, membership, information quality, challenge, decisions and follow-through determine whether oversight is effective. A decision concerning the improvement objective should recognise that correcting an individual record does not establish that the process which produced the error has been corrected.","Relevant evidence for the practice will normally include risk and assurance plans, defined delegations and reserved decisions, independent review records, corrective-action verification, and governing-body papers and decisions. The conclusion should rely on evidence whose date, source and coverage are sufficient for the decision. Conflicting records require reconciliation before a complete assurance conclusion is reached.","The assurance record for the issue under review should retain the date of the evidence, the source responsible for it, the scope examined and the version of any instrument or definition applied. This enables later review to separate substantive change from correction, reclassification or expanded coverage. The evidential history should preserve conclusions that were operative when a material decision was made."]},{"heading":"Evidence of effect","paragraphs":["Implementation of exceptions in internal audit can be tested without imposing unnecessary reporting. A competent examination of the matter should map the complete process, identify the intended result and responsible authority at each stage, and test normal cases together with exceptions. Review should establish the reach of the condition before determining the corrective response. Existing records may be used if reliable and relevant, but data collected for another purpose may not answer the assurance question.","Improvement of the issue under review should proceed through controlled tests where risk permits."],"bullets":["What action is required by the finding?","What outcome is intended?","Who controls each stage?","Where do exceptions occur?","Which evidence establishes operation?"]},{"heading":"Sustaining improvement","paragraphs":["The system and institutional dimensions of exceptions in internal audit should be considered together. A decision concerning the improvement objective should recognise that governing bodies should receive sufficient, reliable and timely information to oversee education quality, learner protection and material institutional risk. Neither public oversight nor provider control removes the responsibilities assigned to the other level.","For the practice, governing bodies should receive a concise account of the intended result, affected scope, principal risks, evidence limitations and unresolved exceptions. Closure requires evidence that the condition has changed; completion of planned activity is not sufficient.","The present development should inform review of the intervention, with attention to the relationship between commitment, implementation and demonstrated outcome. Institutional improvement and public confidence both depend on transparent responsibility and credible evidence."]}],"word_count":744,"content_hash":"sha256-04b8843714d5b8432406fdc528a67cbbb19e5a52afd2bf7f8ec5be40f2620248","seo_keywords":["monitoring exceptions in internal audit","education quality improvement","education quality","ICEQC"],"schema_type":"TechArticle"}