{"schema_version":"ICEQC_NEWS_ARTICLE_V1","id":"iceqc-news-64e41e6212b3d2ff","slug":"2017-07-24-internal-audit-oversight-and-accountability-priorities","language":"en","publication_status":"READY_FOR_IMPORT","publication_date":"2017-07-24","last_modified_date":"2017-07-24","title":"Internal audit: oversight and accountability priorities","summary":"Assesses the policy significance of internal audit: oversight and accountability priorities, distinguishing legal effect, implementation responsibility and public-interest risk.","category":{"code":"POLICY_AND_REGULATORY_INTERPRETATION","label":"Industry Policy and Regional Regulatory Interpretation"},"article_type":"Policy and regulatory analysis","publisher":"International Council for Education Quality Certification (ICEQC)","jurisdictional_scope":"International","historical_reference_basis":"Independent assurance within education providers","reference_authority":"Relevant public authorities and official international sources","sections":[{"heading":null,"paragraphs":["The independent assurance within education providers provides the immediate context for internal audit. Oversight of the implementation question should reflect the principle that this matter should be read as a question of public administration and learner protection, not as a statement that one institutional model is suitable in every jurisdiction. Attention is directed to decisions with material consequences for learners, institutional responsibility and educational resources. In relation to internal audit, the appropriate administrative form will depend on the jurisdiction and the allocation of lawful responsibility.","The stated reference is the independent assurance within education providers. Application to the affected arrangements depends on evidence from the relevant jurisdiction or institution.","Implementation of the relevant measure should be organised around a decision that can be tested. In reviewing the issue, implementation should be assessed against observable effects on access, learning, safety and fair treatment, rather than against the existence of a policy statement alone. Resources and activity should be reconciled with the operating evidence and result for which the responsible function is accountable."]},{"heading":"Status and scope","paragraphs":["The central objective should not be obscured by the form of the administrative response. A decision concerning internal audit should recognise that governing bodies should receive sufficient, reliable and timely information to oversee education quality, learner protection and material institutional risk. The existence of an approved measure or completed activity is not evidence of educational effect. Assurance should address actual effect and provide a means of correcting disadvantage that the arrangement did not intend.","A focused examination of the policy matter requires a clear analytical discipline. Oversight of the issue should reflect the principle that materiality should be judged by the possible effect on learning, safety, rights, recognition, public resources and the reliability of a consequential decision. An imprecise scope or measure may produce a credible-looking record that does not answer the relevant decision question.","Failure in relation to the policy matter may arise even where the stated policy is reasonable. Material concerns include conflicts not identified, corrective action closed without verification, material risks omitted from reporting, and management assurance accepted without testing. Materiality depends on the consequence and extent of an exception, not only on how often it appears in sampled records.","Assurance of the affected arrangements should draw on more than one form of evidence. Useful records include defined delegations and reserved decisions, risk and assurance plans, governing-body papers and decisions, corrective-action verification, and independent review records. Evidence of effectiveness should represent the declared scope, including adverse and exceptional cases."]},{"heading":"Public-interest implications","paragraphs":["The review method for internal audit should be reproducible. In reviewing the relevant measure, responsible bodies should define escalation thresholds before reviewing cases, consider severity, reach, duration, recurrence and detectability, and record the reason for the final classification. Documentation should be sufficient to reconstruct the judgement without relying on unrecorded explanation.","The implementation record for the relevant measure should identify the instrument being applied, its status, the competent authority, the affected jurisdiction and the action expected of each responsible body. The record should differentiate legal duties, public policy commitments and institutional action. If implementation proceeds in stages, the record should identify each effective date, temporary safeguard and review decision.","Records relating to the implementation question should preserve both the conclusion and its limits. The correction record should state what the new evidence changes and which earlier conclusions or decisions require review. In relation to internal audit, where reliance has occurred, correction may require review of affected decisions as well as amendment of published information."]},{"heading":"Institutional responsibilities","paragraphs":["Interpretation of internal audit should avoid two errors: treating a formal commitment as proof of effect, and treating one adverse case as proof that every part of the system has failed. A decision concerning the relevant measure should recognise that governance structures do not provide assurance merely because committees exist. Membership, information quality, challenge, decisions and follow-through determine whether oversight is effective. Oversight of the relevant measure should reflect the principle that a policy direction should not be presented as a uniform legal obligation where national implementation differs. Providers remain responsible for identifying the requirements that apply to their own activities.","Accountability for the relevant measure should follow decision-making authority. Relevant evidence should reach the body authorised to commit resources, amend policy or accept residual risk, and its judgement should be recorded.","Progress on internal audit is not the amount of policy or documentation produced."]}],"word_count":722,"content_hash":"sha256-18c33119eaf7d6f728a09efc49769e366c178fa7edec385986e5cdd8501733f1","seo_keywords":["internal audit","education policy and regulation","education quality","ICEQC"],"schema_type":"AnalysisNewsArticle"}
