Independence and Objectivity: Different Safeguards

An internal audit function needs room to challenge. Each auditor also needs the discipline to evaluate evidence fairly. Independence and objectivity support the same purpose, but they need different safeguards.

A fictional organisation’s first audit function

The organisation appoints a chief audit executive, or CAE, and hires two auditors. Its draft reporting arrangement allows the finance director to prevent significant audit matters from reaching the board. Separately, a new auditor transferred from accounts payable six months ago is assigned to assure the same process they previously managed.

Both arrangements threaten credible assurance. Here, “board” means the applicable governing oversight body, including an appropriately delegated committee where relevant. Changing only the organisation chart would leave the second issue unresolved. Asking people to be fair would leave the first issue unresolved.

Independence: the function’s position and ability to act

Ask whether internal audit can carry out its mandate and communicate important matters without inappropriate interference. Reporting relationships, access to oversight and protection of scope matter.

In this case the organisation should establish clear board oversight, direct CAE access to the board and an escalation route for unresolved restrictions. The charter should make those arrangements clear. A finance executive should not be able to suppress an audit conclusion simply because it is uncomfortable.

Appropriate management fact-checking and administrative support can coexist with protected audit escalation. The problem in this case is a veto over significant matters, not every management review of a draft.

The organisational safeguard concerns the conditions around the work. It cannot be replaced by confidence that the current director is supportive.

Objectivity: the judgement applied to the work

Ask whether the person assessing the evidence has a conflict, prior responsibility or other pressure that could influence the conclusion. The transferred auditor may know the payables process very well. That knowledge does not remove the risk of evaluating their own earlier decisions.

The IIA’s Standard 2.2 treats assurance over an auditor’s own recent responsibilities as an objectivity concern; it specifies a 12-month look-back for the presumption of impairment. The six-month transfer falls inside that period. Reaching twelve months later would not automatically remove other conflicts or biases. Disclosing the history is necessary context, but it does not make the assignment acceptable by itself.

A practical response is to assign the payables assurance to a competent auditor who did not own the activity. Document the conflict assessment and the safeguard. Do not turn the former manager into the hidden author of the conclusion while another person merely signs it.

Choose a safeguard that addresses the mechanism

For blocked escalation, redesign the reporting and oversight arrangement. For self-review, change the assignment and assess conflicts. Supervision, review and disclosure support those decisions; they should not be used as labels that conceal an unresolved impairment.

The IIA’s Standard 7.1 addresses the function’s organisational independence, including the CAE’s confirmation to the board at least annually. This is not the same task as asking each auditor about conflicts before an engagement.

One safeguard cannot do every job

The structure-versus-judgement distinction is a teaching aid, not an absolute boundary. Governance arrangements can affect individual objectivity, and some roles can threaten both.

Board access does not prove an auditor has approached contradictory evidence fairly. A careful auditor cannot personally repair a reporting arrangement that lets a manager block important messages. The organisation needs both arrangements and their use in practice.

The test is concrete. Can the CAE escalate a restriction? Can the engagement team explain a significant judgement using evidence, including evidence that challenges its first view? Does someone check whether a previously declared conflict has changed?

Try it yourself

A second proposed auditor has a close personal relationship with the manager responsible for the area. Identify the potential impairment, information you would ask for and a safeguard that addresses the specific situation.

Self-check: do not assume actual bias without evidence. Assess the relationship and its appearance, disclose it through the audit function’s methodology and decide whether reassignment or another suitable response is needed. An organisation chart alone does not answer the question.

The boundary

This fictional case illustrates professional principles, not a complete independence assessment or a legal opinion. Governance structures and applicable requirements differ. The relevant IIA standards should be read in full for a real engagement, and safeguards must be evaluated for how they operate, not only how they are documented.

The practical question is whether the arrangement protects the function and the judgement protects the work.