IIA training and events

'Positive validation'

BT

The EQA not only provided us with the positive validation that we required, we also received some very helpful suggestions and insight into other practices which we are aiming to deploy. 

Grant Harrison
Head of Internal Audit Operations

'Clear development plan'

Vanquis Bank

Every head of internal audit should do this. I came away with a clear development plan and assurance of conformity to the standards - plus a fired up audit team!

Ian Whybrow
VP Internal Audit

External quality assessment

What is an EQA?

An external quality assessment, or EQA, evaluates conformance with the International Professional Practices Framework (IPPF), the Code of Ethics, Public Standards (PSIAS), The Internal Code of Practice (for private and third sectors), and the Internal Audit Financial Services Code of Practice.

The assessment includes an evaluation of whether internal auditors apply the Code of Ethics. The assessment will also include conformance with the financial services code and the public sector standards (PSIAS) if you operate in these sectors.


Why do you need an EQA?

Five reasons why you need an EQA:

  1. To adhere to standards
  2. To provide independent assurance
  3. To raise the profile of internal audit activity within your organisation
  4. To benchmark your activities against best practice
  5. To improve the performance of your internal audit function

Why choose us?

Top reasons why you should work with us and what we offer:

  1. Standard setting: As advocates of the IIA standards, we’re ideally placed to support you in conducting EQA reviews
  2. Independence: We are independent of any other organisation and because we set the standards, we truly understand them.
  3. Flexibility: Our highly qualified and experienced reviewers deliver bespoke reviews to match your requirements.
  4. Objective: We have no vested interest beyond promoting and developing the profession.
  5. Transparency: We take an open, pragmatic, and collaborative approach to discussing ideas.

Read a summary of EQAs undertaken by us in 2020 – 2021 and discover why internal audit performance matters.


How are EQAs carried out?

Through a five-stage structured approach that assesses the performance of internal audit in line with best practices standards and procedures.

The five-stage process is as follows:

  1. Evaluate the effectiveness of the delivery of internal audit
  2. Evaluate the delivery of internal audit
  3. Examine internal audit working papers from assignments completed
  4. Meet and discuss internal audit performance with key stakeholders and staff
  5. Aggregate evaluations and discuss conclusions

Below is a more detailed example example of how the EQA process works (click thumbnail to enlarge image).


Which service is right for you?

Remote readiness assessment

In response to the need for virtual working, CAEs can opt for a remote health check in advance of a full EQA. We use established, secure technology for video conferencing and file sharing. After a high-level assessment, the reviewer provides feedback on the readiness of the function for an EQA and, where appropriate, suggests immediate actions to avoid non-conformance.

On-site readiness assessment

Preparation for a full EQA, with a high-level evaluation of the foundations and attributes of the internal audit activity to highlight potential conformance risks. The reviewer will also offer guidance on how to begin to address any identified issues and improve effectiveness.

Full EQA

Our EQA reviewers will provide a comprehensive assessment that involves surveys and interviews with a range of stakeholders including the CAE, internal audit staff, audit committee chair and members and internal audit customers. This also includes a detailed examination of the internal audit approach and methodology leading to the completion of an independent report which is presented to the audit committee. We adopt a collaborative approach to deliver the best outcome for the organisation, the internal audit activity and the profession.

Validated self-assessment

Evaluation of a self-assessment carried out by the CAE. We will review evidence and conduct interviews with senior management and the chair of the audit committee. A free self-assessment checklist is available to members.

Follow up review

We will assess your implementation of the EQA action plan and document the progress you have made since the review.


Book an EQA or find out more

Drop our Professional Services Manager, Kevin Grimwood, an email with any questions you have or to request a quote. His email address is Kevin.grimwood@iia.org.uk.


Further reading

Here are some useful benchmarking documents and materials: