The Integrated Information Technology Audit in Internal Audit: Correlates of Internal Audit’s IT/ICT Strategy

• In Event: AIS and Auditing

Abstract

This study uses the responses of 2935 chief audit executives (CAEs) to investigate the characteristics that influence the Internal Audit Function’s (IAF’s) choice of an integrated Information Technology/Information and Communication Technology (IT/ICT) audit strategy. We use previously unexplored responses from the large scale Global Internal Audit Common Body of Knowledge (CBOK 2010) database from the Institute of Internal Auditors Research Foundation (IIARF) to examine the relationship between an integrated IT/ICT audit strategy and test variables related to IAF characteristics, IAF strategy, CAE characteristics, and organizational characteristics; and find that organizational characteristics such as the location of practice and individual CAE characteristics such as professional certification are the most influential in determining the selection of an integrated IT audit strategy. Examining the interaction between professional certifications, we also find that CAE’s with two or more professional certifications are more likely to implement an integrated IT audit strategy. However, we do not find significant results for independent variables related to external audit reliance/assistance. Results should be of interest to CAEs, as well as IAF stakeholders such as boards, senior managers, and external auditors.

Authors

• Joy M Gray, Bentley University

• Mohammad J Abdolmohammadi, Bentley University

• Scott R Boss, Bentley University

• Gerrit Sarens, Universite Catholiqué de Louvain