This indicator suggests that the organization’s ethics program might not be well-developed if the responsibility for communicating ethics compliance is decentralized to the level of employees' direct managers without broader oversight or structured programs. Effective ethics programs typically involve centralized communication strategies that ensure consistency and comprehensiveness across the organization.
Institute of Internal Auditors (IIA) - Guidance on Developing an Ethics ProgramQUESTION NO: 400
Which of the following is most likely to impair the internal audit activity's independence?
A. Undertaking audit work in an area where internal auditors lack the necessary skills.
B. Establishing an internal audit activity without documented policies and procedures.
C. Assigning compliance responsibilities to the chief audit executive.
D. Concluding that an internal control is effective without first obtaining evidence
Answer: C
Assigning compliance responsibilities to the chief audit executive (CAE) can impair the internal audit activity's independence. When the CAE has operational responsibilities, such as compliance, it may lead to a conflict of interest or self-review, both of which can compromise the independence required to objectively assess and report on the organization’s risks and controls.References: Institute of Internal Auditors (IIA) - International Standards for the Professional Practice of Internal Auditing, particularly those concerning independence and objectivity.
