# Auditors could have unfettered access to internal business processes to avoid another Carillion Author: Pal Sinha, Barnali Author URL: https://financedigest.com/author/pal-sinha-barnali Published: 2019-08-14 Category: BUSINESS Category URL: https://financedigest.com/category/business Meta Title: New Internal Audit Code of Practice to Avert Corporate Disasters Meta Description: Learn how companies can prevent future corporate collapses like Carillion by providing internal auditors with unrestricted access and implementing the new URL: https://financedigest.com/auditors-could-have-unfettered-access-to-internal-business-processes-to-avoid-another-carillionhtml ![undefined](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/fd030518-1-1-1736839002146-compressed.jpg) According to the Chartered Institute of Internal Auditors (IIA), companies could avert another Carillion-style disaster by providing internal auditors with “unrestricted access” to the workings of their businesses. Auditors should also be allowed to attend all executive committee meetings, a new draft code from the IIA proposes. ![Anca Thomson](https://prod.superblogcdn.com/site_cuid_cm5qst7v3003gwirgwqtxn8i8/images/anca-450x318-1736839002120-compressed.jpg) Anca Thomson The new draft Internal Audit Code of Practice [seeks to “strengthen corporate governance” and so to reduce the risk](https://www.financedigest.com/risking-death-at-sea-rohingya-muslims-seek-safety-in-indonesia.html "Risking death at sea, Rohingya Muslims seek safety in Indonesia") of corporate collapses.The draft code will be the first comprehensive set of audit benchmarks for non-financial [services firms](https://www.financedigest.com/how-financial-services-firms-can-mitigate-against-their-top-data-security-threats.html "How Financial Services Firms Can Mitigate Against Their Top Data Security Threats"). It makes thirty recommendations to strengthen internal audit, including allowing auditors full access to senior meetings, a right to attend [board and executive](https://www.financedigest.com/fiat-republic-the-specialist-baas-platform-that-bridges-web3-and-banks-announces-the-appointment-of-two-industry-experts-as-non-executive-directors-to-the-board-of-its-dutch-subsidiary.html "Fiat Republic, the specialist BaaS platform that bridges web3 and banks, announces the appointment of two industry experts as Non-Executive Directors to the board of its Dutch subsidiary.") committee meetings, and full access to all key management information. The draft code has been published as part of a public consultation which will run until 11 October 2019.  Consulting widely on these proposed changes is a wise move. In order for the new code to become respected and used in practice, it must be practical and user-friendly. [Businesses and executive management,as well](https://www.financedigest.com/why-late-payments-are-hurting-your-customer-as-well-as-your-business.html "Why late payments are hurting your customer, as well as your business") as practising auditors and accountants should engage with this consultation to ensure that the IIA’s new code ultimately strikes the necessary balance between being effective, and yet not too draconian or overly prescriptive.  The IIA’s draft code is a necessary and welcome development, since strengthened corporate governance and [greater accountability will indeed reduce the risks](https://www.financedigest.com/brexit-the-risks-to-the-city-and-fintech-have-never-been-greater.html "BREXIT: THE RISKS TO THE CITY AND FINTECH HAVE NEVER BEEN GREATER") of future corporate collapses – and so help avoid the economic disruption and the devastation of livelihoods that these can entail. As the UK enters a period of significant [economic and political](https://www.financedigest.com/stocks-tumble-globally-on-raft-of-economic-political-worries.html "Stocks tumble globally on raft of economic, political worries") uncertainty, businesses would be wise to actively embrace such increased standards. The Carillion collapse evidently provided the fundamental motivation for the new draft code. Indeed, in his forward to the draft code, Brendan Nelson, Audit Committee Chair at BP and the IIA’s Practice Steering Committee Chair, specifically said that, “The collapse of Carillion has led to a [wide-ranging review of the UK’s corporate](https://www.financedigest.com/exclusive-wide-ranging-solarwinds-probe-sparks-fear-in-corporate-america.html "Exclusive: Wide-ranging SolarWinds probe sparks fear in Corporate America") governance framework, including the audit regime. This creates challenges for internal audit, but [equally it provides an opportunity to enhance](https://www.financedigest.com/boosting-gender-equality-in-tech-the-importance-of-mentorship-to-enhance-diversity.html "Boosting gender equality in tech: the importance of mentorship to enhance diversity") the role of the internal audit profession as a cornerstone of good corporate governance.” “That is why we are now responding to this challenge by consulting with relevant stakeholders – both inside and outside of the profession – on the development of an Internal Audit Code of Practice. This new Code aims to embed best practice and raise the bar right across the profession.” The Carillion debacle does indeed provide a recent and very clear reminder that no [business is too big](https://www.financedigest.com/how-china-became-big-business-for-twitter-from-blocking-to-blue-checks.html "How China became big business for Twitter, from blocking to blue checks") to fail. After all, in 2016, Carillion was the UK’s second largest construction company with [annual revenue](https://www.financedigest.com/xerox-shares-slide-as-annual-revenue-cash-flow-forecasts-take-a-hit.html "Xerox shares slide as annual revenue, cash flow forecasts take a hit") over £5 billion and 43,000 staff globally. It held public contracts to build Crossrail, HS2, hospitals, schools, roads and other [critical infrastructure](https://www.financedigest.com/hiding-in-plain-sight-finance-as-critical-national-infrastructure.html "Hiding in plain sight – Finance as Critical National Infrastructure"). It was responsible for maintaining railways, 50,000 military houses and half of the country’s prisons. Carillion’s 2016 annual accounts carried the now-ironic tagline: “Making tomorrow a better place”. By mid-2017, the company was issuing [profit warnings](https://www.financedigest.com/wh-smith-warns-on-2022-profit-due-to-slow-travel-recovery.html "WH Smith warns on 2022 profit due to slow travel recovery"). By January 2018 it collapsed completely, leaving [debts of £7 billion](https://www.financedigest.com/bankers-bet-billions-on-new-wave-of-debt-for-nature-deals.html "Bankers bet billions on new wave of debt-for-nature deals") in its wake. MPs blamed the “recklessness, hubris and greed” of Carillion’s directors for the debacle. A joint [report by two House of Commons select committees stated that “The chronic lack of accountability](https://www.financedigest.com/whatsapp-bans-2-4-million-indian-accounts-in-july-monthly-report.html "WhatsApp bans 2.4 million Indian accounts in July – monthly report") and professionalism now evident in Carillion’s governance were failures years in the making.” Carillion’s auditors, KMPG, also were sharply criticised, with one MP commenting that he would not trust the firm to audit the contents of his fridge. The Carillion collapse helped to highlight the importance of internal audit as a lynchpin in good corporate governance, since without high quality information, [business leaders](https://www.financedigest.com/business-leaders-flexibility-for-everyone-contributes-to-gender-equality-in-the-workplace-without-affecting-your-bottom-line.html "Business leaders: flexibility for everyone contributes to gender equality in the workplace, without affecting your bottom line") cannot make high quality decisions. In the wake of the Carillion collapse, the House of Commons joint committee recommended a wide-ranging overhaul of the UK’s systems of corporate accountability. The Financial Reporting Council’s revised Code of [Corporate](https://www.financedigest.com/9-issues-in-corporate-finance-and-strategies-to-overcome-them.html "9 Issues in Corporate Finance and Strategies to Overcome Them") Governance, issued in July 2018, was a modest first step in the right direction. The IIA’s draft [code represents a significant further step in improving standards](https://www.financedigest.com/medical-coding-market-is-driving-by-increasing-demand-for-standardized-billing-procedures-by-2031.html "Medical Coding Market is driving by Increasing demand for standardized billing procedures by 2031"). It takes inspiration from the IIA’s successful 2013 Financial [Services Code, which set standards for effective audit in the financial services sector](https://www.financedigest.com/how-communication-technology-can-help-relieve-pressure-on-staff-in-the-financial-services-sector.html "How communication technology can help relieve pressure on staff in the financial services sector "). The IIA’s 2013 Financial [Services Code significantly increased standards, as well as the standing and involvement of auditors in the leadership of financial services companies](https://www.financedigest.com/why-financial-services-companies-should-consider-rfps-in-their-digital-transformation-strategies.html "Why financial services companies should consider RFPs in their digital transformation strategies"). The IIA says that within two years of the 2013 code being adopted, the number of [Chief](https://www.financedigest.com/boohoo-says-exposure-to-sterling-plunge-is-limited-finance-chief.html "Boohoo says exposure to sterling plunge is limited – finance chief") Audit Executives attending Executive Committees in financial services companies increased from 48% to 84%. The IIA will hope that the new code will be similarly impactful, especially [since it is the first time](https://www.financedigest.com/sterling-slides-below-1-15-for-first-time-since-2020.html "Sterling slides below .15 for first time since 2020") that a comprehensive code will have been set out for internal audit benchmarks more broadly. The IIA’s continued ambition to increase the prominence and [standing of the audit](https://www.financedigest.com/kpmg-stands-by-audits-of-silicon-valley-bank-and-signature-bank-ft.html "KPMG stands by audits of Silicon Valley Bank and Signature Bank – FT") function is reflected in the draft code’s statement that, “The chief internal auditor should be at a senior enough level within the organisation to give him or her the appropriate standing, access and authority to challenge the executive.” A strong theme throughout the draft code is the [need for internal audit](https://www.financedigest.com/why-the-us-urgently-needs-media-compliance-auditing.html "Why the US urgently needs media compliance auditing") to be sufficiently independent of management in both thought and action. The draft code states that, “internal audit should [form](https://www.financedigest.com/how-to-form-an-llc-as-an-international-founder.html "How To Form An LLC As An International Founder") its own judgement on how best to segment the audit universe given the structure and risk profile of the organisation. It should take into account business strategy and should form an independent view of whether the key risks to the organisation have been identified, including [emerging and systemic risks](https://www.financedigest.com/emerging-risks-is-our-insurance-system-able-to-cope.html "Emerging risks: is our Insurance system able to cope?"), and assess how effectively these risks are being managed. Internal audit’s independent view should be informed, but not determined, by the views of management. In [setting out its priorities](https://www.financedigest.com/pm-rishi-sunak-sets-out-priorities-for-britain-responds-to-critics.html "PM Rishi Sunak sets out priorities for Britain, responds to critics") and deciding where to carry out more detailed work, internal audit should focus on the areas where it considers risks to be higher.” The principles-based draft code also sets out specific guidance relating to interaction with the businesses’ [risk management](https://www.financedigest.com/risk-management-redefined-navigating-post-covid-disruption.html "Risk Management redefined: navigating post-COVID disruption"), compliance and finance functions, and in relation to quality assurance. The benefits of the code’s principles based [approach is that the code is sets](https://www.financedigest.com/uks-finance-minister-sets-out-new-economic-approach-to-finance-bosses.html "UK’s finance minister sets out new economic approach to finance bosses") clear aims, but is not didactic as to how they should be achieved. [Businesses remain free choose the precise methods that works best for them in terms of how the code’s](https://www.financedigest.com/why-no-code-beats-custom-software-and-turnkey-solutions-for-business-automation.html "Why no-code beats custom software and turnkey solutions for business automation") fundamental objectives are to be met. However, while the draft code is clearly a step in the right direction, businesses should not see it as representing a new minimum standard. Instead,businesses should consider looking elsewhere to implement even higher standards, to better ensure their long-term sustainability. For example, other sectors may look to the financial [services industry](https://www.financedigest.com/hybrid-working-a-risk-or-opportunity-for-the-financial-services-industry-2.html "Hybrid working: a risk or opportunity for the financial services industry?"), which is tightly regulated, and has become more so since the 2008 financial crisis. From observing best practise there, [businesses can explore ways](https://www.financedigest.com/4-ways-small-businesses-can-save-money-while-outsourcing.html "4 Ways Small Businesses Can Save Money While Outsourcing") to implement more rigorous checks and measures. In this time of increasing [economic uncertainty](https://www.financedigest.com/why-a-liberated-cfo-and-fintech-solution-are-a-dream-partnership-for-navigating-economic-uncertainty.html "Why a liberated CFO and fintech solution are a dream partnership for navigating economic uncertainty"), companies can stay ahead of the curve by actively embracing higher standards. Instead of seeing increased transparency and higher standards of governance as a regulatory burden to be minimised, [businesses can instead regard higher standards as an important](https://www.financedigest.com/software-to-display-your-businesss-important-information.html "Software to Display Your Business’s Important Information") way of ensuring their long-term viability.  At the end of the day, embracing higher standards of transparency and governance is to the [benefit of all stakeholders in a business](https://www.financedigest.com/how-choosing-the-right-mtd-for-vat-software-can-maximise-business-benefits.html "How choosing the right MTD for VAT software can maximise business benefits"), including shareholders, employees and the wider community in which a business operates. **Anca Thomson is a solicitor at Excello Law** [**www.excellolaw.co.uk**](http://www.excellolaw.co.uk) --- This blog is powered by Superblog. Visit https://superblog.ai to know more. ---