According to IIA guidance, which of the following actions by the chief audit executive (CAE) best demonstrates the organizational independence of the internal audit activity?

Organizational independence is achieved when the chief audit executive (CAE) reports functionally to the board. According to the IIA's International Standards for the Professional Practice of Internal Auditing, this functional reporting relationship includes the board's approval of the internal audit budget and resource plan. By providing the budget directly to the board for approval, the CAE ensures that the internal audit activity has sufficient resources to execute its responsibilities without undue influence or interference from management. This action is a key safeguard for independence, as it prevents management from limiting the scope or effectiveness of internal audit work by controlling its funding.

A. The CAE seeks senior management approval of the internal audit charter This is incorrect. The charter must be approved by both senior management and the board. Relying solely on management approval would undermine, not demonstrate, independence.
B. The CAE obtains senior management's approval to hire staff This is an administrative, not a functional, reporting matter. While the CAE manages staffing, this day-to-day operational task does not best demonstrate the high-level organizational independence from management.
C. The CAE reports significant issues to the organization's CEO This is insufficient. To maintain independence, the CAE must have direct and unrestricted communication with the board, especially regarding significant issues and risks. Reporting only to the CEO is incomplete.

1. The Institute of Internal Auditors (IIA), International Professional Practices Framework (IPPF). International Standards for the Professional Practice of Internal Auditing (Standards), 2017.

Standard 1110 – Organizational Independence: "The chief audit executive must report to a level within the organization that allows the internal audit activity to fulfill its responsibilities."

Implementation Guide 1110: States that functional reporting to the board "typically involves the board: ... Approving the internal audit budget and resource plan." This directly supports option D as a key demonstration of independence. The guide also clarifies that administrative reporting to senior management includes "budgeting and human resources management," which shows why option B is a weaker example of independence.

2. The Institute of Internal Auditors (IIA), Practice Guide. Developing the Internal Audit Strategic Plan, July 2020.

Section: "Obtaining Approval of the Plan and Resources" (Page 11): "The CAE should present the internal audit strategic plan and related resource requirements to senior management and the board for review and approval... The board’s approval of the plan and the resources needed to execute it is a key element of the board’s oversight responsibilities and a safeguard of internal audit’s independence." This reinforces that board approval of resources (budget) is a critical aspect of independence.

3. Soh, D. S., & Martinov-Bennie, N. (2011). The internal audit function: Perceptions of internal audit roles, effectiveness and evaluation. Managerial Auditing Journal, 26(7), 605-622. https://doi.org/10.1108/02686901111153303

This academic article discusses the factors contributing to internal audit effectiveness, highlighting that a direct reporting line to the audit committee (a committee of the board) for matters including budget approval is crucial for ensuring independence from management. This aligns with the IIA guidance and supports the choice of option D.