Insight

Making the most of your nonprofit’s internal audit function

The key role of a not-for-profit’s internal auditors was once limited largely to testing financial and compliance controls and reporting their findings to the organization’s leadership. But today, with their cross-departmental perspective, internal audit staff (whether employees or outside consultants) can help anticipate and mitigate a variety of risks, improve processes — and even help evaluate your nonprofit’s strategies.

Core job

On its most basic level, the internal audit function provides independent assurance of compliance with a nonprofit’s internal controls and their effectiveness in mitigating financial and operational risk. Potential risks include fraud, insufficient funds to support programming and reputational damage.

Internal auditors start by identifying a nonprofit’s vulnerabilities and prioritizing them from high to low. Through testing and other methods, they then assess the effectiveness of internal controls. Auditors document their results in reports that include recommended improvements.

Internal auditors further evaluate compliance with laws, regulations and contracts. They follow up on management’s remediation actions to eliminate identified risks and assist external auditors, when applicable.

The effectiveness of the internal audit function hinges on auditor independence. Auditors should be independent from management and all areas they review to avoid bias or a conflict of interest. Auditors should report directly to the board of directors or its audit committee.

Expanded function

Although the internal audit function is often viewed mainly through the prism of compliance and internal controls, it has a lot to offer beyond risk assessments and audit plans. Savvy nonprofits have begun to tap internal audit for strategic purposes.

Auditors may serve as internal consultants, providing insights gathered while performing compliance and assessment work. For example, while reviewing invoices, internal auditors may discover a way to streamline invoice processing.

The internal audit function’s familiarity with the organization’s inner workings also affords it an unusual perspective for evaluating strategic opportunities. Does your nonprofit have a financial weakness that could undermine plans for continuing current programs or launching new ones? Your internal auditor probably knows the answer.

Ask for more

Increased public scrutiny of how nonprofits are governed and held accountable makes an effective internal audit function a must. But internal auditors can offer your nonprofit more than financial and compliance oversight. To ensure you’re making the most of this function, contact us.

© 2018

Related Insights

How can you build a golden nest egg if you’re self-employed? | estate planning cpa in hunt valley md | Weyrich, Cronin & Sorra

Estate & Wealth Transfer Planning

How can you build a golden nest egg if you’re self-employed?

If you own a small business with no employees (other than your spouse) and want to set up a retirement plan, consider a solo 401(k) plan. This…
Employers: In 2025, the Social Security wage base is going up | business consulting services in cecil county md | weyrich, cronin and sorra

Management Advisory Services & Business Consulting

Employers: In 2025, the Social Security wage base is going up

As we approach 2025, changes are coming to the Social Security wage base. The Social Security Administration recently announced that the wage…
Unlock your child’s potential by investing in a 529 plan | tax preparation in cecil county | Weyrich, Cronin & Sorra

Tax Prep, Planning & Strategy

Unlock your child’s potential by investing in a 529 plan

If you have a child or grandchild planning to attend college, you’ve probably heard about qualified tuition programs, also known as 529 plans.…

Connect with us

Use the form below to send us an email. WCS responds directly to all inquiries and general questions within 24 hours of posting.

This contact form is deactivated because you refused to accept Google reCaptcha service which is necessary to validate any messages sent by the form.