Insight

Making the most of your nonprofit’s internal audit function

The key role of a not-for-profit’s internal auditors was once limited largely to testing financial and compliance controls and reporting their findings to the organization’s leadership. But today, with their cross-departmental perspective, internal audit staff (whether employees or outside consultants) can help anticipate and mitigate a variety of risks, improve processes — and even help evaluate your nonprofit’s strategies.

Core job

On its most basic level, the internal audit function provides independent assurance of compliance with a nonprofit’s internal controls and their effectiveness in mitigating financial and operational risk. Potential risks include fraud, insufficient funds to support programming and reputational damage.

Internal auditors start by identifying a nonprofit’s vulnerabilities and prioritizing them from high to low. Through testing and other methods, they then assess the effectiveness of internal controls. Auditors document their results in reports that include recommended improvements.

Internal auditors further evaluate compliance with laws, regulations and contracts. They follow up on management’s remediation actions to eliminate identified risks and assist external auditors, when applicable.

The effectiveness of the internal audit function hinges on auditor independence. Auditors should be independent from management and all areas they review to avoid bias or a conflict of interest. Auditors should report directly to the board of directors or its audit committee.

Expanded function

Although the internal audit function is often viewed mainly through the prism of compliance and internal controls, it has a lot to offer beyond risk assessments and audit plans. Savvy nonprofits have begun to tap internal audit for strategic purposes.

Auditors may serve as internal consultants, providing insights gathered while performing compliance and assessment work. For example, while reviewing invoices, internal auditors may discover a way to streamline invoice processing.

The internal audit function’s familiarity with the organization’s inner workings also affords it an unusual perspective for evaluating strategic opportunities. Does your nonprofit have a financial weakness that could undermine plans for continuing current programs or launching new ones? Your internal auditor probably knows the answer.

Ask for more

Increased public scrutiny of how nonprofits are governed and held accountable makes an effective internal audit function a must. But internal auditors can offer your nonprofit more than financial and compliance oversight. To ensure you’re making the most of this function, contact us.

© 2018

Related Insights

Reinforce your cybersecurity defenses regularly | business consulting services in hunt valley md | Weyrich, Cronin & Sorra

Management Advisory Services & Business Consulting

Reinforce your cybersecurity defenses regularly

If you’ve been in business for any amount of time, you probably don’t need anyone to tell you about the importance of cybersecurity. However,…
Providing fringe benefits to employees with no tax strings attached | tax accountants in baltimore city | Weyrich, Cronin & Sorra

Tax Prep, Planning & Strategy

Providing fringe benefits to employees with no tax strings attached

Businesses can provide benefits to employees that don’t cost them much or anything at all. However, in some cases, employees may have to pay…
Employers: In 2023, the Social Security wage base is going up | cpa in baltimore county md | Weyrich, Cronin & Sorra

Management Advisory Services & Business Consulting

Employers: In 2023, the Social Security wage base is going up

The Social Security Administration recently announced that the wage base for computing Social Security tax will increase to $160,200 for 2023…

Connect with us

Use the form below to send us an email. WCS responds directly to all inquiries and general questions within 24 hours of posting.

This contact form is deactivated because you refused to accept Google reCaptcha service which is necessary to validate any messages sent by the form.