Insight

Making the most of your nonprofit’s internal audit function

The key role of a not-for-profit’s internal auditors was once limited largely to testing financial and compliance controls and reporting their findings to the organization’s leadership. But today, with their cross-departmental perspective, internal audit staff (whether employees or outside consultants) can help anticipate and mitigate a variety of risks, improve processes — and even help evaluate your nonprofit’s strategies.

Core job

On its most basic level, the internal audit function provides independent assurance of compliance with a nonprofit’s internal controls and their effectiveness in mitigating financial and operational risk. Potential risks include fraud, insufficient funds to support programming and reputational damage.

Internal auditors start by identifying a nonprofit’s vulnerabilities and prioritizing them from high to low. Through testing and other methods, they then assess the effectiveness of internal controls. Auditors document their results in reports that include recommended improvements.

Internal auditors further evaluate compliance with laws, regulations and contracts. They follow up on management’s remediation actions to eliminate identified risks and assist external auditors, when applicable.

The effectiveness of the internal audit function hinges on auditor independence. Auditors should be independent from management and all areas they review to avoid bias or a conflict of interest. Auditors should report directly to the board of directors or its audit committee.

Expanded function

Although the internal audit function is often viewed mainly through the prism of compliance and internal controls, it has a lot to offer beyond risk assessments and audit plans. Savvy nonprofits have begun to tap internal audit for strategic purposes.

Auditors may serve as internal consultants, providing insights gathered while performing compliance and assessment work. For example, while reviewing invoices, internal auditors may discover a way to streamline invoice processing.

The internal audit function’s familiarity with the organization’s inner workings also affords it an unusual perspective for evaluating strategic opportunities. Does your nonprofit have a financial weakness that could undermine plans for continuing current programs or launching new ones? Your internal auditor probably knows the answer.

Ask for more

Increased public scrutiny of how nonprofits are governed and held accountable makes an effective internal audit function a must. But internal auditors can offer your nonprofit more than financial and compliance oversight. To ensure you’re making the most of this function, contact us.

© 2018

Related Insights

Federal court rejects FTC’s noncompete agreement ban-cpa in harford county md-Weyrich, Cronin & Sorra

Management Advisory Services & Business Consulting

Federal court rejects FTC’s noncompete agreement ban

In April 2024, the Federal Trade Commission (FTC) approved a final rule prohibiting most noncompete agreements with employees. The ban was scheduled…
Planning your estate? Don’t overlook income taxes - Estate Planning CPA in Elkton MD - weyrich, cronin and sorra

Estate & Wealth Transfer Planning

Planning your estate? Don’t overlook income taxes

The current estate tax exemption amount ($13.61 million in 2024) has led many people to feel they no longer need to be concerned about federal…
If your business has co-owners, you probably need a buy-sell agreement - tax preparation in hunt valley md - weyrich, cronin and sorra

Management Advisory Services & Business Consulting

If your business has co-owners, you probably need a buy-sell agreement

Are you buying a business that will have one or more co-owners? Or do you already own one fitting that description? If so, consider installing…

Connect with us

Use the form below to send us an email. WCS responds directly to all inquiries and general questions within 24 hours of posting.

This contact form is deactivated because you refused to accept Google reCaptcha service which is necessary to validate any messages sent by the form.