Accounting and Auditing Studies

Accounting and Auditing Studies

Interpretive Structural Modeling of Risk-Based Internal Audit Planning Drivers in Banks Listed in the Tehran Stock Exchange

Document Type : Original Article

Authors
1 Ph.D. Student in Accounting, Kashan Branch, Islamic Azad University, Kashan, Iran.
2 Assistant Prof. in Accounting, Kashan Branch, Islamic Azad University, Kashan, Iran.
10.22034/iaas.2024.204880
Abstract
The purpose of this research is to interpret the structural modeling of risk-based internal audit planning drivers in banks. Comprehensive risk-based planning enables the internal audit function to focus and align its limited resources well with reassurance and informed advice on critical issues facing the organization. The rapidly changing risk landscape in today's world requires internal auditors to evaluate risks periodically or even continuously. Risk-based internal audit programs should be dynamic and agile. In order to achieve these features, some senior internal audit managers update their internal audit program every three months or at any time and make small changes in it. In this regard, it is necessary to identify and structurally interpret the drivers of risk-based internal audit planning in banks, so that while identifying the drivers, more awareness can be gained about the influence and effectiveness of the factors. Identifying the drivers of risk-based internal audit planning in banks through theoretical background and semi-structured interviews with qualitative content analysis method based on theoretical saturation technique and purposeful sampling method with 14 professors and branch managers and bank internal auditors Was performed. The validity and reliability of the qualitative part were confirmed by relative content validity method and Cohen's kappa index, respectively. Coding of interviews using MAXQDA2020 software led to the identification of 16 drivers, which were selected as the most important drivers according to expert feedback and the pie chart of 12 drivers. Based on the results of the research, the drivers of risk-based internal audit planning in banks include auditors' professional maturity, the challenge of documentation, insisting on outdated procedures, the complexity of banking operations and activities, the bank's functional scope, lack of separation of duties, organizational structure, time monopolies, characteristics of the board of directors. , the support of senior management and employees, the competence of internal auditors, the lack of information provided by different banking units.In order to stratify the identified drivers, the opinions of 72 internal auditors of banks and managers in bank branches were used using stratified random sampling and paired comparison questionnaires. Validity and reliability of the questionnaire were confirmed using content validity and test-post-test method. The drivers identified by the interpretive structural method led to the formation of eight levels, the organizational structure was the most effective, and the lack of segregation of duties and the lack of information provided by different banking units were the most effective factors. It is worth mentioning that, during the many researches that have been conducted in the field of risk-based internal audit planning, they have not done leveling and interpretive structural modeling, and the innovation of the present research is in the modeling of its drivers.
Keywords

  1. امیدواری، رمضان (1400)." بررسی حسابرسی داخلی مبتنی بر ریسک و دخالت حسابرسی داخلی در مدیریت ریسک بنگاه (مطالعه موردی شرکت‌های پذیرفته شده در بورس اوراق بهادار تهران)". فصل‌نامه رویکردهای پژوهشی نوین در مدیریت و حسابداری. 3(55). 289-315.
  2. رجبی، علی‌اکبر‎؛ تقی‌پوریان، یوسف‎؛ فلاح، رضا (1400). "تاثیر عوامل کلیدی موفقیت بر عملکرد نظام حسابرسی داخلی". تحقیقات حسابداری و حسابرسی، انجمن حسابداری ایران . 13(51). 127-142.
  3. جامعی، رضا‎؛ جعفری، صدیق (1399). "تأثیر ویژگی‌های کمیته حسابرسی بر اجرای توصیه‌های حسابرسی داخلی در شرکت‌های پذیرفته‌شده در بورس اوراق بهادار تهران". مطالعات حسابداری و حسابرسی، انجمن حسابداری ایران . 9(33). 74-57.
  4. جعفری منصورآباد، آیت‌‎اله؛ عوض زاده فتح، فریبرز؛ مرادی، مهرداد (1401). "بررسی نقش حسابرسی مبتنی بر ریسک در سیاست‌های نظام مالیات بر ارزش افزوده". جامعه شناسی سیاسی ایران. 5(12). 1482-1495.
  5. شهرابی، شاهرخ؛ درخشان، مژده (1396). "ارزیابی موثر ریسک فناوری اطلاعات و برنامه‌ریزی حسابرسی داخلی". دوماهنامه حسابرسان داخلی. 3(3). 27-38.
  6. محمودان، حامد؛ بیگلر، کیومرث (1398). "بررسی نقش حسابرسی داخلی بر کنترل ریسک". فصل‌نامه چشم انداز حسابداری و مدیریت. 2(18). 66-80.
  7. Abidin, N. H. Z. (2017). “Factors influencing the implementation of risk-based auditing”. Asian Review of Accounting.
  8. Alemayehu, W., & vom Brocke, J. (2010). “Sustainability performance measurement–the case of Ethiopian airlines”. International Conference on Business Process Management, 467–478.
  9. Allegrini, M., & D’Onza, G. (2003). “Internal auditing and risk assessment in large Italian companies: An empirical survey”. International Journal of Auditing, 7(3), 191–208. https://doi.org/10.1046/j.1099-1123.2003.00070.x
  10. Anugraheni, E. P., Setiawati, E., & Trisnawati, R. (2022). “Analysis of Risk-based Internal Audit Planning Implementation and Its Impact on Audit Quality” Inspectorate of Surakarta, Indonesia.
  11. Begma, V. M., Lutsik, J. O., Skurinevska, L. V., Tkach, I. M., Trehubenko, S. S., & Ulianov, K. Y. (2019). “Events identification and risks evaluation in the process of planning of risk-oriented internal audit”. Revista ESPACIOS, 40(38).
  12. Castanheira, N., Lima Rodrigues, L., & Craig, R. (2010). “Factors associated with the adoption of risk-based internal auditing”. Managerial Auditing Journal, 25(1), 79–98. https://doi.org/10.1108/02686901011007315
  13. Coetzee, P., & Lubbe, D. (2014). “Improving the efficiency and effectiveness of risk‐based internal audit engagements”. International Journal of Auditing, 18(2), 115-125.
  14. Erlina, E., Nasution, A. A., Yahy, I., & Atmanegara, A. W. (2020). “The role of risk based internal audit in improving audit quality”. Erlina, Abdillah Arif Nasution, Idhar Yahya and Agung Wahyudhi Atmanegara, The Role of Risk Based Internal Audit in Improving Audit Quality, International Journal of Management, 11(12).
  15. Erlina, Putri, D. R., Sopanah, A., & Young, I. (2018). “A Model of Successful Risk Based on Internal Audit Implementation in Regencies” . Cities In North Sumatra, (October).
  16. Erlina, Putri, D.R, Sopanah, A (2018b). “Model of Successful Risk Based Internal Audit Implementation in Regencies”/Cities in North Sumatera. International Journal of Civil Engineering and Technology.615-627. http://www.iaeme.com/IJCIET/issues.asp?JType=IJCIET&VType=9&IType=9
  17. Esi, L. S. (2012). “Determinants Of Adoption Of Risk Based Audit In Public Sector In Kenya”. Department Of Business Administration, School Of Business, University of Nairobi.
  18. Eulerich, M., Georgi, C., & Schmidt, A. (2020). “Continuous auditing and risk-based audit planning”. Available at SSRN
  19. Goman, M., & Koch, S. (2019, June). “Multiplicative criteria aggregation technique for risk-based audit planning”. In 2019 14th Iberian Conference on Information Systems and Technologies (CISTI) (pp. 1-6). IEEE.
  20. Gramling, A. A., Maletta, M. J., Schneider, A., & Church, B. K. (2004). “The role of the internal audit function in corporate governance: A synthesis of the extant internal auditing literature and directions for future research”. Journal of Accounting literature, 23, 194.
  21. Heldifanny, R. A., & Tobing, R. P. (2019, October). “Evaluation of Risk-Based Internal Audit Plan Implementation in The Era of Technology Disruption: Case Study at University X”. In 3rd Asia-Pacific Research in Social Sciences and Humanities Universitas Indonesia Conference (APRISH 2018) (pp. 316-322). Atlantis Press.
  22. Jafari Mansoorabad, A & Avazzadeh fath, F & Moradi, M.(2023). “Examining the role of auditing based on the policies of the the VAT system.” Journal iranian political sociology. 5(12). 1482–1495. (in Persian(.
  23. Jamei, R & Jafari, S.(2020. “The impact of audit committee characteristics on the implementation of internal audit recommendations in companies listed on the Tehran Stock Exchange”. Accounting and Auditing Studies. 9(33). 57–74. (in Persian(.
  24. Kasiva, M. V. (2012). “The impact of risk based audit on financial performance in commercial banks in Kenya”. Unpublished Thesis, University of Nairobi.
  25. Khanna, V. K. (2011). “A survey-based assessment of progress in the implementation of risk-based internal audit in Indian banks”. IUP Journal of Accounting Research & Audit Practices, 10(4), 53.
  26. Koutoupis, A. G., & Tsamis, A. (2009). “Risk based internal auditing within Greek banks: a case study approach”. Journal of Management & Governance, 13, 101-130.
  27. Lois, P., Drogalas, G., Nerantzidis, M., Georgiou, I., & Gkampeta, E. (2021). “Risk-based internal audit: factors related to its implementation”. Corporate Governance: The International Journal of Business in Society.
  28. Mahmoodan, H & Biglar, K .(2020). “Examining the role of internal audit on risk Control”. Journal of Accounting and Management Vision. 2(18). 66–80. (in Persian(.
  29. Menekse, A., & Camgoz-Akdag, H. (2022). “Internal audit planning using spherical fuzzy ELECTRE”. Applied Soft Computing, 114, 108155.
  30. Miltz, D., Calomme, G. J., & Willekens, M. (1991). “A risk-based allocation of internal audit time: A case study. Auditing”: A Journal of Practice & Theory, 10(2), 49–61.
  31. Ng, J., Juwenni, J., & Chandrawati, M. (2022). “Risk Based Internal Auditing and Implementation on Organization”. International Journal of Social Science, Education, Communication and Economics (SINOMICS JOURNAL), 1(5), 653-660.
  32. Nugraha, N., Yazid, H., & Bastian, E. (2022). “The Effect of Risk-Based internal Audit planning and Competemce on audit qulity with the internal auditor Paraddigm as a moderating variable”. Jurnal Ekonomi, 11(01), 678-688.
  33. Nyerere, J. K. (2022). “Risk-Based Internal Audit, Corporate Governance and Financial Performance of Deposit taking Cooperative Societies in Nairobi Metropolis, Kenya”. Doctoral dissertation, University of Embu.
  34. Omidvari, R.(2021). “Investigating risk-based internal auditing and the involvement of internal auditing in firm risk management “. Journal of New Research Approaches in Management and Accounting . 3(55). 289–315. (in persian).
  35. Paterson, J. C. (2015). “The audit plan: Taking a value approach”. In Lean Auditing (pp. 77–93). John Wiley & Sons Ltd.
  36. Pickett, K. H. S. (2006). “Audit planning: A risk-based approach (1 ed.). Hoboken”, New Jersey: John Wiley & Sons Inc.
  37. Pickett, K. S. (2013). “Audit planning: a risk-based approach (Vol. 6). John Wiley & Sons.
  38. Purwanto, Priyarsono, D. S., & Hartoyo, S. (2017). “The implementation of risk management in the internal audit planning in the ministry of energy and mineral resources”. International Journal of Science and Research (IJSR), 6(4), 1587–1590
  39. Shahrabi, S. & Derakhshan, M .(2017). “Effective IT risk assessment and internal audit planning” Bimonthly internal auditors 3(3). 27–38. (in Persian(.
  40. Raj, T., & Attri, R. (2010). “Quantifying obstacles to implementing Total Quality Management (TQM)”. European Journal of Industrial Engineering, 4(3), 308–335. https://doi.org/10.1504/EJIE.2010.033333.
  41. Rajabi, A & Poor Ali, M & Taghi pooriyan, Y & Falah, R. (2022) “The Effect of Critical Success Factors on the Performance of Internal Audit”. Accounting and Auditing Research. 13(51). 127–142. (in Persian(
  42. Ravi, V., Shankar, R., & Tiwari, M. K. (2005). “Productivity improvement of a computer hardware supply chain”. International Journal of Productivity and Performance Management, 54(4), 239–255. https://doi.org/10.1108/17410400510593802
  43. Singh, R. K., Garg, S. K., & Deshmukh, S. G. (2010). “Interpretive structural modelling of factors for improving competitiveness of SMEs”. International Journal of Productivity and Quality Management, 2(4), 423. https://doi.org/10.1504/IJPQM.2007.013336
  44. Sudarmono, S., & Tobing, A. N. L. (2022). “Designing Risk-Based Internal Audit Plan in the Internal Auditor Division (A Case Study in PT. XY)”. Budapest International Research and Critics Institute (BIRCI-Journal): Humanities and Social Sciences, 5(1), 1528-1542.
  45. Sueyoshi, T., Shang, J., & Chiang, W.-C. (2009). “A decision support framework for internal audit prioritization in a rental car company: A combined use between DEA and AHP”. European Journal of Operational Research, 199(1), 219–231
  46. The Institute of Internal Auditors. (2017). “International Standards for the Professional Practice of Internal Auditing (Standards). Lake Mary, FL”. The Institute of InternalAuditors.
  47. The Institute of Internal Auditors. (2020). Practice Guide: Developing a Risk-based InternalAudit Plan. Lake Mary, FL: The Institute of Internal Auditors.
  48. Wang, X., Ferreira, F. A., & Yan, P. (2023). “A multi-objective optimization approach for integrated risk-based internal audit planning”. Annals of Operations Research, 1-29.
  49. Wang, X., Zhao, T., & Chang, C. T. (2021). “An integrated FAHP-MCGP approach to project selection and resource allocation in risk-based internal audit planning: A case study”. Computers & Industrial Engineering, 152, 107012.