Say it right
1 / 50

Say It Right - PowerPoint PPT Presentation

  • Uploaded on

Say It Right. Presentation to IIA Granite State Chapter 9 May 2013 Phil Tarling Chairman of the Global IIA Board. Background to the Speaker. Vice President, IA Centre of Excellence, Huawei Chairman - Global IIA Immediate Past President of the ECIIA (2010-2011)

I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
Download Presentation

PowerPoint Slideshow about ' Say It Right' - echo-guerrero

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.

- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
Say it right

Say It Right

Presentation to IIA Granite State Chapter

9 May 2013

Phil Tarling

Chairman of the Global IIA Board

Background to the speaker
Background to the Speaker

  • Vice President, IA Centre of Excellence, Huawei

  • Chairman - Global IIA

  • Immediate Past President of the ECIIA (2010-2011)

  • Past President of the IIA UK and Ireland (2005-06)

  • Provided Capacity building in Internal Audit & PIFC since 1998

  • Worked in the UK, Estonia, Latvia. Lithuania, Poland, Hungary, Czech Republic, Kenya, South Africa, Romania, Macedonia, Croatia, Serbia, Kosovo and Turkey

  • Now responsible for developing internal audit capacity in a worldwide Chinese owned telecoms company

Some real changes
Some real changes

The profession - founded in 1941

With Europe at war -and the rest of the world not far off

Some real changes1
Some real changes…

The profession – developing a new look in the two thousand and tens

Some real changes2
Some real changes…

From Clipboard

To Tablet

Some real changes4
Some real changes…

The Auditor with a Tablet

Some real changes5
Some real changes…

July 2012 – China Takes Second spot from Japan

Some real changes6
Some real changes…

The BRICS announced the setting up of the bank, described as a "BRICS-led South-South development bank."

The one common feature
The one common feature…



New communication1
New Communication…

This new communication is INFLUENTIAL

Egypt protests organised through Social Media

New communication2
New Communication…

This new communication BREAKS BARRIERS…

Syria unrest shown to the world on YouTube

New communication3
New Communication…

The IIA’s very own

New communication4
New Communication…

Social Media is being used for internal audit Professional Development and Enhancement

In the first 6 months, had 3.2M hits

Is anyone still saying that Social Media is not important?

Our companies aren’t, nor is government

New communication5
New Communication…

The UK Prime Minister’s Web Site

New communication7
New Communication…

Communication comes in all shapes and sizes

BUT they all rely upon being listened to

The internal auditor communication
The Internal Auditor -Communication

This is not new to Internal Auditors

Communication has always been a soft skill that auditors have developed, through reporting style and listening

But previously Internal Audit had a bad reputation.

The internal auditor communication1
The Internal Auditor & Communication…

We have moved on

Focussed on risk,

Determined to suggest solutions,

Not hiding behind independence,

Avoiding the sidelines

Involved in the organisation’s success or failure

Internal Audit is now a key part of the business

The internal auditor communication2
The Internal Auditor & Communication…

We need to make sure that what we say:

  • not only has an audience

  • not only that people are listening

    But also that we


Internal auditing in the 20 teens getting to the top table

Internal Auditing in the 20 teensGetting to the Top Table

Getting to the top table
Getting to the Top Table

Football managers often say that for the goalkeeper to miss a save, 10 other players must have missed it before him.

This third line role likens internal audit to that of a goalkeeper in a football match. When the ball is lost in midfield (first line) and the defence (second line) fails to pick up the opposition’s attack, it is left to the goalkeeper (third line) to save the day.

There is a reasonable expectation that internal audit will identify the weaknesses in both first and second lines and failure to do so may lead to significant loss to the organisation.

1st line:

Business Management

2nd line:

Risk Mgt / Compliance / Others

3rd line:

Risk Based Internal Audit

External Audit and the Regulators are the Referee and Linesman

Say it right

Getting to the Top Table


Board of Directors/ Audit Committee


Senior Management

  • Internal Audit

1st Line of Defence

3rd Line of Defence

2nd Line of Defence

Operational Management

External Audit


Internal Control

Financial Control







Enterprise Risk Management

Ethics & Legal

Say it right

Getting to the Top Table

The third line of Defence provides the outlet to the Audit Committee and Board

But the seat is not a vacant seat for the CAE to walk into

The seat at the Top Table has to be earned

Scaling greater heights business is focused on risks top 10 business risks in 2011
Scaling Greater HeightsBusiness is Focused on Risks: Top 10 Business Risks in 2011


Regulation and Compliance


Cost cutting


Access to credit

Non-traditional entrants




Slow recovery or double-dip recession

Radical greening



Managing talent

Social acceptance and Corporate Social Responsibility



Emerging markets

Executing alliances and transactions

Source: Ernst & Young Business Risk Report

Say it right

Risk Based Internal Audit

RBIA is not about identifying the Process Risk in the organisation

Risk Based Internal Auditing (RBIA) is a methodology that links internal auditing to an organisation’s overall risk management framework.

RBIA allows internal audit to provide assurance to the board that risk management processes are managing risks effectively, in relation to the risk appetite

Meeting stakeholder expectations are we being honest with ourselves
Meeting Stakeholder Expectations: Are we Being Honest With Ourselves?

“If surveyed today on how well internal auditing is meeting its needs and expectations, my audit committee/executive management would probably rate their overall satisfaction…”

Source: Emerging Trends and Leading Practices Spring 2011,

The Institute of Internal Auditors – Audit Executive Network

The view from the other side
The View from the Other Side:

Source: Ernst and Young Global Internal Audit Stakeholder Survey, November 2010 & January 2012

Internal audit should provide insight
Internal Audit should provide Insight

Source: Internal Audit Research Foundation Survey, March 2012

Internal audit frequently delivers insight
Internal Audit frequently delivers Insight

Source: IIA Research Foundation Survey, March 2012

My internal audit delivers insight
My Internal Audit delivers Insight

Source: IIA Research Foundation Survey, March 2012

Say it right

Provide Insight

Insight should come through linking IA through RBIA with Risk Management and Governance in the organisation

Meet our Stakeholders’ expectations we need to ensure that we do what it is they want us to do

Educate the Stakeholders in what we can do

Say it right

Ascending to the Level of A Trusted Advisor

Capable but poorly aligned

Trusted advisor


Compliance function

Engaged but not strategic


Communication is the answer1
Communication is the answer

We have to understand the messages

Do we know the language?

Communication is the answer for ia
Communication is the answer for IA

CAEs need to :

  • Listen to what the Board are saying directly and through the Audit Committee

  • Listen to what the senior executives are saying

  • Understand what the messages are

Communication is the answer2
Communication is the answer

Messages are often coded

Communication is the answer for ia1
Communication is the answer for IA

  • Make sure that what you are saying is to the right people

    • Be careful of the “Reply All” button

  • Make sure that your communication is clear

    • Are your reports concise and in plain language

    • Is it what you want to say?

  • Communication is the answer4
    Communication is the answer

    • Get a name as the “Advisor” to the Board and Audit Committee; the “go to” person for business advice

    • Have regular informal interaction with the Audit Committee members and the Chairman

    • Go beyond just reporting audit results; be part of the business discussing business issues with senior Executives

    Communication is the answer5
    Communication is the answer

    • Regularly communicate to senior management and the board:

  • Emerging risks facing the enterprise

  • Systemic trends on risks and controls gleaned from audit results

    • All the internal audit team need to be effective communicators

  • Thank you
    Thank you

    Phil Tarling

    Office: +441189208506

    Mobile: +447802656986


    Twitter: @philtarling