Internal Audit Committee Resource Hub

Agile Auditing Resources:

• Item 1. Agile and Agile Auditing (Barclays; October 2018)
• Item 2. Using Agile Internal Audit to Transform Your Internal Audit Function (Deloitte; November 2018)
• Item 3. Becoming Agile: A Guide to Evaluating Internal Audit’s Performance and Value (Deloitte; November 2018)
  • Item 3a. Part 1: Understanding Agile Internal Auditing
  • Item 3b. Part 2: Putting Agile Into Action
• Item 4. What is Agile? Committee Presentation by Phil Barreca (Goldman) and Cindy Bolton (Principal) (Nov. 2019)

Benchmarking Survey Questions (Committee Survey 2018)

Business Email Compromise (FBI ppt; Nov. 22, 2019)

Cloud-Related Resources:

• Item 1. ICI Internal Audit: Cloud Computing (Nick Wilson, Artisan; April 2019)
• Item 2. Members’ Cloud Usage Survey Results (April 2019)
• Item 3a. Free cloud training and certifications offered by Amazon Web Services (AWS)
• Item 3b. Additional training and certifications offered by AWS
• Item 4. Auditing Cloud Computing (CPE Presentation; January 2019)
• Culture: Audit Questions Related to Culture (following Cloud-Related Resources)

Cyber & Information Security-Related Resources:

• Item 1. ICI Cyber Trends Survey (2018)
• Item 2. ICI Cybersecurity Benchmarking Survey Results – Global v. Domestic (2018)
• Item 3. PwC Presentation to ICI’s Chief Risk Office Committee: Information Risk Management Overview (May 2019)

Data Analytics:

• Item 1. New Pressures New Solutions: Internal Audit, Risk and Compliance Analytics for Asset Managers (PwC, April 2017)
• Item 2. ICI Internal Audit Forum (PwC; April 2019)

ESG Resources:

• ESG Audit Work Plans/Programs
• OCIE Document Request List (2018)

FBI Agent Contact Information: White Collar Crime:

• Special Agent Tim Ervin: tjervin@fbi.gov; 202-439-9211
• Special Agent Bryce Oleski: boleski@fbi.gov

FCA Senior Managers and Certification Regime Banking Stocktake Report (August 5, 2019): ICI Memo No. 31891 (Aug. 7, 2019) with link to Report.

Federal Reserve Guidance:

• Item 1. Supplemental Policy Statement on the Internal Audit Function and Its Outsourcing (Board of Governors of the Federal Reserve System; January 23, 2013)
• Item 2. Management and Internal Controls
• Item 3. Guidance on Model Risk Management (SR 11-7, Board of Governors of the Federal Reserve System; April 4, 2011)

IIA Materials:

• Item 1. Implementation Guide 1300: Quality Assurance and Improvement Program (International Professional Practices Framework
• Item 2. Quality Assurance and Improvement Program (January 2012)
• Item 3. The Path to Quality: A Step-by-Step Guide
• Item 4. Setting a Standard for Quality: Key Messages for CAEs, Senior Management, and the Board
• Item 5. Quality Assurance Manual:
  • Item 5a. Chapter 1: The Framework for Quality Assurance (8 pages)
  • Item 5b. Chapter 2: Establishing a Quality Assurance and Improvement Program (16 pages)
  • Item 5c. Chapter 3: Internal Assessments (6 pages)
  • Item 5d. Chapter 4: Full External Assessment (14 pages)
  • Item 5e. Chapter 5: Self-Assessment with Independent Validation (10 pages)
• Item 6. Additional Quality Assessment resources are available from the IIA at https://na.theiia.org/services/quality/Pages/Guidance.aspx

LIBOR Resources

OCC Risk Management Principles/Guidance:

• Frequently Asked Questions to Supplement OCC Bulletin 2013-29 Relating to Overseeing Third-Party Relationships
• Risk Management Guidance Relating to Overseeing Third-Party Relationships

OCC’s Semiannual Risk Perspective (Spring 2019):

• ICI Memo Summarizing the Report: ICI Memo No. 31816 (June 21, 2019)
• The Report (Spring 2019)

SEC Rule Amendments to the “Loan Provision” of the Auditor Independence Rules:

• ICI Memo Summarizing the Amendments: ICI Memo No. 31823
• SEC Release Adopting the Amendments: Auditor Independence with Respect to Certain Loans or Debtor-Creditor Relationships, Release No 33-10648

Transfer Agent-Related Resources

UK Senior Managers and Certification Regime Resources:

• Item 1. Senior Manager and Certification Regime (FCA; April 2019)
• Item 2. SMCR: Implementation Planning and Practicalities (Latham & Watkins; April 2019)

Deep Dive Resources