SIAAB Quality Assurance Review Coordination - 2024 Global Internal Audit Standards
This page provides tools covering the institute of Internal Auditors’ 2024 Global Internal Audit Standards (Standards) effective January 9, 2025.
The State Internal Audit Advisory Board (SIAAB) is responsible for coordinating quality assurance reviews among the State’s internal audit organizations in accordance with the Fiscal Control and Internal Auditing Act (FCIAA). State of Illinois Internal Audit Organizations designated to have an internal audit function are required to conduct an external quality assurance assessment (EQA) or a self-assessment with independent external validation (SAIV), at least once every five years by an independent reviewer or review team from outside the organization (GIASIII 8.4). Each Internal Audit Organization and Quality Assurance Review Team is required to follow SIAAB’s external quality assurance guidelines as discussed below and in SIAAB Bylaws Article III - Quality Assurance Review Coordination.
Requesting SIAAB’s Approval of Quality Assurance Review Team
Chief Internal Auditors are required to obtain approval of the proposed review methodology (EQA or SAIV) and review team members from SIAAB prior to finalizing any quality assurance review arrangements. To initiate SIAAB’s review, the Chief Internal Auditor is required to submit the following documents to the Quality Assurance Review Coordinator:
In addition, each review team member/validator must successfully complete SIAAB’s On-line Quality Assurance Review Training Program:
SIAAB’s External Quality Assurance Reviews
Late External Quality Assurance Reviews
External assessments must be conducted at least once every five years. This is an unconditional requirement. Therefore, if an internal audit activity is delinquent on their external assessment, it must disclose the nonconformance and corrective action to be taken to senior management and the board. The Chief Internal Auditor shall determine the manner of disclosure appropriate for the agency which may include explanatory paragraphs in audit reports, inclusion in the internal audit annual report, or other as deemed appropriate. The disclosure is required annually until a subsequent review has been conducted by the external validator verifying that appropriate corrective action has been taken and approved by SIAAB. The phrase “conducted in conformance with the International Standards for the Professional Practice of Internal Auditing” cannot be used when an internal audit function is delinquent on their external assessment.
When an internal audit function becomes more than one year delinquent on their external assessment, SIAAB may send a letter to their chief executive officer under Bylaw 3.5.2. If your audit function is or will be delinquent on your QAR, we encourage you to notify SIAAB. Below is a sample notification letter:
Useful Resources
The IIA has released a useful resource, Mapping of the 2017 Standards to the 2024 Standards.
The IIA has released a Model Internal Audit Charter Tool and User's Guide for the Public Sector. Access requires a Members only logon.
The IIA has released a Conformance Readiness Assessment Tool. Access requires a Members only logon.