2.1. External Audit Reliance Decision Issues
External auditors follow three standards—PCAOB, ASB, and IAASB—when relying on internal auditing. To address the internal audit task for public corporations, the PCAOB introduced AS 2605 (PCAOB, 2013). This research is anchored in ISA 610, which guides external auditors in utilizing the work of internal auditors for evidence collection and support (ISA, 610). The study investigates how external auditors enhance their performance by adopting the practices of internal auditors, aligning with ISA 315 and 610 in 2016. The presence of more internal auditors correlates with increased dedication to auditing financial statements, ultimately improving audit performance (Lee & Park, 2016). Additionally, we examine studies on the reliance of External Auditors (EAs) on IAFs, influencing variables such as litigation risk, audit efficiency, fees, financial statements, and internal control quality (Bame-Aldred et al., 2013).
2.1.1. The Extent of External Audit Reliance
In this section, we delve into the intricate dynamics of External Auditors’ (EAs) decision-making regarding their reliance on IAFs. This decision involves a nuanced assessment of the IAF’s work quality and their role, whether as evaluators or as assistants. Our examination begins by exploring the ramifications of customer pressure on the reliance on IAF, an aspect that has received limited attention in prior research (Gramling et al., 2004). Organizational factors such as board connections, business risks, and client demands emerge as influential determinants in shaping EAs’ utilization of IAFs. To tackle concerns about subpar IAF performance and low reliance, our analysis suggests that while automated remediation is partially effective, less frequent and more targeted remediation procedures prove superior to continuous strategies (Farkas and Hirsch, 2016).
Munro and Stewart (2011) contribute to this discourse by conducting an experimental study, investigating how business risk and reporting arrangements with the board impact EAs’ reliance on IAF work and their use of internal auditors. Reporting relationships and business risks surface as pivotal factors influencing these decisions. Abbott et al.’s (2007) survey of chief internal auditors further augments our understanding, focusing on audit committee effectiveness in determining independence and the nature of outsourced services. The study emphasizes the importance of efficient audit committees in monitoring internal audit activities to safeguard external auditors’ independence, aligning with previous research on effective governance and audit committee effectiveness.
The utilization of internal auditors’ work by external auditors introduces risks to their objectivity and professionalism, raising concerns about potential uncritical assessments (Argento et al., 2018). ISA510 and ISA620 provide different perspectives on auditors relying on third-party work, with ISA620 particularly valuable in convincing internal reviewers and regulators about the evidence for complex items (Kok & Maroun, 2021). The adoption of data analytics in external auditing emerges as a key theme influenced by factors such as the audit profession, technology, organization, quality control, and audit clients. Our analysis reveals that employing IT professionals, auditor skills, data storage, and quality controls significantly impact the use of data analytics in audit practice (Jacky & Sulaiman, 2022).
The regulatory landscape, especially since the Sarbanes–Oxley Act (2002), has elevated the significance of the internal audit role (Desai et al., 2011). However, the extent to which external auditors rely on the quality of internal audit tasks remains a subject of mixed and inconclusive results, necessitating further exploration (Bame-Aldred et al., 2013; Weisner & Sutton, 2015). Internal audit’s inverse impact on organizations’ willingness to consent to audit judgments about ongoing concerns introduces another layer of complexity (Dzikrullah et al., 2020).
Various aspects of internal auditing competence, work done, objectivity, and non-internal audit factors intricately influence the decision-making process of internal auditing reliance (Schneider, 2010). Desai et al. (2017) shed light on the measurement of power for external auditors, revealing their susceptibility to negative evidence and struggles with consistent integration of data on three variables in their overall assessment of strength. The study further explores how internal auditors’ involvement in non-audit functions impacts external auditors’ assessment and reliance on their performance. The supply of non-audit functions negatively impacts the credibility of externally hired internal auditors, while the use of multiple persons for consultancy services moderates impressions of impartiality but does not significantly affect competency perceptions (Brandon, 2010).
Our systematic literature review (SLR) provides a comprehensive understanding of the factors influencing EA’s dependence on IAF, considering both the quality of work and the nature of assistance provided. It underscores the intricate interplay of organizational factors, customer pressures, and business risks. Automated remediation’s limited impact prompts a nuanced exploration of remediation procedures. Insights into data analytics adoption and the evolving regulatory landscape contribute to the richness of our analysis. Despite advances, the literature highlights the need for continued exploration, particularly in understanding the complex relationship between external and internal auditors. This synthesis not only enriches the knowledge base for auditors and organizations but also serves as a guide for effective audit practices.
In this section, key themes in the realm of external audit reliance on IAF are explored. Factors influencing this reliance, such as customer pressure and organizational factors, are scrutinized. The effectiveness of automated remediation, reporting relationships, and business risks in influencing EA’s reliance on IAF work are discussed. Notably, audit committee effectiveness and the risks to objectivity and professionalism faced by external auditors are highlighted, especially in the context of stricter regulations post the Sarbanes–Oxley Act. The quality of internal audit tasks, their impact on audit judgments, and the struggles external auditors face in evidence integration are thoroughly examined. Despite these insights, research gaps emerge, including the need for more exploration of EAs’ use of internal auditors and their previous work, understanding the impact of internal auditor performance on external auditor reliance, and resolving mixed results on external auditors’ dependence on internal auditor performance. Future research suggestions encompass investigating the impact of customer pressure, exploring strategies for addressing subpar internal audit performance, assessing the role of reporting relationships and business risks, and delving into innovative approaches to safeguard external auditor independence and address risks to objectivity and professionalism. Furthermore, there’s a call for in-depth studies on the impact of stricter regulations on the internal audit role, exploring new methods to enhance the quality of internal audit tasks, investigating factors influencing external auditors’ struggle with evidence integration, and assessing the impact of internal auditors’ involvement in non-audit functions on external auditor assessment and reliance.
2.1.2. The Role of IAF in Enhancing Financial Reporting Integrity and EA Effectiveness
The interplay between IAFs and external auditors is pivotal in shaping financial reporting integrity and enhancing the effectiveness of external audits. Internal control deficiencies have far-reaching implications, affecting financial estimates and the extent of reliance external auditors place on IAFs, thereby influencing audit efficacy and fiscal outcomes.
Guided by the PCAOB’s advocacy for increased reliance on internal audit outcomes to augment audit quality, auditors operating in a comprehensive audit environment exhibit a preference for leaning on internal audit findings, especially when previous reports confirm the effectiveness of controls (Malaescu & Sutton, 2015). The collaboration between external auditors, upper management capacity, and the autonomy of internal auditors contribute positively to internal audit outcomes (Alqudah et al., 2019). Notably, diminished efficiency is observed when dependent auditors maintain strong connections with observer errors, a trend that is mitigated when the main auditor is affiliated with a Big Four firm or a specialized business (Noh et al., 2017).
Research exploring the impact of IAF on management reporting of external audit (EA) quality reveals intriguing insights. Abbott et al. (2012a) demonstrate that engaging IAF workers as assistants reduces audit delays, especially in situations of poor control reliance. Furthermore, higher IAF quality and cooperation with external auditors enhance audit efficiency when IAFs are utilized as assistants. On the other hand, Pizzini et al. (2015) highlight that IAF quality decreases audit latency. However, unlike Abbott et al. (2012a), audit latency decreases only when EAs rely on the IAF’s work, not when they act as assistants. Lin et al. (2011) affirm that strong cooperation between IAFs and EAs positively correlates with material weakness disclosures, indicating an overall improvement in EA quality through collaborative efforts. Collectively, this evidence suggests that employing IAFs improves audit efficiency and reduces delays.
Grey and Hunton’s (2011) findings shed light on the nuanced factors influencing EAs’ reliance on IAFs. Notably, the reporting structure, where the IAF reports to the CFO instead of the audit committee, could impact auditors’ reliance due to variations in how they evaluate the IAF’s competence and objectivity. Early studies underscore the importance of IAF quality parameters, emphasizing that compliance with Internal Auditors (IIA) standards and a lack of conflicting tasks enhance the perception of IAF competence and objectivity (Breger et al., 2020; Schneider 1984, 1985; Margheim 1986; Messier & Schneider 1988). Auditing Standard No. 5’s recommendation for external auditors to rely on internal auditors’ work emerges as a guiding principle for enhancing audit efficiency and effectiveness (Stefaniak et al., 2011).
In addition, the nature of internal audit tasks in non-family organizations, serving as a managerial training base, influences the degree of reliance on external audits due to perceived impartiality. Conversely, under a managerial training base system, external auditors’ reliance on internal auditing in family companies and their perception of impartiality remain largely unchanged (Suh et al., 2020; Čular et al., 2020). The degree of trust external auditors place in the internal audit department is influenced by factors such as the delivery of risk management counseling, the strength of the audit committee, and the provision of assurances (Čular et al., 2020).
Jordanian auditors highlight the value of collaboration between internal and external auditors in enhancing financial reporting quality, with impartiality playing a pivotal role. Moreover, the technical proficiency of internal audit practice is identified as a contributing factor to financial reporting efficacy (Azzam et al., 2020).
The analysis of SLR about the role of IAF in enhancing financial reporting integrity and EA effectiveness emphasizes the crucial role of IAF in enhancing financial reporting integrity and external audit effectiveness. Internal control shortcomings influence financial estimation and external auditors’ reliance, impacting audit efficacy and fiscal consequences. The PCAOB promotes increased reliance on internal audit outcomes for better audit quality. Engaging IAF workers as assistants reduces audit delays, and collaboration with external auditors enhances audit efficiency. Reporting to the CFO increases auditors’ reliance on the IAF, guided by evaluations of objectivity and competence. Non-family organizations’ internal audit tasks reduce reliance on external audits due to perceived impartiality. Collaboration between internal and external auditors improves financial disclosure quality, with impartiality playing a critical role. The research offers valuable insights for auditors, organizations, and stakeholders, suggesting areas for future research to enhance audit practices and effectiveness.
This part delves into crucial themes surrounding the collaboration between IAFs and external auditors, emphasizing its pivotal role in shaping financial reporting integrity and enhancing external audit effectiveness. Internal control deficiencies emerge as influential factors with far-reaching implications, impacting financial estimates and determining the extent of external auditor reliance on IAFs. The study notes increased reliance on internal audit outcomes, guided by the Public Company Accounting Oversight Board’s (PCAOB) advocacy for augmenting overall audit quality. Collaborative dynamics, reporting structures, and the impact of IAF quality parameters are explored, highlighting the nuanced factors affecting auditors’ reliance. Identified gaps call for further exploration of reporting structure nuances, a comprehensive understanding of IAF impact, a detailed examination of the effects of internal control deficiencies, and a deeper exploration of the nature of internal audit tasks in non-family organizations serving as managerial training bases. Future research suggestions include comprehensive evaluations of reporting structures in varied organizational contexts, in-depth analyses of collaboration dynamics, quantitative studies on the impact of IAF quality parameters, longitudinal examinations of internal control deficiencies, exploration of cross-cultural perspectives on collaboration, and investigations into the influence of technological advancements on audit efficacy.
2.1.3. The Challenges and Impact Faced by EA Through Their Reliance on IAF
The landscape of external auditors (EAs) relying on IAFs is complex and influenced by a multitude of factors. This section delves into the challenges faced and the ensuing impact on audit practices and outcomes.
Audit standards (ISA 610, SAS 65, Auditing Standard No. 5—PCAOB 2007) provide leeway for EAs to rely on IAF work, but this permission is underscored by the necessity to ensure its effectiveness. Auditors engage expert judgment during planning, evaluating the reliability of internal auditors’ tasks and emphasizing the critical assessment of the internal audit division’s competency and integrity (AICPA, 1991).
The intricacies of reliance decisions involve simultaneous evaluations of multiple aspects. Changing audit standards introduce intermediary judgments, and Bame-Aldred et al. (2013) highlight the need for a deeper understanding of how EAs assess the quality of internal audit activities. Lee and Park’s (2016) discovery of a positive connection between the number of internal auditors and external audit hours suggests a tangible contribution to financial statement audits and enhanced audit efficiency.
EAs’ reliance on internal audit in clients receiving non-audit services is more influenced by client demands than internal audit competence (Felix et al., 2005). Interaction challenges, encompassing internal audit engagement, fiscal challenges, and perceived risk, influence reliance decisions and are notable considerations (Brody, 2012).
EAs encounter obstacles to their professional independence, but adopting internal control features helps mitigate challenges, particularly in the context of bank audits (Kamil & Ahmed, 2020). Impact of Outsourcing: Outsourcing internal auditors correlates with increased reliance, particularly when intrinsic risk is high (Glover et al., 2008). EAs are urged to assess the qualifications of outsourced internal auditors to ensure competency in evaluating risks and controls within the user organization.
Liability judgments, as explored by Arel et al. (2013) and Munro & Stewart (2011), unveil nuanced patterns where EAs relying on internal IAF face more liability. While auditors do not heavily depend on non-financial measures, a nuanced approach is observed, with an increased reliance on these measures when assessing revenue estimates and challenging client balances, especially in high fraud-risk scenarios (Brazel et al., 2014).
The credibility of management experts is rooted in accounting competency, reputation, and validated credentials. Concerns around documentation and transitioning to a checklist approach are highlighted (Agrawal et al., 2020). Heavy reliance on private auditing by banks poses challenges, particularly when government loans are scarce, impacting collateral and societal welfare (Tuluk, 2021).
Notably, dissatisfaction surfaces among external auditors concerning internal audit personnel, education services, and organizational conditions (Alktani & Ghareeb, 2014). Surprisingly, a PCAOB examination’s impact on reliance remains limited, with efficiency-focused testing showing a paradoxical result—greater dependence when engagement risk is low (Petherbridge & Messier, 2015). In navigating deficiencies in company management, auditors turn to the compensatory power of robust internal control, a strategic move that contributes to enhancing auditors’ overall credibility in the audit process. Audit method type and intrinsic risk emerge as pivotal influencers shaping auditors’ preferences for relying on internal auditing. Moreover, auditors’ reliance decisions are significantly swayed by their prior professional experiences (Quick & Henrici, 2019).
The limited interactions between internal and external auditors pose a challenge, hindering the comprehensive utilization of the internal audit role (Mubako & Muzorewa, 2019). Strained interactions and inadequate management activities further compound the challenge, impacting positive engagement in the audit process. Trust in internal audit findings is nuanced, with a distinct preference for factual over subjective information, particularly when risks are involved. This trust dynamic plays a crucial role in shaping auditors’ reliance decisions on internal audit outputs. Externalization or co-sourcing of IAFs becomes a factor influencing the final dependence decision (Desai et al., 2011; Lowe et al., 1999). Complementing roles between external and IAFs are increasingly observed, indicating a trend toward collaborative and synergistic audit practices.
Foreign internal auditors from Big Four firms significantly interact with external audits (Baatwah et al., 2019). The degree of internal auditors’ adherence to professional standards is identified as a critical factor shaping external auditors’ reliance on them (Mustapha & Lee, 2020). External auditors are urged to meticulously assess the qualifications of outsourced internal auditors, ensuring their competence in evaluating risks and controls within the user organization. This assessment, however, often does not consider the qualities of service auditors. While adopting the IAF for management training proves beneficial in enhancing operational performance, it introduces a caveat by raising accounting risk, necessitating cautious consideration (Christ et al., 2012).
External auditors should assess the qualifications of outsourced internal auditors to ensure their competency in evaluating risks and controls within the user organization. Service auditor qualities are not considered in this assessment. Internal auditors do not provide financial statement services, so the user auditor must independently test or vet internal audit processes before relying on an external internal auditor (Bierstaker et al., 2013). Also, internal audit unit usage impacts audit adequacy (Messier et al., 2011). Complementing roles between external and internal audits have been observed (Rabóczki, 2018).
In conclusion, this analysis unearths the intricate challenges and impacts faced by EAs through their reliance on IAF. From navigating audit standards to addressing client demands, ensuring internal audit quality, and balancing reliance considerations, auditors are confronted with multifaceted decisions. The significance of enhanced communication and collaboration between auditors is emphasized for effective reliance, improved practices, and ultimately, ensuring the integrity of the audit process.
This classification navigates through key themes related to the complexity of reliance decisions and professional judgment, highlighting factors such as client demands, outsourcing impacts, trust dynamics, collaborative practices, and liability judgments. Gaps in the literature include a limited understanding of how external auditors assess internal audit quality, the predominant influence of client demands on reliance decisions, and the need for comprehensive insights into the impact of outsourcing, trust dynamics, and auditors’ preference for factual information. Suggestions for future research propose in-depth assessments of internal audit quality, exploration of client-centric reliance and interaction dynamics, comprehensive understanding of outsourcing impacts, exploration of trust dynamics and information preference, strategies for enhancing interactions for collaboration, exploration of regulatory compliance and global trends, investigation into qualification assessment and risk evaluation, and cautious exploration of adopting IAF for management training.
2.1.4. The Impact of IAF on EA Fees and Quality
Previous research highlights multifaceted connections between the IAF and External Audit (EA) fees and quality, unveiling nuances in their interactions. Carcello et al. (2018) reveal a negative impact on external audit fees, financial reporting quality, and internal auditing effectiveness when the IAF is utilized for management training. In contrast, Abbott et al. (2012b) suggest that a stronger influence of the audit committee on the IAF results in lower external audit fees. This reflects heightened external auditor reliance on the IAF, translating to improved audit effectiveness.
Conversely, the mere presence of an IAF is linked to higher external audit charges. Larger internal audit departments exhibit positive correlations with elevated external auditor fees, improved audit quality, and an increased likelihood of engaging Big Four firms (Axén, 2018). Surprisingly, while reliance on internal audits does not necessarily reduce external audit charges or tasks for local governments in Great Britain, higher external audit fees can lead to a decrease in reliance on internal audits (Saidin, 2014). Meta-analyses, such as those conducted by Hay , underscore a connection between investments in both external and internal audits in financial audit contexts.
There is an underlying assumption in many studies that audit fees are representative of EA efforts. Using completed IAF work or relying on the IAF is expected to yield cost savings. Prawitt et al. (2011) find that IAF hours supporting EAs result in lower audit fees, yet there is no conclusive evidence that the time spent on such activities impacts fees or reliance, nor does it determine IAF quality.
Echoing these findings, Abbott et al. (2012a) report similar results, emphasizing that IAF hours supporting EAs can lead to reduced audit fees. However, this reduction is particularly prominent with increased IAF funding and audit committee control. Intriguingly, utilizing the IAF as a training ground for management is associated with increased audit fees (Messier et al., 2011), potentially due to elevated accounting risk. Notably, relying on previously completed IAF work, rather than seeking direct assistance, results in more substantial reductions in audit fees (Albawwat, 2022).
The study by Abdul Wahab et al. (2021) introduces the concept that high audit quality achieved through outsourced IAFs may prompt auditors to accept lower fees for providing non-audit services to clients. The correlation between IAF quality and audit fees, coupled with increased reliance on external auditors’ work, suggests that higher-quality IAFs foster greater dependence on external audit work, thereby reducing external audit costs (Mat Zain et al., 2015).
In summary, this analysis delves into the intricate dynamics of the IAF’s impact on EA fees and quality. It is evident that training use lowers fees, while audit committee influence decreases fees and enhances effectiveness. A competent IAF may raise charges but simultaneously enhances quality and attracts prestigious firms. Direct reliance on internal audits might not directly impact charges, but higher fees reduce reliance. The integration of internal and external audits emerges as a strategy to improve efficiency and outcomes. Effective collaboration with the IAF has the potential to reduce costs, highlighting the need for further research and the development of strategies for fostering enhanced auditor collaboration.
This section examines the nuanced impact of IAF on EA fees and quality, showcasing both positive and negative influences. Noteworthy findings reveal contrasting effects, with internal audit department size emerging as a pivotal factor influencing external auditor fees and audit quality. The assumption that audit fees reflect EA efforts is acknowledged, with studies exploring the relationship between IAF hours and resulting audit fees. The association between using IAF for management training and increased audit fees is indicated. Outsourcing IAF functions is linked to high audit quality and reduced external audit costs. The potential benefits of integrating internal and external audits for improved efficiency are implied but not explicitly outlined. Research gaps include the need for a more profound quantitative exploration of the impact of IAF utilization for management training on audit fees, elucidation of the causal relationship between IAF funding and fee reduction, and a comprehensive exploration of IAF outsourcing. Future research suggestions involve conducting quantitative analyses on the training impact of IAF, in-depth investigation of IAF funding impact, nuanced exploration of IAF outsourcing, validation of integration strategies, and comprehensive exploration of collaboration strategies with the IAF to reduce costs.
2.1.5. The Impact of IAF on EAs’ Reliance and Financial Statement Quality
Kaplan and Schultz’s (2006) survey, revealed that 88 percent of Chief Audit Executives (CAEs) reported External Auditor (EA) reliance on their IAF, signifies a pivotal relationship. While the impact of IAF reliance on audit effectiveness is acknowledged, its varied effects on the value of external audits are recognized. However, challenges arise due to limited public disclosures in standard audit reports, challenging assessing IAF reliance effects. This lack of accessible open data further complicates the measurement of IAF performance. Archambeault et al. (2008) highlight a critical issue—external stakeholders lack detailed IAF information, leading to information asymmetry that may reduce stakeholder confidence. Governance disclosures typically concentrate on management, the audit committee, and the External Auditor (EA), neglecting essential IAF details for external stakeholders.
Despite the acknowledged challenges of limited disclosure (Archambeault et al., 2008), our investigation into the impact of EAs’ reliance on IAFs on audit quality follows two key avenues: (1) extrapolating indirect effects from IAF’s influence on financial reporting and (2) reviewing limited research on the direct influence of IAF reliance on audit quality. Prawitt et al. (2009) posit that IAFs contribute to enhancing financial reporting quality by addressing incentive system flaws, as evidenced by confidential archive data. Lin et al. (2011) uncovered negative correlations between material weakness disclosures and IAF attributes such as staff education, the use of quality assurance techniques, auditing activities related to financial reporting, and monitoring remediation, based on archived data from 214 firms.
Stefaniak et al. (2012) add a nuanced layer by revealing that internal auditors identify more strongly with their employers than EAs do with clients. This heightened internal auditor employer identification leads to stricter control deficiency evaluations, while greater EAs’ client identification results in more lenient evaluations. This dynamic suggests that increased reliance on the IAF by EAs may improve audit quality with less lenient internal control deficiency judgments, influenced by employer and client identities. However, Bedard and Graham (2011) present differing results, indicating that EAs frequently override IAF assessments of control flaws, with IAFs considering them less severe. Bedard and Graham (2011) also emphasize that IAFs are less effective in detecting severe and extensive control flaws compared to EAs. This underscores the significance of EAs’ Section 404 control testing to identify weaknesses and cautions against excessive reliance on IAF without proper oversight, potentially impacting audit quality. Further research is essential to determine if the IAF can impartially assess internal control problems, as suggested by Stefaniak et al. (2012). Additionally, highlighting the significance of collaboration, improved cooperation between internal and external auditors has been identified as a factor crucial for enhancing the timeliness of financial reporting (Oussii & Boulila Taktak, 2018).