Global Internal Audit Standards™ software framework

Implement internal audit framework with comprehensive audit standards software that ensures global audit excellence.

Overview

An updated framework for 2025

The IIA's Global Internal Audit Standards™  are a framework for delivering effective, ethical and independent assurance services. The Standards are designed to promote the quality and consistency of internal audit work across different industries and locations. As of January 2025, an updated framework will be applied. This brings the Standards in line with the changing risk environment. 

  • Promote quality and consistency
  • Improve ethical oversight
  • Support good governance
SINGLE-IMAGE_office-workers-in-meeting-no-squares_mar24

The benefits of following the Global Internal Audit Standards™

Following the Standards gives internal auditors a ‘gold standard’ of best practice. Externally, it shows auditors, your investors and the people who use your company’s services that you have a robust approach to internal controls and ethics. Internally, it helps to clarify the importance of internal audit and a commitment to high standards.

  • Demonstrate high standards
  • Boost internal audit’s reputation
  • Align to the company’s strategic goals
SINGLE-IMAGE_meeting-man-making-point_sept23

Create a culture of good governance

Internal audit plays a crucial role in good governance. This involves taking an objective approach to their work, and being able to highlight any unethical behaviors within the company. The IIA Standards support this with a framework for reporting information in a transparent way and keeping adequate audit trails.

SINGLE-IMAGE_man-writing-laptop_apr25

Meeting the requirements of Global Internal Audit Standards™

Global Internal Audit Standards ™ FAQs

Who do the standards apply to?

The Standards are designed to apply to any industry and location. promote the quality and consistency of internal audit work across different industries and locations.

Are companies legally mandated to apply the Standards?

No - but it is widely recognized as best practice. Compliance with these standards demonstrates a commitment to high-quality and reliable audit practices, which can significantly enhance the credibility and reputation of an internal audit function – and the company as a whole.

What’s changing in 2025?

The Global Internal Audit Standards ™ are being updated to reflect how the risk landscape has changed, and the challenges this presents to internal audit teams. It gives internal audit teams more guidance on how to be aligned to risk, so that they can have more influence as strategic advisors.

Is there a deadline for applying the new standards?

As it's not a legal requirement to apply the 2025 Internal Audit Standards, there is no formal deadline to implement them. The IIA does recommend that you consider when your next quality assessment is due. The Standards will be effective for quality assessments from January 9th 2025

How can I prepare for the new Standards?

Familiarize yourself with the details of the new Standards; assess your current audit processes and how aligned they are to the company’s risk priorities; consider how the new Standards might impact any other processes or workflows; assess the effectiveness of existing reporting and communication channels.

Supplier qualification cycle time: where do the weeks go and which can you cut?

Split supplier qualification cycle time into queue and review time, then apply four fixes that cut the wait for UK companies without skipping a check.

ISO 37301 and ISO 19011 explained: compliance and audit standards

What is ISO 37301? Plain definitions of ISO 37301 and ISO 19011, what each requires, and how the compliance and audit standards work together.

Building a compliance program: monitoring, audits and training

What is a compliance program? Learn what a compliance audit, compliance monitoring and compliance training are and how to build each one.

Security frameworks explained: ISO 27001, SOC 2 and NIST

What is ISO 27001, what is NIST and what is SOC 2? Plain definitions, key requirements and how the security frameworks compare.

UK regulators, standards-setters and company law explained (ICO, FRC, CIPFA, Companies Act)

What are the Public Sector Internal Audit Standards, CIPFA and the ICO? Plain definitions plus the FRC and Companies Act 2006, with practical steps.

How to manage climate and cyber risk

What is climate risk and what is cyber risk? Plain definitions, types, examples and how to assess and manage both in one enterprise risk process.

Data privacy laws explained: GDPR, UK GDPR, CCPA and CPRA

What is GDPR, UK GDPR, CCPA and CPRA? Plain definitions, key differences and the practical steps for managing data privacy compliance.

Compliance and regulatory compliance explained

What is compliance and what is regulatory compliance? Get plain definitions, examples and a seven-step way to manage regulatory obligations

Code of conduct, whistleblowing policy and conflict of interest explained

What is a code of conduct, a whistleblowing policy and a conflict of interest? Plain definitions, examples and how to put each policy into practice.

Sustainability reporting frameworks explained (CSRD, ISSB, TCFD, SECR, ESOS)

What is ESOS and what is SECR? Plain definitions and practical steps, plus a short guide to CSRD, ISSB and TCFD for sustainability reporting teams.