Which arrangement best supports independence of internal auditors?

• A. The internal auditors report to the audit committee.
• B. The internal auditors report to external auditors.
• C. The internal auditors report to the CEO.
• D. The internal auditors report to shareholders.

Answer: (A)

Independence is strongest when the internal audit function reports to the board’s governance body responsible for oversight of controls, risk, and compliance—the audit committee. This direct reporting line protects the auditors from day-to-day management pressure, giving them clear access to the board, the authority to speak freely, and the credibility to present findings objectively. With the audit committee overseeing the function, internal auditors can focus on identifying weaknesses and recommending improvements without concern for management filtering or retaliation, which preserves objectivity and trust in the audit results.

If internal auditors were to report to external auditors, the relationship would be awkward and could blur accountability, since external firms are engaged to audit the company, not to govern its internal controls. This could undermine the independence of the internal audit function. Reporting to the CEO creates a direct risk of management interference, undermining objectivity, prioritization, and the willingness to report unfavorable findings. Reporting to shareholders is impractical for day-to-day governance and does not provide the ongoing oversight necessary to maintain independence within the organization.