Blurred lines: exploring internal auditor involvement in the local authority risk management function

The internal audit remit includes assessing budgetary compliance by departments, investigating fraud and error, appraising systems of control and undertaking consulting, the last including risk management even though internal auditors generally lack risk training and expertise. Surveying internal auditors in Scottish local authorities, this paper investigates discrepancies between professional guidance and current practice regarding the risk management remit of internal audit. Lines of responsibility were found to be blurred, so there were insufficient safeguards to ensure compliance and the roles and responsibilities of internal audit involvement in risk management assurance did not fully comply with professional guidance.