During my travels over the past five years, I have had the opportunity to speak with many audit committee chairmen of leading corporations in the United States and Europe. One of the questions I invariably posed during my conversations was: “what is your foremost expectation out of internal auditing?” With amazing regularity, the response came back: “no surprises.” By “no surprises,” the chairmen (in reflecting the views of themselves and their fellow audit committee members) were suggesting that internal auditing should identify issues before they became a major problem for the company — and by extension — the audit committee.
At first glance, an expectation of no surprises might seem like a reasonable expectation.…