McKinney’s article details the steps internal auditors should take to thoroughly assess process controls, noting that testing decisions often “don’t go deep enough to uncover control failures.” The article covers adequate sampling, audit automation, understanding audit evidence, challenging control input instructions, scope limitations, and control design. By demonstrating the depth of their work methods, internal auditors can provide assurance to clients that processes work as intended, according to McKinney.
“For auditors, the concept of providing reasonable assurance sounds, well, reasonable,” he writes. “But what audit clients are really looking for is absolute assurance, which is typically not practical. However, auditors should strive to come as close to that standard as possible.”
In addition to the Keys Award, Internal Auditor recognized authors and articles for honorable mention:
- Alisanne Gilmore Allen, “Targeting Fraud With Data Analytics” (“Tech,” February 2022).
- Josh Christian, “Recovery vs. Continuity” (“Basics,” December 2022).
- Tolu Ogunseye, “A Complementary Approach” (“Risk,” June 2022).
- Muhammad Hassan Rizvi, “Data-enabled Internal Auditing” (“Basics,” February 2022).
- Rick Wright, “Risk Acceptance” (“Risk,” February 2022).
The Ted Keys Award is named for Elmer Theodore Keys Jr., a frequent writer for Internal Auditor. Winning articles are selected for outstanding quality, clear presentation of ideas, practicality, and relevance to internal audit practices.