These links shouldn’t change over time. They are mainly confined to UK And US sites but there should be information which is generally applicable to internal audit. The list is not complete but hopefully does provide some useful information. Some sites require membership to access some information. All links open in a new window.

Official standard setting organizations (US)

Public Company Accounts Oversight Board (PCAOB) (pcaobus.org)

The PCAOB is a nonprofit corporation established by Congress to oversee the audits of public companies in order to protect the interests of investors and further the public interest in the preparation of informative, accurate and independent audit reports. Although its standards relate to external auditors, they are very relevant to internal auditors.

COSO (coso.org)

The Committee of Sponsoring Organizations of the Treadway Commission (COSO) is a joint initiative of five private sector organizations and is dedicated to providing thought leadership through the development of frameworks and guidance on enterprise risk management, internal control and fraud deterrence. Its publications are very influential in setting internal audit policy.

Official standard setting organizations (UK)

Financial Reporting Council (frc.org.uk)

The Financial Reporting Council is the UK’s independent regulator responsible for promoting high quality corporate governance and reporting to foster investment. The UK Corporate Governance Code is particularly relevant to internal auditors.

Official standard setting organizations (India)

The Institute of Chartered Accountants of India

(http://www.icai.org)

The Institute sets standards for internal auditing in India. Search on ‘internal audit’

Other standard setting organizations

Institute of Internal Auditors (global)

(https://global.theiia.org/Pages/globaliiaHome.aspx)

The Institute sets global standards for the internal audit profession.

ISACA (isaca.org)

ISACA provides practical guidance, benchmarks and other effective tools for all enterprises that use information systems.

Risk standards - Federation of European Risk Management Associations - FERMA (ferma.eu)

The FERMA site has standards for risks management and guides to the ISO31000 standards