GOAL
This policy aims to describe the guidelines observed by the Internal Audit Team when conducting its work. The expected standards of conduct, business specifics, and the focus on the security and reliability of information are considered, and most importantly, always mitigating any risks. When applicable, such criteria are also covered by specific standards and procedures, being published and made available to the entire organization.
PRINCIPLES
Integrity and ethics: Auditors must be honest and ethical to ensure reliability and confidentiality in their judgments and work.
Objectivity and independence: Auditors must not be influenced by their own interests or those of third parties when making judgments, and their reports must remain impartial.
Confidentiality: Auditors must respect the ownership of information and not disclose it without proper authorization.
Competence: Auditors must possess and apply the necessary knowledge, skills, and experience to perform the role of internal auditing.
Due diligence: Auditors must ensure their professional behavior is appropriate, avoiding any conduct that may discredit their work.
Professional skepticism: The auditor's ability to identify and respond to conditions that may show possible misstatement.
Judgment, consideration, and agility: The auditor must be agile in conducting their work, and judgments must be prudent, in addition to being directly linked to the application of the audit team's knowledge, skills, and experience.
Team and skills management: Audit team members must collectively possess the knowledge, skills, and competencies necessary to perform the work. This includes understanding and practical experience of the type of audit being performed, being familiar with applicable standards and legislation, understanding the company's operations, and being able to exercise professional judgment based on experience.
Auditors must maintain their professional competence through continuous professional development.
Documentation: Auditing documentation must include a strategy and plan. The procedures performed and evidence obtained must be recorded in such documents, as well as support the communication of audit results. The documentation must be sufficiently detailed to allow senior management to understand the nature, scope, and results of the procedures performed at the time, even without prior knowledge. Additionally, it should include the evidence obtained to support the audit conclusions and recommendations, as well as the reasoning behind all relevant issues needed for the exercise of professional judgment and the corresponding conclusions.
Communication: The audited sector must be kept informed on all work-related issues. This is the key to developing a constructive working relationship. Communication must include the obtaining of information relevant to the audit and making timely observations and audit findings available to management.
Relationship: The auditor must interact in a friendly and respectful manner with all departments, aiming to contribute to the company's positive environment.
Humbleness: The auditor must assume their responsibilities, without arrogance, hubris, or pride.