Norman’s Principles for Effective Internal Auditing

I am in the midst of writing a new book and decided I needed to define my core principles for effective internal auditing.

I know the IIA has defined core principles (I was part of that effort), but they include aspects like independence which is more about how internal audit functions rather than what they need to do.

I would very much appreciate your review and comments/criticisms of these:

• Provide the Audit Committee and management with the assurance, advice, and insight they need on what matters now and will matter in the future to the success of the business.
• Provide the actionable information they need when they need it.
• Be agile and efficient in both planning and execution of every audit engagement.
• Focus on what matters and exclude from scope anything that does not matter.
• Write (and otherwise communicate) for the time-limited, speed-reading executive. Don’t waste anybody’s time but get the message across and drive action!
• Work with management[1] to ensure they can rely on their processes, systems, organization, and controls as they direct and manage the company to achieve its objectives.
• Measure the success of internal audit by the success of the company, not…