The Risk-based Role of Internal Audit within Albania, Public Organizations

The aspiration of Albania for European integration has added mandatory requirements for public sector to modernize the internal audit function in adherence with International Internal Auditing Standards. According to such Standards supported by Picket (2005) and CIPFA (2003) the internal audit is an assurance function that provides independent opinion on the effectiveness of internal controls that support the achievement of the organizations objectives. Internal auditors can provide consultancy service, in particular to aid management to improve the organization control environment. Meanwhile, Diamond (2002) explains that the internal audit role, remit, scope and activities are driven by the macroeconomic objectives and political stabilization. For those countries with governance problems the first objective is to ensure compliance with financial laws and regulations. Therefore, the most suitable approach for the internal audit is the compliance auditing to attain macroeconomic stabilization objectives. Therefore, the main question around which this paper is based is whether the public sector in Albania is ready to adopt the modern model of internal audit moving beyond the traditional compliance and financial remit to comply with recognized International Internal Audit Standards. This paper finds that although changes in Albanian normative framework since 2007, internal audit within government organizations are still adopting traditional approach of internal audit involving financial inspections rather than performance auditing activities aiming to provide opinion on risk management, control and governance. This paper analyzes that the embryonic risk culture of Albanian public sector, the lack of skilled internal audit resources and a little understanding of both managers and internal auditors with regard to the contribution of internal audit in risk management and corporate governance system aimed at achieving the government organizations objectives are the main reasons why the risk based model and consultancy role of internal auditors is not yet applied. Therefore, this paper recommends the internal auditors to perform additional consultancy tasks to enhance the internal control system and build the risk management methodologies and structures due to the management lack of knowledge. As soon as the organizations become risk mature the internal auditors can provide assurance appraisal service based on risks. The Practice Advisory Standard 1000 recommends principles which should be used as guidance for regulatory framework of internal audit function within Albania, public sector, guiding internal auditors in order for them to maintain their independence, objectivity and due professional care while conducting consulting service