Performance
INTRODUCTION
In Chapter l, we introduced the concept ofthe 3 Es ofeffectiveness, efficiency and
economy using the model and definitions shown in Figure 2.1.
f,
IEconomy] lefecti,lrenessl
(the ratiobetween (the ratio ol ac-tual
planned inputs and ouFrrts to danned
actual inputs in ouFrts)
terms ol unit costs) I
I
I
PLANNED
PI.ANNED OUTPUTS
INPUTS [i.e.Objectives]
In this chapter we build on this premise and explore the related subjects of
measuring operational performancc and value for money auditing.
trn order to bring all the relevant issucs closer to home, we conclude this chapter
by applying thc principles of performance measurement to the internal auditing
function itself.
Overview
During thc course of a review of an operational area, the auditor is often faced
with the nccd eithcr to set the review findings into an appropriate context, or to
indicatc tbc performance of the arca under review against thc criteria previously
establishcd by management.
In most cases, it is prcferable to utilisc the measurement standards and criteria
put in plaa by management as this results in the auditor using a oommon dnd
compatiblc language when communicating results and points of concern.
Conversely, if the auditor chooses to us€ a new, alternativc or perhaps radical
form of performanae measure, this may influence or jeopardise management's
view of the auditor's findings. This is not to say that auditors should only adopt
the prevailing measurement criteria established by management, as therc may be a
compelling reason for introducing anothcr objective form of performance
ass€ssment in some cases. Whatever the form of measurement applied, its use
must be founded on both a@urate and reliable data and a provbn method,
otherwise thc credibility of internal audit will suffer.
Although it is important to establish a reliable and meaningful vocabulary for
the measureinent of performance in key operations, auditors must not losc sight
of the fact that iuch measures can only point to potential areas of improvement
and do not of themselves offer solutions.l Assuming that the conclusions drawn
rHE OPERATIONAL AUDITING HANDBOOK
from the review ofsuch criteria are accurate and relative, they can then be used to
frame and support audit recommendations and the appropriate corrective
action(s).
In their use of performance measurement, auditors should be careful not to
supplant management's use and interpretation of the same criteria. On the one
hand, it may be legitimate for an auditor to investigate further the lack of
management response to an adverse measurement indicator, but this does not
necessarily mean that management has abdicated their basic responsibility for
monitoring and control. This underlines a basic truism, in that measurement
data is provided for interpretation and unless there is a formal measurement
protocol in place, there may be the potential for differing conclusions to bc
drawn from the same data. This stresses the importance of formally
ctablishing, for the organisation, a performance measurement policy and
framework so that all concerned are clear about the nature of the data and
how to usc it in practice. Additionally, the creation and communication of
corporate targets and goals can remove (or at least contain) some of the
anbiguity associated with the required level of performance and expected level
of associated achievement.
Each operational audit review project will present the auditor with a
challenge to identify the most appropriate and meaningful performance
measures to utilise, whether or not such criteria are already applied within
the organisation.
Indicate thc volume of output, whether services, products or other, and when
linked to mcasures of input of resources, give useful information on quality or
quantity matters.
Exarnples:
o Number of users.
o Number of units produced.
o Number bf books in a library.
r Percentage offirst class degrees in a university.
€VATUATING OPERAT]ONAL PERFORMANCE I5
These may hiShtight waste in the provision of rcsourccs indicating that the same
resources may bc provided more cheaply or that morc enterprise may be
conducted at thc samc cost.
Exonples:
o Cost of actual input in comparison with planned input.
o Cleaning costs per hour worked.
r Maintenance costs per unit area.
o Cost of thc finance function pcr 100 staff.
o Cost of the chief exccutive's department per l00O clients.
Examples:
o Ratio of actual input to actual output.
o Breakdown per production day.
o Accidents at work per 1000 pcrsonnel.
o Dcgree su@ess in comparison to school examinatioo grades.
Exatnples:
o Actual output in comparison to planned output.
o Degree su@ess (in a college or university).
o Rescarch o.utput per 100 research staff.
o Ratio of customer complaints to sales.
Exarnples:
Valuc for money auditing takes account of the 3 Es. It frequently makes extensive
use of performance indicators in the form of ratios and other statistics to give an
indication of value for money-espccially whcn trends are explored in these
performance indicators over time, or variations in performance are identified and
explained between different operating units.
The term value for money is often applied to public sector spending in the UK,
where there is an implied obligation placed on public bodies to ensure that they
obtain and provide services on the most economic grounds. This process
invariably involves elements of competition where cost comparisons are made
between parties being invited to supply goods and services. For exampte, many
services within UK local government have been put out to tender in order to
obtain the "best deal", and very often this tendering process has also included the
internal department or function that had previously been supplying the scrvice.
This striving for procurement on a least casl basis appears to b€ very logical
and represent common sense, especially where the expenditure of public funds is
involved. However, it is equally important to consider whether the porcntial
scrvice provider (or supplier or contractor) can meet the required quality and
pcrformance standards as well. Therefore, any consideration of value for money
must take in quality and performance achievement factors as well, as Oere may be
serious commercial or operational implications if the relevant services/goods arc
not up to a given standard.
Value for moncy auditing will involve the assessment of an appropriate range of
performance measurement criteria. It could be asked that unless management
have clearly established their own basis for measuring and assessing the supply of
goods and the provision of services, why did they embark on the pr(rcess in first
place? In other words, what was their driving motivation in cither fulfilling the
requirements or seeking alternatives?
In both the management and audit assessment of matters of value for money,
the usual approach is to make comparisons with a range of options or possible
solutions to thc principal problem. These comparisons should be conducted as
scientifically and objectively as possible and utilise appropriate measurement
means. This part of the process begins with realistically idintifying all the
practical options and alternatives (perhaps including doing nothing at alt).
In a more formal environment (for example, where acquiring new computing
facilities) it may be necessary and desirable to go through a detailed feasibility study
as part of an overall project appraisal process. This can then incorporate the
appropriate cost and performance comparisons which underline the determination
fVALUATING OPERATIONAI PERFORMANCE l7
of value for money. In such scenarios, it is important that the auditor is content with
the chosea assessment mechanism and measurement criteria so that, taken together,
the appropriate reassurance can be derived that the process is sound and accuratc. In
somc instances it may be neccssary for the auditors to recommend improvements in
thesc areas to add value to the proccss, whilst avoiding usurping managernent's
ultimate responsibility for their system.
Whethcr or not a formal procedure is in place to dctermine generally the
achievement of value for money, the internal audit function may be required (or
indeed obliged) independently to assess such matters on behalf of management.
Auditors should always avoid taking on activities which should, in the fust place,
bc the rcsponsibility of management. Howcver, wherc internd audit has a
legitimate role to play, auditors should endeavour to identify all the probable
options and the most suitable basis on which they should be measured and
assessed in value terms.
In order to avoid any potential problems at the conclusion of their assessment,
auditors should consider discussing their proposed assessment and measurement
critcria with managernent at the outs€t, and furthcrmore to obtain the agreemcnt
of uranagement on the applied methodology. In certain sectors and industries,
recognised criteria may already exist and so it may not be necessary for auditors
to develop their own process.
BENCHMARKINC
r the internal auditing trends and practices as applied by the companies surveycd
o the implications and porential of the nnoings foi the p"iti"ip"rrt,, o*o
organisation
r the validity of the participant's own stance on internal auditing in relation to
that apparent from the survey data.
Involvement in such exercises will enable participants to take a view of the need
for change or review of their own organisation's approach to internal auditing in
ligbt of the survey data.
of course, benchmarking is not an end in itself, but rather one platform used to
idgntify and subsequently launch the required or neoessary proorr", of change
within a department, function, activity, process or organisatiron.
lntroduction
Competitive Tendering
Even where internal auditing is a mandatory requirement the current vogue for
compctitive tendcring makes inrcrnal auditing a prime candidatc for market
testing and contracting out.3 Established in-house internal auditing functions find
thcy arc rcndering compctitivcly against firms of public accountants, consultants
spocialising in intcrnal auditing and other in-housc internal auditing functions
who have bccn given thc frccdom to tendcr for extcrnal work. To win the
contract, thesc outside parties may bc willing to bid at marginal cost-+specially if
they have surplus capacity. Bids at €150 (compared with the f400 quoted abovc)
per day are not unknown.
The many arguments for and against an cnterprise contracting out its intcrnal
auditing are summarised below. An aspcct that has been largely overlooked is that
performance me:rsures for internal audit are particularly important for providing
the means of establishing performance-related contracts for internal audit
provision, and for monitoring its ongoing provision after thc contract has been
let.
with the bias being towards accepting lowest cost bids, it is particularly
important to devise and use internal audit performanc€ measures which focus
upon outpuls first, process second and tnputs last-this categorisation is
followed in this discussion. Each of these three is, of course, important. senior
general managembnt and the board responsible for contracting out decisions
should ensure that this sort of internal audit performance monitoring is in
rHE OPEMTIONAL AUDITING HANDBOOK
place. In-house heads of internal audit can influence management and the
board towards this and, in so doing, should be maximising their own
opportunities for securing into the future the internal audit work for their in-
house internal audit departrnents.
If management and the board allow daisions on letting contracts for internal
audit work to be made on price alone, rather than value for money, they are
acting irresponsibly. Decisions on price alone betray a lack of commitment to the
value of internal auditing-perhaps merely a resignation to the provision of a
skeletal internal audit service due to statutory or regulatory obligations. Even in
enterprises with acute cash flow problems, decisions on price alone are unjustified
as it is espccially important that such businesses maximise value.
Since (a) mandatory obligation to have internal auditing and (b) cash flow
difficulties often come together within the public sector, it is within that sector
that wc are currently experiencing most pressure to contract out internal auditing
on price grounds alone.
l. The business can more readily vary its spend on internal auditing, according
to what it can afford, from time to time.
2. The contractor is motivated to perform well and can be held to account for
that performance.
3. The provider can be changed more easily.
4. The servicc may be provided at a lower price.
5. An external provider may have a wider understanding as to how other
enterprises tackle similar business issues.
6. An external provider may have more extensive audit support resour@s to
draw upon.
7. An external provider may be able to develop the enterprise's own staff.
8. The actual and perceived independence of au cxtemal provider may bc
greater-leading to more confidence in the results of the audit work.
The Standards of The Institute of Internal Auditorsa have a specific standard that
"the chief internal auditor should establish plans to carry out the responsibilities
of the internal auditing department". Supporting guidelines require that "these
plans should be consistent with the internal auditing department's charter and
with the goals of the organisation", and that "the goals of the iaternal auditing
department should be capable of being established within specified operating
plans and budgets and, to the extent possible should be measurable. They should
be accompanied by measurement criteria and targeted dates of accomplishment."
These Standards also require that "The chief internal auditor should establish and
maintain a quality assurance programme to evaluate the opcrations of the internal
auditing department", and this is elaborated ia, inter alia, the statement that "A
key criterion against which an internal auditing department should be measured is
its charter". Quality assuran@ is seen as being preservcd by means of supervision,
intemal reviews and external reviews. These rcviews are "performed to appraise
the quality of the department's operations" and should be "structured to evaluate
the degrec of compliancc with the Standards" themselvcs.
So it is clear that the Institute of Internal Auditors eonsiders that there should
be performan€ measures of an internal auditing department and that these
should include an evaluation of compliance with the Charter of the department
and also with the Standards of the Institute; they should also include a
measurement of the achievement of target dates.
The UK's Consultative Committee of Accountancy Bodies (CCAB) is less
forthcoming. Their guidance to their memberss mercly says: "The head of internal
audit should establish arrangements to evaluate the performance of the internal
audit unit. He [sfcJ may also prepare an annual report to management on the
activity of the internal audit unit in which he [srl gives an assessment of how
effectively the objectives of the function have been met."
Measures of intcrnal audit pcrformancc have tended to focus upon inpul and
process rathet than upon output. Auditors will understand the association between
thesc three and economy, effciency and effectivene.rs, respectivcly, as illustrated in
Figure 2.1. The greatest challenge is now to develop a rangc of measures which
throw light upon internal audit effectiveness (i.e. output measures).
"i.:ii:r::'
t.)- i
;:+:?
.ry t*tn ouFcq , lBopc
.i:l.,ta lw !t!l?;... '., ,. ,... .x,:;,,;;:
n - .' '..+',;.:; ,, ,;ii.t::,..!, r!:i :t:liL:,i1,f--1;i, . t:
Performane measures with a higher degree of objwtivity than others are Dot
necessarily the preferred ones to use: the criteria for selection of a pcrformance
measure should include a matching to the aspects of internal audit performance
which are most important and which need to be monitored most.
Of crucid importance is to determine which aspects of internal audit
performance are most important and which need to be monitored most. Strictly
speaking, an aspect of internal audit performance could be of first importance
while not noeding to be monitored so closely as other aspects-y'its achievement
were assured or, occasionally, if it were outside the scope of management to
regulate its achievement.
Using our modcl of input, process and output, we now considcr for each of these
caiegories the most important aspects of performance as thcy relatc to internal
audit. Some measures of performancc infonn about more than one of these
categories. For instance, the success of the internal auditing function in
completing its planned progr:unme of audits relates closely to whether the
function has achicved its objectives (planned outputs) but it also gives potential
insighs as to whether the function has approached its work cfficiently (process).
Another example of this overlap bctrpeen categories of performance measure is
the climt satisfaction survey (see Figure 2.2 for an example) which provides data
on the reputation of audit. To some extent this will result from the judgement that
management has made about the professionalism of internal auditors they have
observed in action (audit process); to somc cxtent tlte answers will depend on
management's experience of thc valuc of audit findings and recommendations
(audit output). Some of the questions put to management in the survey will be
targeted more to process than to output, and vice versa; but the impressions that
management have about the professionalism of the audit process are likely to
colour their answers to questions targeted at audit outpug and thcir satisfaction
with the audit output is likely to colour their impression of the audit process.
lnput Measures
Thcse pcrforrnanoe measures throw ligbt upon the oconomy with which the
intcrnal auditing activity is provided-whether by in-house provision or by
external providers. Possible candidates for use as oconomy measures are:
r budget actual
r cost per auditor day
o ratio ofpayroll to other costs
. comparison between audit sections
. comparison with previous periods.
o Allocation of productive time according to type of work (audit type; audit and
non-audit work'[such as firefighting] etc.)
o Extent audit staff are stretched.
rHE OPERATIONAL AUDITINC HANDBOOK
Process Measures
The emphasis with respect to process measures is the efficiency with which the
internal audit activity functions. The efficiency analogy with an automobile is
whether it ruris as a well-oiled, well-maintained machine. This is distinct from the
costs associated with running the automobile, which are matters of economy.ltis
EVALUATING OPERATIONAL PERFORMANCE 25
also distinct from whetler or not the automobile achieves thc objectivcs set for
it-such as luxury, prestige, timeliness, ctc.-which is a matter of effectiveness. of
course, these threoverlap, as we have'said before: a poorly maintained
automobile is less likely to be effective, for instance.
See Figure 2.3 for a breakdown of proccss performanoe measures.
our model in Figure 2.1 shows that eficiencybnks economy with effectiveness.
Perhaps a good overall measure ofaudit efficiency is therefore the average cost of
each implemented audit recomnendation.
Insigbt into the audit function's ovcrall efficiency will come from exploring the
achievement of target dates and the extent that audit management has bcen
successful in maximising auditors' time actually spent conducting airdits and,
within that productive time, the way it has becn allocated and supervised.
The audit client may also have some useful impressions about the
professionalism of thc audit approach which can be explored in a survey-see
Figure 2.2. T\e main measure of professionalism of internal auditing is generally
held to be The Standards for The Professional Practice of Internal Auditing of the
26 THE OPEMTIONAT AUDITINC HANDBOOK
Output Measures
Here we are considering (a) whether or not internal audit achieves its objectives,
and (b) indeed, even whether it achieves the right objectives.
The Charter of the internal auditing function, as a statement of the distinctive
rights and obligations of the audit function, is an important yardstick against
which audit elfcctiveness or output should be measured. C.ertain elements of the
Standards also relate to audit effectivcness as distinct from audit process.
Audit output is hard to measure. Internal auditors are knowledge workers
whose output is not always tangible. Knowledge workcrs conventionally issue
reports and internat auditors are no exccption. Internal audit reports are a
repository of information on audit output. Perhaps the principal objectives of
internal auditors is to reassure management that their systems of intcrnal control
are sound and, where they are not, to persuade management to implement their
rcommendations. Figure 2.4 summarises the implicit or explicit objectives of
internal auditing.
:ii}
.;"i
'.il
An analysis of the findings in audit reports can measure the success of the
department i'r identifying non-compliancc with esscntial controls-perhaps
comparing with the previous year, or comparing the success of differcnt audit
teams, or comparing the succcss of the audit function in certain areas of audit
work compared to other areas.
With rcgard to points (3) and (4) in figure 2.5, a similar analysis of (a) past audit
reports and O) audit records of audit follow-up should allow a neasurement
similar to the example in Tablc 2.1. Admittedly this is an inexact set of
m€a$ufcs-it Presumce, for instanoe, that success can be asscsscd. Even where it
can be asscssod, the time delay is likely to be too great to make it a useful measure
of inrcrnal audit performance. So it might be more practical to measure in
accordance with Tablc 2.1 but stopping short of trying to evaluatc wbether or not
an implemented audit recommeadation was successful.
It nay bc possiblc to attach money values to cost savings which follow
management's acceptance and subseguent conrction/implementation of audit
findings and recommendations in points (2), (3) and (4) of Figure 2.4. Ir will,
Table 2.1 Example of internal audit reporting success
however, never be possible to account for the total value of the audit function to the
business as a whole in terms of cost savings. The impact on costs of many accepted
and implemented audit recommendations is indeterminable, as usually we will never
know what would have happened if management had not so acted. Nevertheless, a
historical record of known cost savings which have followed from audit work can
give one indication of audit value for money. It is, however, human nature to
overlook the additional costs which are often associated with points (2), (3) and (4)
Internal audit also tends to take credit for good suggestions from line staff.
Certainly, management and staffshould be given credit for successful implementa-
tion of audit rwommendations. In measuring cost savings it is difficult to determine
the length of time into the future that the audit department should compute the
saving: the decision is arbitrary. For instancc, if the audit department takes credit for
savings over a twelve-month period, this overlooks that the business may continue
to benefit from that audit finding indefinitely. Despite these objections, measuring
cost savings does have a place in the assessment of audit effectiveness.
Figure 2.6 highlights some of the issues which affect audit independence.
€VATUATINC OPERATIONAL PERFORMANCT 29
1.
2.
8.
a
a
7.
&
3.
I ili1:':
'. .;. l
;.1[:
':.1.i
A Value for Money Approach to Evaluating lnternal Audit, Using Performance Measures
In esscnce, value for money auditing endeavours to assess economy, efficiency and
effectiveness, making use of carefully chosen and carefully interpreted
performane measures. So the approach we havc taken is a value for money
approach to evaluating the internal auditing function.
A refinement of the value for money audit approach is to organise the chosen
performaace measures into three hierarchies, where the more junior levels of
performanoe measures are intended to interpret the measurement of the more
senior ones. The most scnior measure in each hierarchy is intended to most
aocurately rcflect the most important measure of cconomy (or effciency, or
effectiveness). Examples of these structures are given in Figures 2.7,2.8 and 2.9.
Cost of audit as a
proponion ol totral @rporate
operating costs
Figare 2J Economy (inputs) measures in the context of a value for money approach
TVALUATING OPEMTIONAL PERFORMANCE
Accounting
and financial
audits
Figure 2.8 Efficiency (processl measures in the context of a value for money approach
Figure 2.9 Effectiveness (outputs) measures in the context of a value for money approach
32 THE OPERATIONAL AUDITINC HANDBOOK
It is no longer sufficient for audit to view the historic reasons for its establishment as
justification lor its continued existcnce. Audit must and should be prepared to provide
broof of its worth and value for money to the organisation as part of the organisation's
continual growth.l2
NOTES