CSO REPORTS Item Austria Belgium Bulgaria Finland France Germany Italy Netherlands Norway Spain Sweden UK & Ireland No. of members 285 company members, 65 1,340 and goal of 1,500 379, still growing 656 3400 end 2007; expected 3700 end 1868 2750 2,000, expected to grow through 722, still growing 1880 target 3.000 in 2009 645. Growing at approx 10% a year 8,279 at 31.3.08 - still growing - personal members 2008 1264 personal 604 company 2,500 and further after integration (target 1 000 members in 2011) target 10,000 members with VRO (end 2007) No. of organisations 360 about 700 290 190 380 145 Division of members 15% manufacturing, 42% financial services 32% private sector, 20% services (including big 33.6% services (including big four), Corporate Members: 28% banking, financial and 27% manufacturing, 29% government/public sector, 10% public sector, 30 % public sector, 31% public sector, into industry groups 40% financial industry, 21% government (180 19% financial industry, four), 24.4% government, Services:12,3%; insurance, 40% financial industry, 23% financial industry, 40% industry and commerce, 21 % financial sector (20 % of which 25% industry and commerce, (mfg / finindustry / 25% government, members from EC) 49% government 25% government, 21.8% banking sector, Energy: 9,5%; 22% communication & tranport, 23% government, 24% industry, 30% financial services, the 4 major banks), 23% financial services, services / govt) 10% services (mainly big-four + 12% manufacturing services 20% financial sector (banking, 13.8% industry, Retail: 6,4%; 20% services, 8% services (mainly big-four + 16% big four/consultants, 15% professional firms, 6 % insurance sector 15% professional firms, universities) 13 % services (mainly big four insurance), 6.4% insurance Industry: 21,6%; 19% manufacturing, universities) 8% students and individual 5% no company 18% consultants (essentially Big 2% voluntary sector, + universities) 7% Transport & 30% industry, Banking: 32,3%; 10% PA members Four growing rapidly due to SOx and 4% no company. Communication 5 % Others 5% retired. Public Law: 4,3%; Swedish "mini-Sox", but also IT Assurances: 10,5%; audit consultants) Accountants: 2%;; 19 % private sector (growing rapidly Personal Members: due to SOx and Swedish "mini-Sox", Services:14,7%; 7% Students. We recently Energy: 5,6%; introduced a student cathegory, and Retail: 3,9%; now have some 50 student Industry: 19,2%; members. Banking: 27%; Public Law: 9,1%; Assurances: 6,3%; Accountants: 10,9% No. of volunteers ~ 15 41 engaged in Committees Around 20 on paper in different About 40 (board and committee about 150, 60 About 120 About 50 regular 8 Board Members and about 70 in 15 10 Board members and some 30 on 200+ committee members, trainers, committees, but less than 10 members) (plus 45 for the International different Committees. the committees, in total 1/2- 1 man- examiners etc are active Conference) year Annual Turnover / 550,000 Euros/10,000 Euros 420 k Euros / 10 k Euros 4300 Keuros, exoected 6000 Keuros 1 million Euros / 483 k Euros / 73 k Euros 1,6 Million € / 200k € 680 k Euros/Loss of 40 k in 2007 Euros 6.6 million Net Income in 2008 //170Keuros 205 k Euros but expect a profit again in 2008 of some 40 k (raising service fee and No international 2 1 IIA 4 (IRC, COQ, Advanced 3 6: 4 1 higher volume of courses) 4: IIA Global total = 4: volunteers Technology, Board of Regents, - Board of Directors - Board of Trustees - Board og Regents (BOR) - Research Foundation 1x Global board member plus 2 x Board of Directors) - Committee on Quality (CoQ) - PIC - Professional Issues Committee - IRC global committee members - ECIIA : 1 (MB) - Communications Advisory - Academic Relations (PIC) - Academic relations Standards, IRC UFAI : 1 Committee - Government Audit - Advanced Technology Committee - ECIIA MB ECIIA - 1 Management Board - Advanced Technology Committee - Ethics Ctee (ATC) member (ATC) - International Conferences - BREA (nomination 2008) (not yet clear how many will remain in 2008) Governance (board / 7 board members, 9 board members, 1 Chairman of the Board + 6 10 directors, 17 elected Directors ; 1 ex officio 9 Members of Board of Directors 10 directors, currently 11 board members, 8 board members 12 Board members 10 Board members + 1 Secretary Maximum 15 directors: committee structure) 2 board sections (Education, 3 board members in Exec Board members 8 committees Director for 2 years (former (Executive Board), 11 commitees, Audit commitee, 4 board sections (Executive, 8 committees General (co-opted). 6 regional directors, Communication), and 8 committees president )1 honorary Director ; 4 10 Members of Supervisory Board Nomination committee, Ethics Professional Issues, Education, - Public Realtions 6 committees: 5 directors at large, 9 permanent branch working committees : Audit committee, Committee Communication), - National Conference - Education, 2 co-opted directors, groups Nomination committee, 11 committees: - Education/Seminars - Marketing, Treasurer, Remuneration committee, - Professional Practices, - Magazine Editorial - Information & Communication Chief Executive (plus paid company consultative committee - QA, - Nomination (home-page and journal) secretary) - GAIN, - Professional Practices - International, - Education / Academic Relations - Members - Technical, - Seminars, - Diploma - IT. - Training, 5 specialty groups and Networks (Public, Financial, - Congress, - financial sector Private) are used to reach out to the - Marketing & Communication, - government members. - Website, - IT auditing We also have a membership project - Magazine Editorial Board, - fraud that will result in a Membership - Membership - Audit Director Roundtable Committee. High priority. - IRC (to be re-installed in 2008) No. of staff 1 full-time , 2 part-time 2.8 FTE 3 Full-time + 1 Part-Time 2 21 + 2 part time 10 + 2 part time 15 5 (4,5 FT), 2 6 3.1 FTE for 2008. 1 Klas - Secretary 38 planning to go to 6 early next year General, 0,69 Gorel - Membership, - 1 CSO general administration and - 1 Marketing & Communications homepage/journal 0,27 Kicki - - 1 Seminars and Training admin Acounting and controlling, 1 Maria - - 1 Financial Admin / application Courses and paid seminars, 0,14 manager Yvonne, Annual conference - 1 general / membership admin - 1 professional issues manager (2008) Yearly no. and type of 1 conference, 1 conference (2 days), 1-2 conferences (1-2 days), 2 conferences (2 days each), 5/6 conferences 5 Conferences; 2 conferences, 1 annual conference, 1 conference 3 conferences, 1 conference, 1 conference, events 2 one-day workgroups, 21 trainings (53 training days) 25 trainings (2-3 days each), 7-8 monthly meetings, 10 montly meetings 180 Seminars; 10 meetings, 8 seminars, 10 training courses 45 seminars within IIA Spain (42 15-20 courses (growing - partnering 110+ courses and events GA, 1CAATTs day (growing!); 3-5 yearly meetings with 8-9 seminars (1 or 2 days each), 36 seminars ; 500sessions 10 Events for exchange of 93 seminars delivered in 198 60 training days (growing) 6 semninars held in Madrid and 3 in Barcelona); when we don't have resources to do (mix of training courses, seminars, 35+ trainings (growing!); Certification preparation members 3 basic courses (5 days each) 2 dinner debate experiences training sessions separate CIA courses (2 days per 16 half day seminars within the 6 in-house seminars/co-operation it on our own) HIA forums, core regional events) CIA-course (2 days per part), workshops. several regional meetings part); speciality groups with the college of Economist and 15 free seminars (2-4 hours) CFSA-course Events: round tables, annual meeting with the banking 8 CAE roundtables 4 half day seminars for all the CEU Business School information sessions about regulator members 2 social events certifications, discussion annual golph trophy forum, certification celebrations, CAE event, breakfast discussions around 30 per year Yearly no. and type of * Audit Journal (quarterly) * Newsletter to active members * Magazine "Internal auditor" (6 1/3 "Tilintarkastus - Revision" "Audit Interne" magazine (5 issues Magazine: 6 issues per year (ZIR), "Internal Audit" magazine (3 issues * Audit Magazine (4 issues, going to Internal Audit magazine (2 issues Quarterly basis magazine. "InternreVision" Journal, 6 -> 4 * Internal Auditing & Business Risk - publications * Book - Risk Management (bi monthly), issues per year) magazine (6 issues a year). per year), Newsletter, per year, plans to pass to 4 issues), 5 in 2008), per year) Books: Fundamentals on internal issues per year, improved quality monthly magazine sent to all (2006) * 2 position papers per year * Professional Practices Newsletters when needed: Monthly newsletter, 6 Books incl. updates, Tone at the top newsletter (3 * Newsletter to active members Frequent newsletters by mail auditing, Translation of COSO for (content/layout) members * Book - Internal Audit - * a satisfaction survey Framework, Red Book in Standards, PA's and COSO ERM Research booklets (3 a year on 1 Standard issues), (monthly), Countinously updates and news small business No newsletter, we are trying cover * Head 2 Head - monthly newsletter Organisation and Daily Work in * general analysis about IAa in Bulgarian (Executive Summary) average). 2 monthly newsletters, * Combined newsletter to updated on our homepage Web site/ Monthly Newsletter (We this via our home page and html- to CAEs , Practice (2008) the country every 2 years * Gleim CIA Review Books - Translation of different books: 2 Position papers and membership of IIA+VRO have hired a free lance to supply mail to members * Members Direct – monthly e-mail Part I, II, III and IV (in COSO Report (1&2), Gleim. 4 research papers * Infrequent booklets technical contents for both) newsletter to members, Bulgarian) * Assurance Briefing – quarterly newsletter to Audit Committee members, * Professional Guidance Direct - monthly technical email bulletin to members Item Austria Belgium Bulgaria Finland France Germany Italy Netherlands Norway Spain Sweden UK & Ireland Main threats * Too little (time for) efforts as * Lack of real support from * Lack of support and Lack of resources / Lack of No major threats No major threats No major threats * Deteriorating relationship with * CBT-site in Oslo not ready even * Lack of resources to provide No major threats at present. * Failure to really lead the to advocacy volunteers ( not enough motivation from volunteers, the support from volunteers and NIVRA, though testing is supposedly taking services to our growing number of * Potentially our relation to the profession, * Insuffucient added value for concrete output), staff of IIA-Bulgaria is the main members, Lack of time! * Too much internal focus, place as of Monday. members. external auditors could be a threat, if * Profession gets de-valued by government auditors * Administration still in driving force * Too little (time for) efforts as to * Only two staff members makes the * Translation task force together not handled in the right way. But at regulatory environment, * Certifications for public sector automation process ( still a * The level of the profession in advocacy, Secretariat and ongoing project with IIA Mexico and Argentina. present we have a very good * Competition from accounting auditors (MBA and academic long way to go) the country is still at low level. * Insufficient content/services with vulnerable to any kind of absence. * I have the feeling we shoul relation with them. bodies supreme audit court auditors * Insufficient content with The managers are not very regard to professional issues, * Too little time spent on advocacy. provided more technical guidance * Too much internal focus and not (Akademischer regard to professional issues, keen to invest in internal * Insufficient added value for * Not enough time to take to our members. enough time for advocacy efforts. Rechnungshofprüfer) ia evolution, ... auditing government auditors, andvantage of CBOK results. * Insufficient content/services with * That is combined with the * Too little focus on younger (high- regard to professional issues. lack of resources not only potential) auditors and smaller IA * Not enough focus on younger financial but also professional. functions, (high-potential) auditors. * Diminishing commitment from * Our service to the major Swedish board members, while staff do not international companies needs to be always get sufficient leeway to act improved. independently, * No tailor-made service to the new * Growing distance between board audit shops starting up as a result of and committees (and even further the Swedish Code. from members) * Too much interest in giving advice and highlighting weaknesses in processes, not enough interest in actually performing work against our agreed upon objectives. Three main * Lobbying to influence laws (1) Improve quality and content (1) Advocacy - promote the (1) Developing the Institute's Position Paper on "The architecture * Planning and Performing the ECIIA- * Increase image and visibility, (1) Professional issues and (1) Implement our proposed EQA- (1) 2008 is our 25th aniversary, 1) Change attitude, work towards * Sustaining membership growth - challenges and regulations of trainings, benefits and the value of strategy, of Internal control, how to improve Conference and other Conferences * Increase Corporate training, research model. and we are planning three the global strategies . When we work particularly students, * Servicing to CAE's and (2) Improve Services to internal auditing (2) Developing the Institutes role its efficiency,what role for internal for 2008 as well as the Event "50 * Redesign Web site and introduce (2) Advocacy and information (2) Increase the standing of the conferences, three business for IIA (paid or volunteer) we are not * Difficult to agree common government auditors members, (2) Providing quality trainings in QA's. auditing" year IIR- Germany"; ERP services, getting a foothold in the profession/advocacy. breakfasst, two social events apart auditing each other, we are in the messages and authoritative * Promoting CIA-Certifications (3) Get concrete deliverables and professional literature (3) Advocacy Guidance relative to the internal * Planning the national Conference CG arena (3) Encourage the Finance Ministery of the usual life, so it will be difficult business of education and positions, (besides the CIA) from the volunteers (3) Strengthening the control of information systems for 2009; (3) Services to CAEs and to to implement an investigation about to keep in the loop marketing and we need to be * Raising the profile of internal audit administrative capacity of IIA Recommandations of the role of * Improve services to members government auditors the organisation of internal auditing focused! with Audit Committees Bulgaria and raising our funds internal audit with Governance (4) Settling office premises, within the government sector and 2) Find enough time to do a proper in order to continue our growth becoming privatized and advocate the use of IPPF herunder. advocacy job. (4) Involve more volunteers independent (also personnel) 3) Continue to make money. (5) Relationship with NIVRA - highly political; restoring mutual trust Best practices to * Website * on line registration-admin IIA-Bulgaria is relatively a Conferences, Basic courses, Research Activity ,By June 2008, 5 Websites for sharing information; Issue of "Appuntamenti di * Website * Specialty networking groups. In * Translations The reason for our last year financial * Technical guidance, share * Educational and training automation young institute, we are still Webropol research books will be issued events for sharing experience; governance", the Italian version of * Magazine (both as regards to 2008 a CEA group was successfully performance was that we got the * New owned headquarters quite * Magazine, programs * Board decision follow up, developing and learning. "Keys to implement internal control" DAX Roundtable CAE-meetings Tone at the top, sent to presidents, content and economically a great established. representative volunteers to do more work and that * * Heads of Audit Service, * Temporary work-groups on * Round tables organisation Neverthless, some good "Internal control and Quality" CEO, general managers of listed success) * Master of Management Program in we were able to significantly improve *collaboration with Latin American * Audit Committee Briefings specified topics ending with a 1- and output, practices are: "French CBOK" companies, universities and * GAIN (3 large national groups of Internal Auditing, ERM and sponsoring of our annual Institutes in QA, Publicacions, on day presentation and a * publishing activities "Audit guidance of the sustainable institutions participants, divided into financial Corporate Governance endorsed by line magacine, … conference. Our Chairman Guidon publication (magazines, books); development" services, government and industry) IIA. Diploma title. As of 2008 the Berggren from KPMG played a * CIA Review Courses and "Audit guidance of the business * Educational and training candidate have an option to take the significant role in this. The trainings continuity" programme (very good committees) CIA exam instead of the final challenge is to make the financial * Specialty groups Corporate Norwegian exam and have the result sustainable. We will make a Governance (SOx) and for small Diploma and become sertified at the loss in 2007, but we're not to worried audit shops (start up phase) same time. about this. Service fees will be * 2007 International Conference increased next year and volume of * setting up new (modularly coupled) courses will also increase. member, events and financial admin * Website, magazine and system advertising income from both. * Audit Director Roundtable for a "VIP" gorup of some 20 CAE's. * Our "Helping yourself" quality service which is successful and which will help us get on the right Advocacy successes IIA Austria is member of the Establishing relationship with Strong relatinnships and Good relationships with the Strong relationships with the French Established relationship with Restarted relations with Stock Establishing relationship with * Shared office facilities with another Several courses in the university to Public sector. The work that I have Very good relationships with group of organisations which Banking sector organisation; standing in the public sector; Finnish Association of Board Institute of Directors, the French Banking sector organisation and Exchange, Bank of Italy and Consob Corporate Governance Monitoring audit organisation (public sector, teachers of business done over a period of 10 years has Financial Reporting Council (the are invited by the Austrian BBFA, Febelfin and also Position Paper on internal Member, the Finnish Stock Stock Exchange regulator, the other public organisation Committee. Very good relationships about our size). administration now resulted in my position in a UK's independent regulator for Ministry of Justice to place Corporate Governance auditing issued at the Exchange regulator, Banking Association of Major French Improving Academic Relations with external providers, which help * Every two years we arrange a huge "revisionsrad" under the government corporate reporting and statements to draft acts Institute, Directors institute, beginning of 2006; two very big Supervision, Insurance Corporations, the French Business to get access to advocacy goals. A conference with the auditors from to advise on quality improvement of governance). Good relationships concerning Risk Management, Chartered of Accountants conferences that attracted Supervision, Public sector Confederation as well as the French threat here is that the NIVRA is the public sector. IA. with accounting Institutes. Internal Control, Corporate institute, Associations of significant attention authorities Institiute of Certified Public nationally seen to be the all- I'm on the Ministry of Finance Governance and fincial belgian corporations and Accountants. The French Stock important and authoritative voice, reference group for Solvency II, and accounting Universities Exchange regulator entrusted a not only on behalf of the I was able to influence the Swedish working group to develop an internal accountants, but as a derivative response relating to the definition of control reference framework for use also for ALL auditors Internal Audit so that it now is much by French companies subject to the closer to the IIA definition. obligations of the August 1st 2003 law which specifies that the Chairment of the Board of Directors "gives an account...on the internal control procedures that the company has implemented". IFACI was in charge of the secretariat and the reporter of the results. Item Austria Belgium Bulgaria Finland France Germany Italy Netherlands Norway Spain Sweden UK & Ireland Status / setupQA IIA Austria does not conduct Two external validation One external validation Looking forward 2007 :24 assignments, turnover Training course and certification Good results in training courses for 2005/6 were pilot years (10 pilots), A special task force is preparing 15 QA projects expected in 2008 Our "helping you to prepare yourself No plans to set up QA programme. QA’s/SAIV’s by itself. IIA performed so far, QAS training performed by The IIA Inc. in 340Keuro process is well implemented and IA and assessors in 2007 setting up of independent Self-Assessment check lists, report for an EQA" service har been quite Austria performs QA training organized locally but still no 2005 with regards the full 2008: 20 new certicatio audits; 3 highly requested entity, however without strong link templates for SA and RFP in succesful and we plan to do a EQA's courses according to the IIA real "green light" from the accreditation of the Institute three-year renewal audits; 15 annual with NIVRA that was earlier foreseen Norwegian. We are preparing our or SAWIV's next year, but our QA Manual. IIA Austria makes Board to market the services surveillance visits, Tunover EQA model and hope to do a pilot resources are limited. We will leave contact between interested from IIA Bel! 700Keuro testing fall 2008. Have been talking the bulk of the work to Big 4. companies and persons who to Sweden about setting up peer passed the QA test positivly. reviews across the borders. Norway About 10 companies started will sign the QA-agreement with the with SAIV’s this year. IIA this year. Certification CIA begin to get "market value" CIA is successful : around 100 CIA begin to get "market value" CIA 763 candidates in 2007 CIA and other Certificates (CCSA, 372 CIA, 275 CCSA, 20 CFSA and 2 steady participation in CIA We are facing CBT-site issues. Expectant about CBT impact on I don't have the exact number, but I Certificate in Internal Audit & participants per part and CFSA, CGAP) and related seminars CGAP. Good initialresponse to CBT. examinations of about 200 persons When resolved we anticipate a candidates attendance think some 150 of our 645 members Business Risk (IA Cert) ~ 150 CIA's in Austria around 40 new CIAs for each are highly requested (100 per part), much higher participation in the are certified. I'll check the number. Diploma in Internal Audit Practice round 1032 CIAs end of 2007 20-40 new CIAs per examination certification program compared to (PIIA) round. the paper exam. Advanced Diploma in Internal Audit & Management(MIIA) New Certificate in IT Audit to be launched September 2008 Over 40% of members hold an IIA - UK&I designation Sponsor relations Deloitte & RHI : 2 years Sponsor agreements related to the Sponsor agreements with ACL, Sponsor agreements with all Big- Just close a year Sponsorship Sponsor agreements for Annual Sponsorship received from contracts ECIIA Conference Operari, Protiviti and Poste Italiane. Four + Jefferson Wells + Protiviti: under the scheme Platinum, Gold, Conference 2007 Jefferson Wells for 2008 Annual Good response for events partly monetary (mainly to cover the Silver) Sponsors: Audisoft, Big - Platinum (Euro 7'): All Big Four, Gala Dinner (Eu20k). Joint project sponsorships adverts in the Magazine), partly in Four, Control solutions, MadCAt, and Transcendent a local Swedish with Deloitte on Future of Internal joint actiities ssuch as CAE ACL, SAFE Consulting IT oriented consultant Auditing (Eu12,500k) (Sponsorship roundtables - increasingly difficult to - Gold: (Euro 5'): Swedbank and in kind from PWC , Deloitte, & arrange to both sides' satisfaction. SEB KPMG - eg free venues. Also agreements with Robert Half New draft sponsor program for 2008 and one software deliverer - both can be presented in London. very satisfactory. All get their logo and a page on the website.