Our client requested an External Quality Assessment (EQA) for their Internal Audit Unit, in accordance with the Global Internal Audit Standards (Principle 8: Oversight by the Board / 8.4 – External Quality Assessment).
Sample solution suggestions
Teolupus successfully completed the External Quality Assessment (EQA) for the Internal Audit Unit of our client, a major retail firm with a nationwide store network.
This project was designed and executed not merely as a control activity to measure compliance with standards, but as a comprehensive corporate transformation initiative. It demonstrated the strategic maturity of the internal audit function and clearly defined areas for development.
Evaluation Criteria
Throughout the project, the Teolupus team conducted its work using the following fundamental references:
The Institute of Internal Auditors (IIA) Standards
International Professional Practices Framework (IPPF)
COSO Internal Control Framework
COSO Enterprise Risk Management (ERM) Framework
Evaluation Process
The evaluation focused on the following areas, prioritizing not just “compliance” but also organization-specific improvement opportunities at every stage:
Compliance with Global Internal Audit Standards.
The Internal Audit Charter, strategy, methodologies, processes, risk assessment, and internal audit plan.
Compliance with applicable legal regulations.
Performance criteria, metrics, and assessment results.
Competencies and necessary professional care, including the adequate use of tools/techniques and a focus on continuous improvement.
Qualifications and competencies, including the Internal Audit Executive role, as defined by the organization’s job descriptions and recruitment profiles.
Integration into the organization’s governance processes, including relationships that ensure the internal audit function operates independently.
Contribution to the organization’s governance, risk management, and control processes.
Contribution to improving the organization’s operations and its ability to achieve objectives.
The ability to meet expectations expressed by the Board of Directors, Senior Management, and Stakeholders.
Value Added
At the conclusion of the study:
The compatibility of the internal audit structure with international standards was assessed.
Strengths were presented in a clear and concrete manner.
Actionable and measurable recommendations were provided for areas of development.
Direct contributions were made to strategic decision-making processes through reporting to the Board/Audit Committee.
Note: Teolupus did not merely report findings; it provided a roadmap for the future.
The Differentiating Approach
The most important element distinguishing this project from similar ones is that, rather than providing theoretical evaluations disconnected from field reality, we offered practical, applicable, and prioritized extra suggestion sets. These suggestions considered risks specific to retail dynamics, enabled senior management to take rapid action, and increased the quality of the internal audit function.
Thus, the report became a corporate development guide for internal audit, going beyond a simple audit output.
Strong Stakeholder Management
Thanks to the effective communication established with company management and the internal audit team during the project process:
Evaluation results were fully embraced by the stakeholders.
Action plans found resonance in the field.
Trust in the internal audit function within the institution was reinforced.
This collaboration demonstrated once again that Teolupus operates not just as an analysis provider, but as a function that manages change.
Conclusion
This external quality assessment is a concrete indicator that Teolupus adopts an approach that generates organization-specific value, creates a difference, and ensures sustainable transformation—rather than just measuring compliance.
As Teolupus, we view internal audit not as an element that increases workload, but as a strategic support that allows the organization to move confidently into the future and enhances sustainability success by supporting:
The successful realization of objectives.
Strong governance, risk management, and control processes.
Effective decision-making and oversight.
Reputation and credibility in the eyes of stakeholders.