Voices from the Field

ADDING VALUE BEYOND THE AUDIT ENGAGEMENT

by Neil Maxwell

As internal and external performance audit functions mature, a significant shift is underway. The traditional focus on simply providing assurance is expanding to embrace a more proactive role in adding value. A recent example is the 2025 IIA Global Internal Audit Standards, which position internal audit as a strategic partner dedicated to delivering insight, foresight, and oversight—a powerful evolution beyond simply providing assurance.

USING A MATURITY MODEL TO IMPLEMENT RISK MANAGEMENT: A CASE STUDY AT THE CANADIAN FOOD INSPECTION AGENCY

by Martha Genest and Amani Ali, Canadian Food Inspection Agency

A maturity model is a structured framework used to assess and guide an organization's progress in a particular area of interest, such as risk management, cybersecurity, project management, or any other discipline. It provides a way to measure and evaluate an organization's current capabilities and practices, as well as a roadmap for improving those capabilities over time.

This Voices from the Field article describes how the Canadian Food Inspection Agency developed and used a maturity model to implement its risk management strategy, how it can be used as a source of criteria and audit tests by auditors, and lessons learned from its implementation.

USING PERFORMANCE AUDIT TO ASSESS AN ORGANIZATION’S EFFORTS TO PREVENT CORRUPTION

by John Affleck

Corruption is defined as the abuse of entrusted power for private gain, including bribery. Corruption erodes trust, weakens democracy, hampers economic development and further exacerbates inequality, poverty, social division and the environmental crisis. Exposing corruption and holding the corrupt to account can only happen if we understand the way corruption works and the systems that enable it.

In this Voices from the Field we review and summarize methods commonly used to prevent corruption and provide suggestions on how they could be audited.

ETHICS AND INNOVATION: CHALLENGES AND OPPORTUNITIES FOR THE AUDITING PROFESSION IN THE DIGITAL AGE

by Annie Lecompte, Ph.D. CPA auditor, CFE, CFF, Associate Professor, Department of Accounting Sciences, ESG-UQÀM

In a world where technology is redefining the boundaries of many professions, auditing is not left behind.

This article explores the fascinating intersections between ethics, technology and auditing, detailing how auditors can evolve in this changing technological landscape, while remaining grounded in professional ethics.

OBJECTIVE CENTRIC RISK AND UNCERTAINTY MANAGEMENT IN THE PUBLIC SECTOR: OPTIMIZING RISK MANAGEMENT AND ACCOUNTABILITY

by Tim J. Leech, FCPA, FCA, Founder and CEO, Risk Oversight Solutions

This article outlines four significant change drivers that support implementation of a new form of governance, Enterprise Risk Management (ERM), and internal audit: Objective Centric Risk and Uncertainty Management.

Objective-Centric Risk and Uncertainty Management integrates risk considerations into the overall strategic planning and decision-making processes, aligning risk management activities closely with the organization's mission and vision. This approach aims to enhance the organization's ability to proactively address challenges and uncertainties in pursuit of its objectives while optimizing the allocation of resources. ERM solely based on building risk lists does not accomplish that goal.