The internal audit function in information technology governance: A holistic perspective

Journal of Information Systems

Volumn 27, Issue 1, 2013, Pages 189-217

  Héroux, Sylvie ^a   Fortin, Anne ^a  

^a UNIVERSITÉ DU QUÉBEC À MONTRÉAL   (Canada)

Author keywords

Internal audit function; IT governance; Survey

Indexed keywords

EID: 84879743038     PISSN: 08887985     EISSN: 15587959     Source Type: Journal    
DOI: 10.2308/isys-50331     Document Type: Article

References (44)

1. Abbott, L. J., S. S. Parker, and G. F. Peters. 2010. Serving two masters: The association between audit committee internal audit oversight and internal audit activities. Accounting Horizons 24 (1): 1-24.
2. Abdolmohammadi, M. J., P. Burnaby, and S. Hass. 2006. A review of prior common body of knowledge (CBOK) studies in internal auditing and an overview of the global CBOK 2006. Managerial Auditing Journal 21 (8): 811-821.
3. Abdolmohammadi, M. J. 2009. Factors associated with the use of and compliance with the IIA standards: A study of Anglo-culture CAEs. International Journal of Auditing 13: 27-42.
4. Allegrini, M., G. D'Onza, L. Paape, R. Melville, and G. Sarens. 2006. The European literature review on internal auditing. Managerial Auditing Journal 21 (8): 845-853.
5. Andriole, S. J. 2009. Boards of directors and technology governance: The surprising state of the practice. Communication of the Association for Information Systems 24 (22): 373-394.
6. Arena, M., M. Arnaboldi, and G. Azzone. 2006. Internal audit in Italian organizations: A multiple case study. Managerial Auditing Journal 21 (3): 275-292.
7. Arena, M., and G. Azzone. 2009. Identifying organizational drivers of internal audit effectiveness. International Journal of Auditing 13: 43-60.
8. Bart, C., and O. Turel. 2010. IT and the board of directors: An empirical investigation into the "governance questions" Canadian board members ask about IT. Journal of Information Systems 24 (2): 147-172.
9. Bhattacharjya, J., and V. Chang. 2007. Evolving IT governance practices for aligning IT with business-A case study in an Australian institution of higher education. Journal of Information Science and Technology 4 (1): 24-46.
10. Bowen, P. L., M.-Y. D. Cheung, and F. H. Rohde. 2007. Enhancing IT governance practices: A model and case study of an organization's efforts. International Journal of Accounting Systems 8: 191-221.
11. Burton, R. N. 2000. Discussion of information technology-related activities of internal auditors. Journal of Information Systems 14 (Supplement): 57-60.
12. Christopher, J., G. Sarens, and P. Leung. 2009. A critical analysis of the independence of the internal audit function: Evidence from Australia. Accounting, Auditing and Accountability Journal 22 (2): 200-220.
13. Canadian Institute of Chartered Accountants (CICA). 2004. 20 Questions Directors Should Ask About IT. Toronto, Canada: CICA.
14. Canadian Institute of Chartered Accountants (CICA) 2007. 20 Questions Directors Should Ask About IT Projects. Toronto, Canada: CICA.
15. Canadian Institute of Chartered Accountants (CICA) 2010. IT Strategic Planning for SMEs. Toronto, Canada: CICA.
16. Cooper. B. J., P. Leung, and G. Wong. 2006. The Asia Pacific literature review on internal auditing. Managerial Auditing Journal 21 (8): 822-834.
17. De Haes, S., and W. Van Grembergen. 2009. An exploratory study into IT governance implementation and its impact on business/IT alignment. Information Systems Management 26 (2): 123-137.
18. Deloitte Consulting. 2007. You're talking, not walking. Corporate Board Member (March /April): 36-40.
19. Dillman, D. A. 2000. Mail and Internet Surveys-The Tailored Design Method. 2nd edition. New York, NY: John Wiley and Sons.
20. Goodwin-Stewart, J., and P. Kent. 2006. The use of internal audit by Australian companies. Managerial Auditing Journal 21 (1): 81-101.
21. Gramling, A. A., M. J. Maletta, A. Schneider, and B. K. Church. 2004. The role of the internal audit function in corporate governance: A synthesis of the extant auditing literature and directions for future research. Journal of Accounting Literature 23: 194-244.
22. Hair, J. F., R. E. Anderson, R. L. Tatham, and W. C. Black. 1998. Multivariate Data Analysis. Fifth Edition. Upper Saddle River, NJ: Prentice Hall.
23. Hass, S., M. J. Abdolmohammadi, and P. Burnaby. 2006. The Americas literature review on internal auditing. Managerial Auditing Journal 21 (8): 835-844.
24. Hermanson, D. R., M. Callahan Hill, and D. M. Ivancevich. 2000. Information technology-related activities of internal auditors. Journal of Information Systems 14 (Supplement): 39-53.
25. Héroux, S., and A. Fortin. 2011a. Exploring IT governance and control of website content: A comparative case study. Journal of Management and Governance (December): 1-49.
26. Héroux, S., and A. Fortin. 2011b. Exploring IT dependency and IT governance: A Canadian survey. Working paper #2011-07, Corporate Reporting Chair, University of Quebec at Montreal.
27. Huff, S. L., M. P. Maher, and M. C. Munro. 2004. What boards don't do-but must do-about information technology. Ivey Business Journal (Sept/Oct): 1-4.
28. Institute of Internal Auditors (IIA). 2008. Internal Auditor Competency Framework. Available at: http://www.theiia.org/guidance/additional-resources/competency-framework -for-internal-auditors/
29. Institute of Internal Auditors (IIA). 2009. Code of Ethics. Available at: https://na.theiia.org/standardsguidance/ PublicDocuments/IPPF_Code_of_Ethics_01-09.doc
30. IT Governance Institute (ITGI). 2003. Board Briefing on IT Governance. Available at: http://www.isaca. org/Knowledge-Center/Research/ResearchDeliverables/Pages/Board-Briefing- on-IT-Governance-2nd-Edition.aspx
31. IT Governance Institute (ITGI). 2007. IT Assurance Guide Using CobiT. Available at: http://www.isaca.org/Knowledge-Center/Research/ResearchDeliverables/Page s/IT-Assurance-Guide-Using-COBIT.aspx
32. IT Governance Institute (ITGI). 2008. Enterprise Value: Governance of IT Investments, Getting Started with Value Management. Available at: http://www.isaca.org/Knowledge-Center/Research/ ResearchDeliverables/Pages/Enterprise-Value-Governance-of-IT-Investments -Getting-Started-with-Value-Management.aspx
33. IT Governance Institute (ITGI) and PricewaterhouseCoopers (PwC). 2009. An Executive View of IT Governance. Available at: http://www.isaca.org/Knowledge-Center/Research/Documents/An-Executive-Vi ew-of-IT-Gov-Research.pdf
34. Jokipi, A. 2010. Determinants and consequences of internal control in firms: A contingency theory based analysis. Journal of Management Governance 14: 115-144.
35. Judd, C. M., E. R. Smith, and L. H. Kidder. 1991. Research Methods in Social Relations. Fort Worth, TX: Harcourt Brace Jovanovich College Publishers.
36. Nolan, R., and F. W. McFarlan. 2005. Information technology and the boards of Directors. Harvard Business Review 83 (10): 96-106.
37. Nunnally, J. C. 1978. Psychometric Theory. Second edition. New York, NY: McGraw-Hill Book Company.
38. Ontario Securities Commission (OSC). 2005. Multinational Instrument 52-109: Certification of Disclosure in Issuers' Annual and Interim Filings. Available at: http://www.osc.gov.on.ca/documents/en/ Securities-Category5/rule_20051025_52-109_consolidated.pdf
39. Peterson, R. 2004. Crafting information technology governance. Information SystemsManagement 21 (4): 7-22.
40. PricewaterhouseCoopers (PwC) and IT Governance Institute (ITGI). 2006. IT Governance in Practice: Insights from Leading CIOs. Available at: http://www.pwc.com/en_MT/mt/publications/assets/itgovernance-in-practice -jan-2007.pdf
41. Rittenberg, L. E., and R. J. Anderson. 2006. A strategic player: Hiring and inspiring a chief audit executive. Journal of Accountancy (July): 51-54.
42. Sarens, G. 2009. Internal auditing research: Where are we going? International Journal of Auditing 13: 1-7.
43. Van Grembergen, W., and S. De Haes. 2009. Enterprise Governance of Information Technology. New York, NY: Springer.
44. Wilkin, C. L., and R. H. Chenhall. 2010. A review of IT governance: A taxonomy to inform accounting information systems. Journal of Information Systems 24 (2): 107-146.