Practice Guide: Auditing Culture
Addressing organizational culture is important because it presents opportunities to mitigate risks, act on opportunities to achieve success, and attain significant gains in areas such as employee retention. "Auditing Culture" helps internal auditors understand risks associated with organizational culture, how effective management of those risks supports a successful control environment, and how to approach a culture assessment.
Organizational culture drives how business is conducted and strategies are executed. All organizations have a culture, whether intentionally created or not. Likely, there are organizational subcultures within individual departments, especially if multiple locations or campuses exist.
This guide offers example audit checklists, three approaches to conducting an audit, and suggests information to gather before embarking on a culture audit.
- Understanding the business significance of culture and conduct risk in an organization’s control environment.
- Identifying the key components of culture and conduct risk.
- Understanding key stakeholder concerns and expectations related to culture and conduct risk.
- Recognizing internal audit’s role in assessing and reporting on organizational culture.
- Understanding, based on example tools/guidance, approaches to assess and report on an organization’s culture and management of conduct risk.
Item Number: 10.1321.dl