ABC Company has a weak risk management and control systems. Can internal auditors design and implement on behalf of the ABC Company?
Internal auditor job is to express an opinion on the already designed and functioned internal controls system of the organization. They cannot design or implement systems by themselves. It will impair their objectivity.
System’s implementation is management’s responsibility. However, internal auditors can recommend control standards and review procedures prior to their implementation.