Launch offer — 25% off with code LAUNCH-25 See plans →
Microlesson · 5-min read

Using IAF Work vs. Direct Assistance — Pre-requisites, Conditions, and Procedures

## SA 610: Using the Work of an Internal Auditor (Revised)

### When SA 610 Applies

SA 610 is triggered only when both conditions are met:

1. The entity has an Internal Audit Function (IAF), AND

2. The External Auditor plans to either:

  • Use IAF's work to modify his own audit procedures, OR
  • Use internal auditors to provide Direct Assistance

---

## PART A — Using the Work of the IAF

### Step 1: Can IAF Work Be Used?

Assess three factors:

FactorWhat to Evaluate
ObjectivityDoes the IAF's organisational status support independence?
CompetenceWhat is the IAF's technical skill level?
Disciplined ApproachDoes IAF apply a systematic methodology with Quality Control?

### Step 2: Which Areas and How Much?

IAF work is suitable only for tasks involving limited judgment:

  • Testing operating effectiveness of controls
  • Substantive procedures involving limited judgment (e.g., vouching)
  • Observations of inventory counts
  • Testing compliance with regulatory requirements

### Step 3: Audit Procedures When Using IAF Work

1. Discuss planned use with IAF and coordinate scope

2. Read IAF reports — understand nature, extent of procedures, and findings

3. Evaluate IAF work by checking:

  • Was it properly planned, performed, supervised, reviewed, and documented?
  • Was sufficient appropriate evidence (SAAE) obtained?
  • Are conclusions appropriate and consistent with work performed?

---

## PART B — Using Internal Auditors for Direct Assistance

### Step 1: Can Direct Assistance Be Taken?

Evaluate:

  • Existence of threats to objectivity
  • Level of competence of the internal auditors

### Step 2: Prohibited Areas (Hard Restrictions)

SituationWhy Prohibited
Procedure involves significant judgmentExternal auditor must exercise judgment personally
Risk of Material Misstatement (ROMM) is HighToo risky to delegate
Procedure relates to work already reported to management/TCWG by IAFIndependence/conflict concern

### Step 3: Audit Procedures When Using Direct Assistance

Before engagement starts — obtain TWO written agreements:

FromContent
The EntityIA will follow external auditor's instructions; entity will not intervene
The Internal AuditorsThey will maintain confidentiality of specific matters

During engagement:

  • External auditor must Direct, Supervise, and Review all work performed by IA (per SA 220)

> Key principle: Regardless of whether IAF work or direct assistance is used, the external auditor retains sole responsibility for the audit opinion.

Worked example

### Example 1

Scenario — Using IAF Work: An entity's IAF is organizationally independent (reports to Audit Committee), staffed with qualified accountants, and follows a documented testing methodology with peer reviews. The external auditor decides to use IAF's work on payroll control testing. She reads the IAF's payroll report, coordinates scope to avoid duplication, then performs review procedures — confirming work was supervised, documented, and conclusions were reasonable. She adjusts (reduces) her own control testing accordingly.

### Example 2

Scenario — Direct Assistance (Permitted): An internal auditor is assigned to assist with accounts receivable vouching — a low-judgment, mechanical task. Before work begins, the external auditor obtains: (1) a written confirmation from management that the IA may follow external auditor instructions without interference, and (2) a confidentiality agreement from the IA. The external auditor then directs the work, supervises execution, and reviews all results before using them.

### Example 3

Scenario — Direct Assistance (Prohibited): The external auditor considers using the internal auditor to assess the going concern assumption (high-judgment area) and to evaluate a material litigation provision where ROMM is assessed as high. SA 610 prohibits direct assistance in both cases — the external auditor must perform these procedures personally.

⚠️ Common exam mistakes

  • Confusing 'using IAF work' with 'direct assistance' — these are two distinct tracks with different conditions, restrictions, and procedures
  • Forgetting that direct assistance requires TWO separate written agreements — one from the entity AND a separate one from the internal auditors themselves
  • Treating high ROMM as merely requiring extra caution — under SA 610, high ROMM is a hard prohibition on direct assistance, not just a flag for more supervision
  • Assuming the external auditor can use IAF work for high-judgment areas like estimates or going concern — only limited-judgment tasks qualify
  • Believing that using IAF work or direct assistance reduces the external auditor's responsibility — full responsibility for the opinion always stays with the external auditor
Bare-Act text SA 610 — Audit Procedures When Using Internal Auditors to Provide Direct Assistance · SA 610 (Revised) issued by ICAI · click to expand
The external auditor shall direct, supervise and review the work performed by internal auditors on the engagement in accordance with SA 220.
Now that you've read this — what's next?
Move from understanding → mastery in 3 clicks. Each option below picks up from this lesson's topic.
Start 15-min diagnostic