Due Professional Care is a fundamental principle in the Internal Auditing profession, embedded within the IIA's Code of Ethics and the International Standards for the Professional Practice of Internal Auditing. It requires internal auditors to apply the care, competence, and diligence that a reason…Due Professional Care is a fundamental principle in the Internal Auditing profession, embedded within the IIA's Code of Ethics and the International Standards for the Professional Practice of Internal Auditing. It requires internal auditors to apply the care, competence, and diligence that a reasonably prudent and competent internal auditor would exercise under similar circumstances. Importantly, due professional care does not imply infallibility or perfection; auditors are not expected to detect every irregularity or fraud, but they must perform their work conscientiously and with reasonable judgment. According to IIA Standard 1220, internal auditors must consider several factors when exercising due professional care. These include: the extent of work needed to achieve the engagement's objectives; the relative complexity, materiality, or significance of matters under review; the adequacy and effectiveness of governance, risk management, and control processes; the probability of significant errors, fraud, or noncompliance; and the cost of assurance in relation to potential benefits. Due professional care also extends to the use of technology-based audit techniques and data analysis tools where appropriate, reflecting the evolving nature of the profession. Auditors must remain alert to significant risks that could affect objectives, operations, or resources. However, assurance procedures alone, even when performed with due care, do not guarantee that all significant risks will be identified. Under the Ethics and Professionalism domain, due professional care links closely with the principles of Competency and Integrity. Auditors must engage only in services for which they have the necessary knowledge, skills, and experience, and must continually improve their proficiency through professional development. By exercising due professional care, internal auditors enhance the reliability and credibility of their work, protect stakeholders' interests, and uphold the reputation of the profession. Ultimately, this principle balances thoroughness with practicality, ensuring audits are conducted responsibly, ethically, and effectively while acknowledging inherent limitations.
Due Professional Care
Due Professional Care: A Complete Guide for CIA Part 1
Due professional care is one of the foundational attributes of the internal audit profession and a core concept within Ethics and Professionalism. It is heavily tested on the CIA Part 1 exam because it directly relates to the credibility, quality, and reliability of internal audit work.
Why Due Professional Care Is Important
Internal auditors are trusted to provide objective assurance and advice to the organization, its board, and senior management. Stakeholders rely on this work to make decisions, manage risk, and maintain effective governance. Due professional care ensures that auditors perform their work with the competence, diligence, and skill expected of a reasonably prudent and competent internal auditor. Without it, audit conclusions could be flawed, risks could go undetected, and the profession's reputation would suffer.
It also protects the auditor and the organization. When auditors exercise due professional care, they demonstrate that they acted responsibly and professionally even if problems later emerge, because the standard is about the quality of the process, not a guarantee of perfect results.
What Due Professional Care Is
Due professional care means applying the care and skill expected of a reasonably prudent and competent internal auditor. It does not mean infallibility. Auditors are not expected to guarantee that all risks, fraud, or irregularities will be detected. Instead, they must exercise reasonable, professional judgment.
When exercising due professional care, an internal auditor should consider: • The extent of work needed to achieve the engagement's objectives • The relative complexity, materiality, or significance of matters to which assurance procedures are applied • The adequacy and effectiveness of governance, risk management, and control processes • The probability of significant errors, fraud, or noncompliance • The cost of assurance in relation to potential benefits (cost-benefit considerations)
Due professional care also requires auditors to be alert to the risks of fraud and to consider the use of technology-based audit and data analysis techniques.
How Due Professional Care Works
Due professional care is closely linked to two other concepts: proficiency (having the knowledge, skills, and competencies to perform the work) and professional skepticism (maintaining a questioning mind and critically assessing evidence).
In practice, it works as follows: • The auditor plans the engagement appropriately, tailoring the scope and depth of work to the risks and objectives. • The auditor gathers sufficient, reliable, relevant, and useful evidence to support conclusions. • The auditor applies professional judgment and skepticism throughout the engagement. • The auditor balances the cost of additional procedures against the expected benefits. • The auditor documents work to demonstrate that reasonable care was taken.
Importantly, due professional care applies to both assurance and consulting engagements. In consulting engagements, the auditor considers the needs and expectations of clients, the complexity of the work, and the cost of the engagement relative to potential benefits.
Key Distinctions to Remember
• Due professional care is not absolute assurance. Reasonable care does not guarantee that all deficiencies will be found. • Due professional care is different from proficiency. Proficiency is about having the skills; due care is about applying them appropriately. • Exercising due professional care requires alertness to fraud but does not require the auditor to have the expertise of someone whose primary responsibility is detecting and investigating fraud.
How to Answer Questions on Due Professional Care in an Exam
Exam questions often present a scenario and ask what a prudent internal auditor should do, or ask you to identify whether due professional care was exercised. Read the scenario carefully and focus on whether the auditor acted with reasonable care, applied appropriate judgment, and considered risk and materiality.
Watch for distractor answers that suggest auditors must find all errors or fraud, or that guarantee results. These are almost always incorrect because due professional care is about a reasonable standard, not perfection.
Exam Tips: Answering Questions on Due Professional Care
• Remember the standard is 'reasonably prudent and competent.' If an answer implies certainty or a guarantee, it is likely wrong. • Link due care to professional skepticism and proficiency, but keep them distinct. Questions often test whether you can tell them apart. • Apply cost-benefit thinking. Due professional care includes weighing the cost of assurance against potential benefits. An answer requiring unlimited procedures regardless of cost is usually incorrect. • Be alert to fraud, but know the limits. Auditors must consider the probability of significant fraud, but are not expected to detect all fraud or act as forensic investigators. • Consider materiality and significance. The depth of work should match the risk, complexity, and importance of the matter. • Watch for both assurance and consulting contexts. Due professional care applies to both, though the considerations differ slightly. • Use elimination. Rule out extreme answers (words like 'all,' 'always,' 'guarantee,' 'never') and choose the balanced, reasonable option.
By understanding due professional care as the diligent, competent, and skeptical application of professional judgment, tailored to risk and cost-benefit considerations, you will be well prepared to answer these questions confidently on the CIA Part 1 exam.
