Quality Assurance and Improvement Program (QAIP)
A program established by the chief audit executive to evaluate all aspects of the internal audit function's conformance with the Global Internal Audit Standards and progress toward performance objectives. The QAIP includes both internal and external assessments and is designed to drive continuous improvement in audit quality and effectiveness.
Source: IIA GIAS 2024, Standard 1300
A Quality Assurance and Improvement Program (QAIP) is the program through which the Chief Audit Executive (CAE) evaluates all aspects of the internal audit function for conformance with the Global Internal Audit Standards (GIAS) 2024 of the Institute of Internal Auditors (IIA) and for progress toward performance objectives. The QAIP includes both internal and external assessments and is designed to drive continuous improvement in audit quality and effectiveness. The Standards make a QAIP mandatory (originally Standard 1300 of the International Professional Practices Framework, now embedded in the quality domain of the GIAS 2024).
For the board, the supervisory board, and the audit committee, the QAIP underpins the credibility of the audit function. Without a working QAIP, a function may not claim that it operates in conformance with the Standards. The program gives oversight bodies the evidence that the assurance they rely on itself meets quality requirements and is periodically tested.
The QAIP has two connected tracks. The first track consists of internal assessments: ongoing monitoring of audit work and periodic internal self-evaluations. The second track is the external assessment, the External Quality Assessment (EQA), performed at least once every five years by an independent party (Standard 8.4 of the GIAS 2024). The outcomes lead to a conformity rating (generally conforms, partially conforms, or does not conform) and, where needed, to an improvement plan. The CAE reports on the operation of the QAIP to the board and the audit committee.
ONE Risk Advisory designs and assesses QAIPs that genuinely substantiate the conformance claim. We establish a coherent set of internal and external assessments that monitors and demonstrably improves the quality of the audit function, so the function can continue to state that it operates in conformance with the Standards.
Last updated:
Related service Internal Audit Quality
Frequently asked questions
Is a QAIP mandatory?
Yes. The Global Internal Audit Standards (GIAS) 2024 require every internal audit function to maintain a Quality Assurance and Improvement Program (QAIP). Without a working QAIP, the function may not claim that it operates in conformance with the Standards.
Who is responsible for the QAIP?
The Chief Audit Executive (CAE) is responsible for establishing and maintaining the QAIP. The CAE reports periodically on its operation and outcomes to the board and the audit committee.
What components make up a QAIP?
Internal assessments (ongoing monitoring plus periodic internal self-evaluations) and external assessments (the External Quality Assessment, at least once every five years). Together they monitor and improve the quality of the audit function.
What is the difference between a QAIP and an EQA?
The QAIP is the overarching, ongoing quality program. The External Quality Assessment (EQA) is one component within it: the independent external review performed at least once every five years.