External Quality Assessment (EQA) of your internal audit function

An external quality assessment is more than a compliance exercise. It is a moment of reflection on the role, positioning and added value of your internal audit function within the organisation.

Quality, independence and professionalism

Internal supervisory bodies, such as (audit committees of) supervisory boards, play an important role in safeguarding the quality and independence of the internal audit function. Periodic external assessment is essential here, both from professional audit standards (such as the Global Internal Audit Standards of the IIA) and from good governance.

Specialist support, tailored to you

ONE Risk Advisory is a specialist provider of External Quality Assessments (EQA). We work exclusively with experienced quality assessors who have in-depth knowledge of internal auditing and professional standards (such as the Global Internal Audit Standards).

We support organisations with, among other things:

  • conducting External Quality Assessments (EQA), readiness checks or pre-assessments
  • assessment against applicable professional standards (such as the Global Internal Audit Standards)
  • evaluating the positioning, independence and effectiveness of the internal audit function
  • formulating concrete and achievable improvement points

We are available for both advisory and delivery roles. We can also support the implementation and embedding of improvements arising from external quality assessments carried out by others.

Our approach

Broad expertise

Our External Quality Assessments (EQA) are carried out by professionals with extensive experience in internal auditing and external quality assessments. They understand the governance and supervisory context in which external quality assessments take place and communicate clearly with heads of Internal Audit, boards and (audit committees of) supervisory boards.

Thanks to their broad experience, they are also able to benchmark and share relevant good practices, appropriate to the nature and size of the organisation.

IIA Global Internal Audit Standards 2024: five domains (Purpose, Ethics & Professionalism, Governing, Managing, Performing) with principles P1 to P15 and their conformance levels.
IIA Global Internal Audit Standards 2024, a framework of five domains and fifteen principles.
Comparison

EQA, Quality Improvement or Self-Assessment?

AspectExternal Quality AssessmentQuality ImprovementSelf-Assessment (SAIV)
PurposeIndependent assessment of the audit function against the IIA StandardsContinuous improvement between formal assessmentsInternal self-assessment with independent validation
FrequencyAt least once every five years (mandatory)OngoingInterim, often in the years between two EQAs
IndependenceFully external and independentGuided by an external specialistPerformed internally, validated externally
FrameworkIIA Global Internal Audit Standards 2024, Standard 8.4IIA Quality Assurance and Improvement ProgramGIAS Standard 12.1 and 8.4 (validation)
Lead time10 to 14 weeksContinuousShorter, depending on scope
OutcomeIndependent conformance opinion plus improvement planConcrete improvements in design and deliverySelf-assessment, independently confirmed

EQA on the agenda ? Schedule an intake.

An intake takes one hour. We map your QAIP status and discuss the optimal timing for your audit committee.

Schedule an EQA intake

Frequently asked questions

What is an External Quality Assessment?

An External Quality Assessment (EQA) is an independent assessment of your Internal Audit function per IIA Standard 8.4. It examines conformance, maturity and effectiveness. IIA 2024 mandates an EQA every five years for IIA members.

What is the difference between general and partial conformance?

General conformance means your function meets all 52 IIA standards. Partial conformance means one or more standards are partly met, with a substantiated improvement plan. Non-conformance means non-compliant. We report per standard.

How long does an External Quality Assessment take?

Lead time is 10 to 14 weeks. Week 1: scope and engagement letter. Weeks 2 to 8: documentation review, stakeholder interviews and methodology analysis. Weeks 9 to 10: findings and draft. Weeks 11 to 14: report and board presentation.

Who performs the EQA?

A senior IIA-accredited reviewer with at least ten years of Internal Audit experience, independent of your organisation and any prior advisory work. Our reviewers are partners of IIA Netherlands.

What does an EQA deliver concretely?

A substantiated report for your audit committee, a maturity snapshot and a development path. A conformance score per IIA 2024 Standard, not a rubber stamp but a calm, well-founded picture the board and audit committee can present.

Is an EQA mandatory for my organisation?

For IIA members an EQA is mandatory: every five years. For financial institutions under DNB or AFM supervision the obligation follows implicitly through supervisory expectation. For the public sector via the government-wide Internal Audit guidance.