{"id":508,"date":"2024-01-16T09:45:34","date_gmt":"2024-01-16T09:45:34","guid":{"rendered":"https:\/\/audithink.sekawanstudio.com\/?p=508"},"modified":"2026-10-13T13:29:03","modified_gmt":"2026-10-13T06:29:03","slug":"internal-audit","status":"publish","type":"post","link":"https:\/\/audithink.com\/en\/blog\/internal-audit\/","title":{"rendered":"What is Internal Audit? Here are its duties, types, and salary!"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Internal audit is an independent and objective assurance and consulting service inside an organization, used to assess and improve the effectiveness of governance, risk management, and control. The results are delivered to management and the board (directors, commissioners, or the audit committee) as a basis for improvement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This article covers the internal audit function in an organization: its meaning, how it differs from external audit, its purpose, duties, types, position, reference standards, and estimated salary.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is Internal Audit?<\/h2>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6ae7a80dc2585&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6ae7a80dc2585\" class=\"wp-block-image aligncenter size-full is-resized wp-lightbox-container\"><img fetchpriority=\"high\" decoding=\"async\" width=\"768\" height=\"512\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Auditor.jpg\" alt=\"3 employees are engaged\" class=\"wp-image-511\" style=\"width:506px;height:auto\" title=\"\" srcset=\"https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Auditor.jpg 768w, https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Auditor-300x200.jpg 300w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption class=\"wp-element-caption\">(unsplash.com)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">For issuers and public companies, POJK 56\/POJK.04\/2015 Article 1 point 1 defines internal audit as an independent and objective assurance and consulting activity, and Article 3 requires them to have an internal audit unit.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The global professional reference is the 2024 edition of the Global Internal Audit Standards (GIAS) from The IIA. The standards consist of five domains and 15 principles, and have been effective since January 9, 2025.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Terminology note: internal audit is also used for ISO internal quality audits, namely checking that a quality management system conforms to standards such as ISO 9001. This page covers the internal audit function in an organization. For quality audits, read <a href=\"https:\/\/audithink.com\/en\/article\/iso-internal-audit\/\">ISO Internal Audit<\/a> and <a href=\"https:\/\/audithink.com\/en\/article\/internal-quality-audit\/\">Internal Quality Audit<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Does Internal Audit Differ from External Audit and Internal Control?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">These three terms are often confused. The table below compares them.<\/p>\n\n\n\n<figure class=\"wp-block-table has-fixed-layout\"><table><thead><tr><th>Aspect<\/th><th>Internal audit<\/th><th>External audit of financial statements<\/th><th>Internal control<\/th><\/tr><\/thead><tbody><tr><td>Executor<\/td><td>A function or unit inside the organization, part of whose work can be supported by third parties<\/td><td>A licensed Public Accountant<\/td><td>The whole organization<\/td><\/tr><tr><td>Purpose<\/td><td>Assurance and consulting on governance, risk management, and control<\/td><td>Forming and expressing an opinion on the financial statements<\/td><td>Helping the organization achieve its operations, reporting, and compliance objectives<\/td><\/tr><tr><td>Recipient<\/td><td>The board and management (at issuers: the president director and the Board of Commissioners)<\/td><td>Users of the financial statements<\/td><td>Management<\/td><\/tr><tr><td>Basis<\/td><td>GIAS 2024 and, for issuers, POJK 56\/POJK.04\/2015<\/td><td>Law 5\/2011 and the IAPI Audit Standards, for example SA 700<\/td><td>Organizational policy and frameworks such as COSO<\/td><\/tr><tr><td>Time<\/td><td>Ongoing, following the annual audit plan<\/td><td>Periodic, generally annual<\/td><td>Runs continuously in day-to-day operations<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Internal audit is independent because of its position in the organization (the function reports to the board) and objective in its assessments. An audit of financial statements that results in an opinion is performed by a licensed Public Accountant under Law 5\/2011.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">See also:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/audithink.com\/en\/article\/difference-audit-internal-and-external\/\">7 Differences between Internal and External Audit, Let's Know!<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/internal-control\/\">Internal Control: Definition, Purpose, Types, &amp; COSO Components<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/corporate-internal-audit-unit\/\">Internal Audit Unit: roles, tasks, and sops that must be known<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What Are the Purpose and Functions of Internal Audit?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">According to GIAS 2024, internal audit strengthens the organization's ability to create, protect, and sustain value by providing independent, risk-based, and objective assurance, advice, insight, and foresight. This function is carried out through two types of services:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Assurance services: objective assessments to provide assurance, for example on compliance, finance, operations or performance, and technology.<\/li>\n\n\n\n<li>Advisory or consulting services: advice to stakeholders without providing assurance and without taking on management responsibilities.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Internal audit does not replace the internal control that management carries out. Improvements remain management's responsibility, while the auditor assesses and monitors the follow-up.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Approaches such as <a href=\"https:\/\/audithink.com\/en\/article\/risk-based-audit\/\">risk-based audit<\/a> and <a href=\"https:\/\/audithink.com\/en\/article\/continuous-auditing\/\">continuous auditing<\/a> help this function focus on the areas with the highest risk.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What are the duties of internal audit?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For issuers and public companies, POJK 56\/POJK.04\/2015 Article 7 sets the minimum duties and responsibilities of the internal audit unit as follows:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Prepare and carry out the annual internal audit plan.<\/li>\n\n\n\n<li>Test and evaluate the implementation of internal control and the risk management system in line with company policy.<\/li>\n\n\n\n<li>Examine and assess efficiency and effectiveness in finance, accounting, operations, human resources, marketing, information technology, and other activities.<\/li>\n\n\n\n<li>Provide improvement suggestions and objective information about the activities examined at all levels of management.<\/li>\n\n\n\n<li>Prepare audit result reports and submit them to the president director and the Board of Commissioners.<\/li>\n\n\n\n<li>Monitor, analyze, and report on the implementation of the follow-up to the improvements that have been recommended.<\/li>\n\n\n\n<li>Work together with the Audit Committee.<\/li>\n\n\n\n<li>Prepare a program to evaluate the quality of internal audit activities.<\/li>\n\n\n\n<li>Carry out special examinations when needed.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">That list is the minimum requirement for issuers and public companies. Other organizations follow their own internal audit charter. At the level of a single engagement, the work is carried out through the eight steps below, which are mapped to the GIAS standards in the table that follows.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Gather Comprehensive Information About the Auditee<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/audithink.com\/en\/article\/auditee-definition\/\" data-type=\"post\" data-id=\"756\">Auditee<\/a><\/strong> is the party, unit, or activity that is the subject of the audit. The auditor needs to understand it well, from how it works, its organizational structure, and its processes to the related reports, before assessing its risk (GIAS Standard 13.2).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Review Applicable Documents and Requirements<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The auditor reviews the relevant documents and requirements, including policies, procedures, and regulations. The results of this review are used to set the engagement objectives, scope, and evaluation criteria (GIAS Standard 13.3 and 13.4).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Plan the Audit Program in Detail<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An engagement comes from the annual audit plan, which is prepared on a documented risk assessment performed at least once a year (GIAS Standard 9.4). For each engagement, the auditor prepares a work program containing the procedures needed to achieve the engagement objectives (Standard 13.6) and communicates with the auditee so that the schedule and data needs are clear. The aim is to improve, not merely to find mistakes.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Create <em>Checklist <\/em>Audit<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A checklist, or list of questions, is a tool within the work program that helps the auditor and the auditee prepare the data needed. A checklist does not replace the auditor's professional judgment. See <a href=\"https:\/\/audithink.com\/en\/article\/examples-of-internal-audit-checklist\/\">internal audit checklist examples<\/a> for an illustration.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Performing Testing and Analysis<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The auditor gathers information, analyzes it, and then evaluates potential findings against the criteria that have been set (GIAS Standard 14.1 to 14.3). Even with a checklist, the auditor still needs to examine carefully every aspect related to the engagement objectives.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">6. Collecting and Analyzing Audit Evidence<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Every finding must be supported by sufficient evidence and documented in the engagement workpapers (GIAS Standard 14.6), so that audit results are accurate and accountable. Learn about their types and characteristics in <a href=\"https:\/\/audithink.com\/en\/article\/audit-evidence\/\">audit evidence<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">7. Reporting Audit Findings<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The auditor delivers findings along with recommendations, or agrees on action plans with management, including their implementation schedule (GIAS Standard 14.4). The final result is communicated in a <a href=\"https:\/\/audithink.com\/en\/article\/report-audit\/\">audit report<\/a> that contains the objectives, scope, recommendations or action plans, and conclusions (Standard 15.1).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">8. Monitoring Follow-Up<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Internal auditors monitor follow-up to make sure recommendations or action plans are actually carried out by management (GIAS Standard 15.2). For issuers, this is also a duty of the internal audit unit under POJK 56\/POJK.04\/2015 Article 7 letter f. Why findings get ignored, and how to fix it, is covered in <a href=\"https:\/\/audithink.com\/en\/article\/corporate-internal-audit-finding-follow-up\/\">follow-up on audit findings<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-table has-fixed-layout\"><table><thead><tr><th>Step<\/th><th>Main output<\/th><th>GIAS 2024 reference<\/th><\/tr><\/thead><tbody><tr><td>1. Understanding the audit subject<\/td><td>An understanding of the process and the engagement risk assessment<\/td><td>Standard 13.2<\/td><\/tr><tr><td>2. Setting objectives, scope, and criteria<\/td><td>Engagement objectives, scope, and evaluation criteria<\/td><td>Standard 13.3 and 13.4<\/td><\/tr><tr><td>3. Preparing the audit program<\/td><td>The annual audit plan and the engagement work program<\/td><td>Standard 9.4 and 13.6<\/td><\/tr><tr><td>4. Creating a checklist<\/td><td>A list of questions within the work program<\/td><td>Standard 13.6<\/td><\/tr><tr><td>5. Testing and analysis<\/td><td>Test results and potential findings<\/td><td>Standard 14.1 to 14.3<\/td><\/tr><tr><td>6. Audit evidence<\/td><td>Engagement workpapers<\/td><td>Standard 14.6<\/td><\/tr><tr><td>7. Reporting<\/td><td>Recommendations or action plans and the final report<\/td><td>Standard 14.4 and 15.1<\/td><\/tr><tr><td>8. Follow-up<\/td><td>Follow-up status in a tracking system<\/td><td>Standard 15.2<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">See also:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/audithink.com\/en\/article\/audit-stages\/\">Complete Guide to the stages of Internal and external Audit<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/audit-planning\/\">The importance of Audit planning and its steps in the examination<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/internal-audit-work-program\/\">Audit Program (Internal Audit Work Program): Definition, Types, Examples, and How to Prepare One<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/internal-audit-report-quality-standards\/\">Quality standards of Internal Audit Reports and their important components<\/a><\/li>\n<\/ul>\n\n\n\t\t<div data-elementor-type=\"section\" data-elementor-id=\"5427\" class=\"elementor elementor-5427\" data-elementor-post-type=\"elementor_library\">\n\t\t\t<div class=\"elementor-element elementor-element-c693698 e-flex e-con-boxed e-con e-parent\" data-id=\"c693698\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f131bf4 cta-banner-article elementor-widget elementor-widget-image\" data-id=\"f131bf4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/audithink.com\/en\/demo\/\" data-at-cta=\"banner-artikel\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"2400\" height=\"800\" src=\"https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo.webp\" class=\"attachment-full size-full wp-image-5428\" alt=\"cta banner campaign\" srcset=\"https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo.webp 2400w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-300x100.webp 300w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-1024x341.webp 1024w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-768x256.webp 768w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-1536x512.webp 1536w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-2048x683.webp 2048w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-18x6.webp 18w\" sizes=\"(max-width: 2400px) 100vw, 2400px\" title=\"\">\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\n\n\n<h2 class=\"wp-block-heading\">What are the types of internal audit?<\/h2>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6ae7a80dc4716&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6ae7a80dc4716\" class=\"wp-block-image aligncenter size-large is-resized wp-lightbox-container\"><img decoding=\"async\" width=\"1024\" height=\"576\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-Adalah-1024x576.jpg\" alt=\"2 workers are looking at the company&#039;s statistical performance\" class=\"wp-image-513\" style=\"width:560px;height:auto\" title=\"\" srcset=\"https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-Adalah-1024x576.jpg 1024w, https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-Adalah-300x169.jpg 300w, https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-Adalah-768x432.jpg 768w, https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-Adalah.jpg 1366w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption class=\"wp-element-caption\">(unsplash.com)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The following are common examples of internal audit types. The list is not closed: POJK 56\/POJK.04\/2015 Article 7 letter c lists finance, accounting, operations, human resources, marketing, information technology, and other activities, while the GIAS glossary gives examples of assurance on compliance, finance, operations or performance, and technology.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Financial Audit<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/audithink.com\/en\/article\/financial-audit\/\" data-type=\"post\" data-id=\"718\">Financial Audit<\/a><\/strong> aimed at assessing the accuracy and reliability of the company's financial information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this type, internal auditors examine transactions, records, and financial statements to verify compliance with accounting principles and company policy. The result is assurance for management and the board, not an opinion on the financial statements as expressed by a Public Accountant.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Compliance Audit<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/audithink.com\/en\/article\/compliance-audit\/\" data-type=\"post\" data-id=\"3388\">Compliance Audit<\/a><\/strong> focuses on checking the company's level of compliance with applicable regulations, laws, internal policies, and tax regulations.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Operational Audit<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An operational audit aims to evaluate the efficiency and effectiveness of a company's operations by reviewing business processes, operational procedures, and resource utilization.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Human Resources (HR) Audit<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">HR audits are conducted to assess the company's HR management practices, including compliance with labor regulations, payroll policies, and performance evaluation systems.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Information Technology (IT) Audit<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">IT audits are conducted to evaluate the security and effectiveness of a company's information systems which involves assessing security policies, access controls, and compliance with IT standards.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Besides those five types, internal audit can also cover fraud audits, which are discussed in <a href=\"https:\/\/audithink.com\/en\/article\/fraud-audit\/\">fraud audit<\/a>. Risk-based audit is an approach to setting priorities, not a separate type of audit.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is the Position and Independence of Internal Audit in an Organization?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Domain III of GIAS 2024 governs the internal audit function through three principles: authorized by the board (Principle 6), positioned independently (Principle 7), and overseen by the board (Principle 8). The internal audit charter sets out the function's purpose, mandate, and organizational position (Standard 6.2), and the chief audit executive confirms organizational independence to the board at least once a year (Standard 7.1).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At issuers and public companies, POJK 56\/POJK.04\/2015 provides that the head of the internal audit unit is appointed and dismissed by the president director with the approval of the Board of Commissioners and is accountable to the president director (Article 5). The unit is authorized to access information and communicate directly with the Board of Directors, the Board of Commissioners, and the Audit Committee (Article 8), and its charter contains a prohibition on holding concurrent operational duties (Article 9 letter g).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These two sets of provisions are used side by side. The details of reporting relationships are adjusted to each organization's internal audit charter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In government agencies, internal oversight is carried out by the government internal supervisory apparatus (APIP) through audits, reviews, evaluations, monitoring, and other oversight activities (Government Regulation 60\/2008 Articles 48 and 49). It is discussed in <a href=\"https:\/\/audithink.com\/en\/article\/public-sector-internal-audit\/\">public sector internal audit<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">See also:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/audithink.com\/en\/article\/code-of-ethics-internal-audit\/\">Code of Ethics for Internal Auditors: 5 GIAS 2024 Principles and Ethical Dilemma Examples<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What Standards and Rules Does Internal Audit Follow?<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>GIAS 2024 from The IIA: five domains (Purpose of Internal Auditing, Ethics and Professionalism, Governing the Internal Audit Function, Managing the Internal Audit Function, and Performing Internal Audit Services) with 15 principles, effective since January 9, 2025. The IIA provides an official Indonesian translation.<\/li>\n\n\n\n<li>Ethics: Domain II of GIAS contains five principles, namely integrity, objectivity, competency, due professional care, and confidentiality.<\/li>\n\n\n\n<li>Issuers and public companies: POJK 56\/POJK.04\/2015 on the establishment and guidelines for preparing the internal audit unit charter.<\/li>\n\n\n\n<li>Other financial services sectors, such as commercial banks, have their own POJK, for example POJK 1\/POJK.03\/2019 for commercial banks.<\/li>\n\n\n\n<li>Government agencies: Government Regulation 60\/2008 on the government internal control system.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The standards for external audits of financial statements are different: the Audit Standards (SA) issued by IAPI and Law 5\/2011 on Public Accountants. A more detailed explanation of the framework in Indonesia is in <a href=\"https:\/\/audithink.com\/en\/article\/internal-audit-standards-in-indonesia\/\">internal audit standards in Indonesia<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">References:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.theiia.org\/globalassets\/site\/standards\/globalinternalauditstandards_2024january9.pdf\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Global Internal Audit Standards 2024 (The IIA)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.theiia.org\/globalassets\/site\/standards\/editable-versions\/global-internal-audit-standards-indonesian.pdf\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">GIAS 2024 Indonesian translation (The IIA)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.theiia.org\/en\/content\/communications\/press-releases\/2025\/january\/the-iia-celebrates-the-effective-date-of-the-global-internal-audit-standards\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">The IIA press release on the effectiveness of GIAS<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/peraturan.bpk.go.id\/Download\/119697\/SALINAN-POJK%20%2056.%20Pembentukan%20dan%20Pedoman%20Penyusunan%20Piagam%20Unit%20Audit%20Internal.pdf\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">POJK 56\/POJK.04\/2015 (BPK)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jdih.kemenkeu.go.id\/api\/download\/fulltext\/2008\/60TAHUN2008PP.htm\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Government Regulation 60\/2008 (JDIH Kemenkeu)<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/jdih.kemenkeu.go.id\/fullText\/2011\/5TAHUN2011UU.htm\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Law 5\/2011 on Public Accountants (JDIH Kemenkeu)<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">How much does an internal auditor earn?<\/h2>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6ae7a80dc5798&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6ae7a80dc5798\" class=\"wp-block-image aligncenter size-large is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"683\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-1024x683.jpg\" alt=\"workers are working in front of a laptop struggling with numbers and statistics of the company\" class=\"wp-image-512\" style=\"width:490px;height:auto\" title=\"\" srcset=\"https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-1024x683.jpg 1024w, https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-300x200.jpg 300w, https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-768x512.jpg 768w, https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-1536x1024.jpg 1536w, https:\/\/audithink.com\/wp-content\/uploads\/2024\/01\/Audit-2048x1366.jpg 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption class=\"wp-element-caption\">(unsplash.com)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">After understanding the meaning, duties, and types of internal audits, you may be curious about the salary of an internal auditor.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Salary is influenced by experience, industry sector (finance, manufacturing, technology), location, company size, and job level (junior, senior, manager).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There is no official salary data for internal auditors in Indonesia. The figures below are estimates from secondary sources as of October 2026 and do not specifically distinguish internal auditors.<\/p>\n\n\n\n<figure class=\"wp-block-table has-fixed-layout\"><table><thead><tr><th>Source<\/th><th>Coverage<\/th><th>Estimate<\/th><\/tr><\/thead><tbody><tr><td>LokerID (job posting data)<\/td><td>Internal or External Audit positions, calculated from 33 job postings that state a base salary<\/td><td>Rp4.5 million to Rp6.2 million per month, average Rp5.3 million<\/td><\/tr><tr><td>KantorKu (HRIS provider blog)<\/td><td>Auditors in general; the method is not explained<\/td><td>Junior Rp5 million to Rp8 million; 3 to 5 years Rp9 million to Rp16 million; over 5 years Rp17 million to Rp30 million and above<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">LokerID combines internal and external audit positions, while KantorKu covers auditors in general, so both are only an initial picture. Compare them with the latest job postings and the size of the target organization.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">See also:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/audithink.com\/en\/article\/internal-auditor\/\">Get to know the work of an Internal Auditor and the skills that must be owned<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/internal-audit-staff\/\">Internal Audit Staff: duties, skills and qualifications required<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">How Can Software Help Manage Internal Audit?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Application <strong><a href=\"https:\/\/audithink.com\/en\/\">Audithink from Sekawan Media<\/a><\/strong> is customizable internal audit management software. Its features include risk assessment, audit planning, work program templates, notifications, follow-up monitoring, and automated reports. These features relate to steps 3, 4, 7, and 8 in the table above, namely the audit plan and work program, reporting, and follow-up monitoring. The audit itself is still carried out by your organization's internal auditors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you're interested, hurry <a href=\"https:\/\/audithink.com\/en\/demo\/\"><strong>schedule an app demo<\/strong><\/a> or <strong><a href=\"https:\/\/audithink.com\/en\/contact\/\">discuss first<\/a><\/strong> with <em>product expert<\/em> us now!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">FAQ About Internal Audit<\/h2>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary><strong>What is internal audit?<\/strong><\/summary>\n<p class=\"wp-block-paragraph\">Internal audit is an independent and objective assurance and consulting service inside an organization to assess and improve the effectiveness of governance, risk management, and control. The results are delivered to management and the board as a basis for improvement.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary><strong>What is the difference between internal audit and external audit?<\/strong><\/summary>\n<p class=\"wp-block-paragraph\">Internal audit is carried out by a function inside the organization and produces findings and recommendations on governance, risk, and control. An external audit of financial statements is carried out by a licensed Public Accountant and produces an opinion for users of the financial statements. Their purpose, report recipients, and standards basis differ.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary><strong>What is the purpose of internal audit?<\/strong><\/summary>\n<p class=\"wp-block-paragraph\">According to GIAS 2024, internal audit strengthens an organization's ability to create, protect, and sustain value through independent, risk-based, and objective assurance, advice, insight, and foresight for the board and management.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary><strong>What are the duties of internal audit?<\/strong><\/summary>\n<p class=\"wp-block-paragraph\">For issuers and public companies, the minimum duties under POJK 56\/POJK.04\/2015 Article 7 include preparing the annual audit plan, testing controls and risk management, delivering reports to the president director and the Board of Commissioners, and monitoring the follow-up on improvements.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary><strong>What are the types of internal audit?<\/strong><\/summary>\n<p class=\"wp-block-paragraph\">Common examples are financial, compliance, operational, human resources, and information technology audits. The list is not closed: fraud audits and other activities can also be in scope, and risk-based audit is an approach, not a type.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary><strong>Is internal audit mandatory?<\/strong><\/summary>\n<p class=\"wp-block-paragraph\">Issuers or public companies must have an internal audit unit (POJK 56\/POJK.04\/2015 Article 3), and banks must have an internal audit function under POJK 1\/POJK.03\/2019. Other organizations follow the rules of their own sector.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary><strong>How much does internal audit pay in Indonesia?<\/strong><\/summary>\n<p class=\"wp-block-paragraph\">There is no official salary data. Estimates from secondary sources as of October 2026 show an average of about Rp5.3 million per month from LokerID job posting data for internal or external audit positions, while KantorKu estimates Rp5 million to Rp8 million for juniors and more with experience.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary><strong>What is the difference between internal audit and ISO internal quality audit?<\/strong><\/summary>\n<p class=\"wp-block-paragraph\">Internal audit is a function in an organization that assesses governance, risk, and control. An ISO internal quality audit checks that a quality management system conforms to the requirements of an ISO standard, for example ISO 9001. The terms are similar, but the purpose and reference standards differ.<\/p>\n<\/details>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Read also \u2014 internal audit applications by industry:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/audithink.com\/en\/article\/internal-audit-application-for-state-owned-enterprises\/\" data-type=\"post\" data-id=\"5552\">Internal Audit Application for State-Owned Enterprises: A Guide for SPI &amp; APIP<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/bank-internal-audit-application\/\" data-type=\"post\" data-id=\"5541\">Bank Internal Audit Application: Guide to Features, Benefits, and How to Choose<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/manufacturing-audit-application\/\" data-type=\"post\" data-id=\"5566\">Manufacturing Audit Application: Guide to Features, Benefits, and How to Choose<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/mining-audit-application\/\" data-type=\"post\" data-id=\"5547\">Mining Audit Application: A Solution for Managing Minerba SMKP Audits<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/plantation-audit-application\/\" data-type=\"post\" data-id=\"5615\">Plantation Audit Application: A Guide to Features, Benefits, and How to Choose<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/audithink.com\/en\/article\/oil-and-gas-audit-applications\/\" data-type=\"post\" data-id=\"5582\">Oil and Gas Audit Applications: A Guide to Features, Benefits, and How to Choose<\/a><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Internal audit evaluates the effectiveness of an organization's internal control systems and risk management. Learn the duties, types, and salary ranges.<\/p>","protected":false},"author":4,"featured_media":525,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","rank_math_title":"Apa itu Internal Audit? Pengertian, Tugas, dan Jenisnya","rank_math_description":"Internal audit adalah jasa asurans dan konsultasi independen untuk menilai tata kelola, risiko, dan pengendalian. Simak tugas, jenis, dan kisaran gajinya.","rank_math_canonical_url":"","rank_math_focus_keyword":"internal audit","rank_math_facebook_title":"","rank_math_facebook_description":"","rank_math_twitter_title":"","rank_math_twitter_description":"","_yoast_wpseo_title":"","_yoast_wpseo_metadesc":"","_yoast_wpseo_canonical":"","_yoast_wpseo_focuskw":"","_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","rank_math_robots":[]},"categories":[15],"tags":[27],"class_list":["post-508","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-manajemen-audit"],"acf":[],"_links":{"self":[{"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/posts\/508","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/comments?post=508"}],"version-history":[{"count":6,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/posts\/508\/revisions"}],"predecessor-version":[{"id":7312,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/posts\/508\/revisions\/7312"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/media\/525"}],"wp:attachment":[{"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/media?parent=508"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/categories?post=508"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/tags?post=508"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}