{"id":7482,"date":"2026-10-21T10:14:22","date_gmt":"2026-10-21T03:14:22","guid":{"rendered":"https:\/\/audithink.com\/?p=7482"},"modified":"2026-10-21T10:38:00","modified_gmt":"2026-10-21T03:38:00","slug":"internal-audit-charter-spi","status":"publish","type":"post","link":"https:\/\/audithink.com\/en\/blog\/piagam-audit-internal-spi\/","title":{"rendered":"Internal Audit Charter for the SPI: Minimum Content, Legal Basis, and a Sample Framework"},"content":{"rendered":"<figure class=\"wp-block-image size-full is-resized\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1200\" height=\"800\" src=\"https:\/\/audithink.com\/wp-content\/uploads\/2026\/10\/piagam-audit-internal-spi.webp\" alt=\"SPI internal audit charter\" class=\"wp-image-7483\" style=\"width:800px;height:auto\" title=\"\" srcset=\"https:\/\/audithink.com\/wp-content\/uploads\/2026\/10\/piagam-audit-internal-spi.webp 1200w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/10\/piagam-audit-internal-spi-300x200.webp 300w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/10\/piagam-audit-internal-spi-1024x683.webp 1024w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/10\/piagam-audit-internal-spi-768x512.webp 768w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/10\/piagam-audit-internal-spi-18x12.webp 18w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\">Photo by Scott Graham on Unsplash<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When the SPI audits a unit and the unit asks, \u201con what basis are you requesting this document?\u201d, the strongest answer is the charter. The internal audit charter explains why the SPI exists, what it may examine, who it reports to, and what is safeguarded so that it stays independent.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This article covers the definition of an internal audit charter, the legal basis and standards that govern it, its minimum content under regulations and the GIAS, a sample framework for a university SPI, and how to prepare and review it. References were checked as of October 21, 2026.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is an Internal Audit Charter?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">An internal audit charter (<em>internal audit charter<\/em>) is an official document that sets out the purpose, authority, responsibilities, and organizational position of the internal audit function. In government and BLU settings, a similar document is called the Internal Oversight Charter or SPI Charter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A charter differs from a mandate. In the GIAS, the mandate is the authority, role, and responsibilities given to the internal audit function. The chief audit executive must document or refer to that mandate in the charter, which is then approved by the board.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Are the Legal Basis and Standards That Govern the SPI Charter?<\/h2>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Reference<\/th><th>Provisions on the charter<\/th><\/tr><\/thead><tbody><tr><td>Regulation of the Minister of Religious Affairs 25\/2017 Article 5 (PTKN)<\/td><td>The performance of the SPI's duties and functions is set out in an SPI Charter issued by the head of the PTKN<\/td><\/tr><tr><td>Minister of Finance Regulation 129\/PMK.05\/2020 as amended by 76\/2025 (BLU)<\/td><td>The annex sets the minimum content of the Internal Oversight Charter, consisting of seven elements<\/td><\/tr><tr><td>GIAS 2024 Standards 6.1 and 6.2<\/td><td>The chief audit executive must develop and maintain the charter, discuss it with the board and senior management, and the board approves it<\/td><\/tr><tr><td>GIAS public sector section<\/td><td>When regulations serve as the mandate and charter, the charter must include those legal requirements<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">For general state universities and PTN-BH, the charter format is not set in the regulations referenced in this article. The obligation can still come from the statute, campus policy, or application of the GIAS. The legal basis of the SPI for each type of institution is discussed in the article <a href=\"https:\/\/audithink.com\/en\/article\/university-internal-supervisory-unit\/\">University SPI<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is the Minimum Content of an Internal Audit Charter?<\/h2>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Under GIAS Standard 6.2<\/th><th>Under the annex of Regulation 76\/2025 (BLU)<\/th><\/tr><\/thead><tbody><tr><td>The purpose of internal auditing (<em>purpose of internal auditing<\/em>)<\/td><td>Structure and position of the SPI<\/td><\/tr><tr><td>Commitment to adhere to the Global Internal Audit Standards<\/td><td>Duties and responsibilities of the SPI<\/td><\/tr><tr><td>The mandate, including the scope and types of services, and the board's responsibilities and expectations regarding management's support<\/td><td>Authority of the SPI<\/td><\/tr><tr><td>Organizational position and reporting lines<\/td><td>SPI code of ethics referring to the code of ethics of an internal oversight association in Indonesia or an internationally accepted code of ethics<\/td><\/tr><tr><td><\/td><td>Requirements for SPI internal auditors<\/td><\/tr><tr><td><\/td><td>Accountability of the SPI<\/td><\/tr><tr><td><\/td><td>Prohibition on SPI internal auditors holding concurrent duties and positions in BLU operational activities<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The two lists complement each other. An SPI subject to specific regulations should first include the elements from those regulations, then add GIAS elements not yet covered.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Does a Sample University SPI Charter Framework Look Like?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The following framework is an illustration that combines GIAS and regulatory elements. The final content must be adapted to the statute and regulations in force at your campus:<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Section<\/th><th>Content to include<\/th><\/tr><\/thead><tbody><tr><td>1. Basis and purpose<\/td><td>The legal basis for establishing the SPI and the purpose of internal audit on campus<\/td><\/tr><tr><td>2. Position and structure<\/td><td>The SPI's position in the organization, functional and administrative reporting lines, and membership composition<\/td><\/tr><tr><td>3. Mandate, duties, and scope<\/td><td>Types of services (assurance, consulting), non-academic oversight areas, and legal requirements that form the mandate<\/td><\/tr><tr><td>4. Authority<\/td><td>Unrestricted access to documents, personnel, assets, and systems; direct communication with leadership and the oversight body<\/td><\/tr><tr><td>5. Independence and objectivity<\/td><td>Prohibition on concurrent operational duties, safeguards if there are other roles, and annual confirmation of independence<\/td><\/tr><tr><td>6. Standards and code of ethics<\/td><td>Commitment to the GIAS or the standards adopted, and the auditors' code of ethics<\/td><\/tr><tr><td>7. Auditor requirements<\/td><td>Competence, certification, and professional development<\/td><\/tr><tr><td>8. Planning and reporting<\/td><td>Preparation of the annual oversight plan, reports of results, and follow-up monitoring<\/td><\/tr><tr><td>9. Quality assurance<\/td><td>A quality assurance and improvement program, including external assessment<\/td><\/tr><tr><td>10. Approval and review<\/td><td>The official who approves it, the review schedule, and how changes are made<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\t\t<div data-elementor-type=\"section\" data-elementor-id=\"5427\" class=\"elementor elementor-5427\" data-elementor-post-type=\"elementor_library\">\n\t\t\t<div class=\"elementor-element elementor-element-c693698 e-flex e-con-boxed e-con e-parent\" data-id=\"c693698\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f131bf4 cta-banner-article elementor-widget elementor-widget-image\" data-id=\"f131bf4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/audithink.com\/en\/demo\/\" data-at-cta=\"banner-artikel\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"2400\" height=\"800\" src=\"https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo.webp\" class=\"attachment-full size-full wp-image-5428\" alt=\"cta banner campaign\" srcset=\"https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo.webp 2400w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-300x100.webp 300w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-1024x341.webp 1024w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-768x256.webp 768w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-1536x512.webp 1536w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-2048x683.webp 2048w, https:\/\/audithink.com\/wp-content\/uploads\/2026\/07\/audithink-banner-v3-photo-18x6.webp 18w\" sizes=\"(max-width: 2400px) 100vw, 2400px\" title=\"\">\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\n\n\n<h2 class=\"wp-block-heading\">Who Prepares and Approves the Charter?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Under GIAS Standard 6.2, the chief audit executive develops and maintains the charter and discusses the draft with the board and senior management to ensure it reflects their understanding and expectations. The board approves the charter. At PTKN, Regulation 25\/2017 states that the SPI charter is issued by the head of the PTKN.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For campuses, the practical question is who plays the role of the \u201cboard\u201d. At a PTN-BH, the answer may be the board of trustees or the audit committee under the statute. At other state universities, the institution's leadership generally issues it. The GIAS public sector section acknowledges that the board may be a policy-setting body with limited authority. That is why who approves the charter should be stated explicitly in the charter.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Does the Charter Safeguard Independence?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">GIAS Standard 7.1 asks the chief audit executive to document in the charter the reporting relationships and organizational position set by the board. If the chief audit executive holds other roles outside audit, the responsibilities, nature of the work, and safeguards must be written in the charter. If those areas of responsibility are audited, there must be another way to obtain assurance, for example through an objective external assurance provider.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The same standard states that if the chief audit executive's non-audit responsibilities are temporary, assurance over those areas must be provided by an independent party during the assignment and for 12 months afterward. At a BLU, Article 263 of Minister of Finance Regulation 129\/PMK.05\/2020 prohibits SPI auditors from holding concurrent BLU operational duties, except in compliance and risk management functions. The code of ethics that underlies this is discussed in the article on the <a href=\"https:\/\/audithink.com\/en\/article\/code-of-ethics-internal-audit\/\">internal auditor code of ethics<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Often Should the Charter Be Reviewed?<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Periodically.<\/strong> Standard 6.1 asks the chief audit executive to periodically assess whether changed circumstances call for rediscussing the mandate with the board and senior management.<\/li>\n\n\n\n<li><strong>When major changes occur.<\/strong> Standard 6.2 states that the board reviews the charter with the chief audit executive to consider changes, such as a change of chief audit executive or in the type and level of the organization's risks.<\/li>\n\n\n\n<li><strong>When the mandate comes from regulations.<\/strong> The chief audit executive may not have the authority to amend it, but can conduct a documented review to make sure the legal reference is accurate.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The confirmation of independence to the board at least once a year (Standard 7.1) can be used as a trigger to check whether the charter is still appropriate.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Are Common Mistakes When Preparing a Charter?<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Copying another campus's charter.<\/strong> Statutes, forms of institution, and reporting lines differ.<\/li>\n\n\n\n<li><strong>Not stating the legal requirements.<\/strong> When regulations set the mandate, the charter must include it.<\/li>\n\n\n\n<li><strong>Unclear reporting lines.<\/strong> The head of the SPI does not know who to report to if there is a conflict with the unit being audited.<\/li>\n\n\n\n<li><strong>The charter is never communicated.<\/strong> Work units only get to know it when they are being audited.<\/li>\n\n\n\n<li><strong>Not reviewed.<\/strong> The charter does not change even though the organizational structure or regulations have changed.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">What Are the Steps to Prepare or Update a Charter?<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Gather the applicable legal basis: the statute, ministerial regulations, and BLU or PTKN provisions where relevant.<\/li>\n\n\n\n<li>Map the minimum elements from regulations and Standard 6.2 in a single table.<\/li>\n\n\n\n<li>Prepare a draft and discuss it with leadership and the oversight body to agree on expectations.<\/li>\n\n\n\n<li>Issue the charter through a decision by the authorized official.<\/li>\n\n\n\n<li>Communicate it to all work units and include it in the audit guidelines.<\/li>\n\n\n\n<li>Schedule an annual review together with the confirmation of independence.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">A clear charter also makes it easier to prepare plans and work programs. The relationship between the charter and other standards is discussed in the article <a href=\"https:\/\/audithink.com\/en\/article\/gias-2024-for-university-spi\/\">GIAS 2024 for University SPIs<\/a>. The annual plan prepared on the basis of the charter is discussed in the article <a href=\"https:\/\/audithink.com\/en\/article\/annual-oversight-plan-spi\/\">University SPI annual audit plan (PKPT)<\/a>, and the SPI's relationship with the audit committee, board, or supervisory board in the article <a href=\"https:\/\/audithink.com\/en\/article\/spi-coordination-audit-committee-bpk\/\">SPI coordination<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Does Internal Audit Software Help?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Audithink does not prepare or issue charters. A charter is an organizational decision. Once a charter exists, Audithink helps the SPI carry it out through six main features: risk assessment, audit planning, work program templates, notifications, follow-up monitoring, and automated reports. Campus audit needs are discussed on the page <a href=\"https:\/\/audithink.com\/en\/article\/audithink-for-educational-institutions\/\">Audithink for Educational Institutions<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">FAQ About the SPI Internal Audit Charter<\/h2>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>What is an internal audit charter?<\/summary>\n<p class=\"wp-block-paragraph\">An internal audit charter is an official document that sets out the purpose, mandate, authority, responsibilities, and organizational position and reporting lines of the internal audit function.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Is an SPI required to have a charter?<\/summary>\n<p class=\"wp-block-paragraph\">Regulation 25\/2017 of the Minister of Religious Affairs requires an SPI charter at PTKN, and Minister of Finance Regulation 76\/2025 sets the minimum content of the internal oversight charter for BLUs. The GIAS also requires a charter. For other state universities, the obligation depends on the statute and campus policy.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>What is the minimum content of a charter under the GIAS?<\/summary>\n<p class=\"wp-block-paragraph\">The purpose of internal auditing, the commitment to adhere to the standards, the mandate including the scope and types of services, and the organizational position and reporting lines.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Who approves the charter?<\/summary>\n<p class=\"wp-block-paragraph\">Under the GIAS, the board approves the charter after it is discussed with the chief audit executive and senior management. At PTKN, the SPI charter is issued by the head of the PTKN.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>What is the difference between a mandate and a charter?<\/summary>\n<p class=\"wp-block-paragraph\">A mandate is the authority, role, and responsibilities of the internal audit function. A charter is the document that contains or refers to that mandate along with other elements, such as organizational position and reporting lines.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>How often is the charter reviewed?<\/summary>\n<p class=\"wp-block-paragraph\">The GIAS calls for periodic review and review when important changes occur, such as a change of chief audit executive or in the organization's risks. Many SPIs review it once a year.<\/p>\n<\/details>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A good charter is short, clear, and in line with the regulations in force. It becomes the SPI's reference when requesting access, safeguarding independence, and explaining to every unit why oversight is carried out.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the SPI at your campus wants to carry out its charter with a tidy plan, work programs, and follow-up, <a href=\"https:\/\/audithink.com\/en\/demo\/\">schedule an Audithink demo<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>An internal audit charter sets the purpose, mandate, authority, and reporting lines of the SPI. Learn the legal basis, the minimum content under the GIAS and regulations, and a sample framework.<\/p>","protected":false},"author":1,"featured_media":7483,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","rank_math_title":"Piagam Audit Internal SPI: Isi Minimal dan Contoh Kerangka","rank_math_description":"Pahami piagam audit internal SPI: dasar hukum, isi minimal menurut GIAS 6.2 dan regulasi BLU, contoh kerangka, cara menyusun, dan peninjauannya.","rank_math_canonical_url":"","rank_math_focus_keyword":"piagam audit internal","rank_math_facebook_title":"","rank_math_facebook_description":"","rank_math_twitter_title":"","rank_math_twitter_description":"","_yoast_wpseo_title":"","_yoast_wpseo_metadesc":"","_yoast_wpseo_canonical":"","_yoast_wpseo_focuskw":"","_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","rank_math_robots":[]},"categories":[15],"tags":[],"class_list":["post-7482","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"_links":{"self":[{"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/posts\/7482","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/comments?post=7482"}],"version-history":[{"count":2,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/posts\/7482\/revisions"}],"predecessor-version":[{"id":7503,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/posts\/7482\/revisions\/7503"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/media\/7483"}],"wp:attachment":[{"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/media?parent=7482"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/categories?post=7482"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/audithink.com\/en\/wp-json\/wp\/v2\/tags?post=7482"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}