Stepping up internal audits for businesses

The decree applies to the following regulated entities - listed companies; enterprises with 50 per cent of their charter capital held by the state and state enterprises, both of which operate in a parent-subsidiary business model; organisations and individuals conducting IA activities; people’s committees of centrally-affiliated cities and provinces, ministries, ministry-level bodies, and governmental agencies; and organisations and individuals conducting IA activities.

The intent of Decree 05 is to help Vietnamese businesses reach international best practices on IA, and enhance transparency of information in the marketplace as well as efficiency and effectiveness of corporate governance.

The goal of IA is to perform and provide independent reviews, assessments, and consultancy to the organisation in three key areas. Firstly, the internal control system of the organisation is operated appropriately to address risks.

Secondly, the corporate governance and risk management processes of the organisation are highly effective and efficient. And lastly, internal accomplishment of operational objectives, plans, and strategies of the organisation is assured.

While it is important to establish and operate the IA function in accordance with Decree 05, businesses have the opportunity to make the IA function deliver value beyond regulatory compliance.

By aligning the IA function with the business operational objectives, plans and strategies, it can be used to address business risks found in the organisation’s internal control systems, as well as strengthen the existing corporate governance and risk management processes.