In South Africa, King III requires companies to have their corporate social responsibility (CSR) disclosures independently assured. Within this context, the purpose of this paper is to examine internal audit’s CSR assurance role.
With reference to the International Professional Practices Framework of the Institute of Internal Auditors, the first phase of the study conceptually considers whether internal audit does qualify as an independent CSR assurance provider. Using a content analysis of integrated reports, the second phase examines the extent to which internal audit’s CSR assurance role has been disclosed. The final phase relies on survey responses to understand the emerging trends observed in the second phase.
The study finds that although internal audit does provide independent CSR assurance, this assurance is primarily intended for internal stakeholders to assist in improving the quality of CSR reporting practices. With one notable exception across the study period, the results suggest that any benefits accruing to external stakeholders were not deliberate, but merely incidental. The paper concludes by arguing that although internal audit will continue to incorporate material CSR issues into its mandatory risk-based auditing approach, the results will not necessarily be publicly available. The extent of reliance that external stakeholders can place on company CSR disclosures are therefore not directly influenced by internal audit’s involvement in CSR-related matters. However, by adopting a proactive CSR role, internal audit can assist reporting companies improve their CSR reporting practices.
Although CSR assurance has been extensively researched, this is one of the first studies to specifically consider the CSR assurance role of the internal audit activity. Despite its South African orientation, given the emerging nature of the CSR assurance phenomenon, the study findings have global implications.
