Just a short one – the UK’s CIIA, when concluding about how best to set out an annual or periodic internal audit plan, states that: ‘Internal audit planning is as much an art as it is a science.’ http://www.iia.org.uk/resources/managing-internal-audit/how-to-prepare-annual-internal-audit-coverage-plans/ (behind members’ paywall).
But surely the whole point in trying to systematise internal audit planning is to create a model that helps the auditor to understand a complex social reality, but not pretend to perfectly render it? In other words, good internal audit is neither an art or a science. It is a social science!
See my previous views on this blog and why being a social science matters, fundamentally and at an assumptions level, to how internal audit is undertaken and delivered.