The Reserve Bank of India called on India-based banks to align their internal audit functions with international best practices, such as those issued by the Basel Committee on Banking Supervision (BCBS).
According to a 2002 guidance note, India banks are required to put in place a risk-based internal audit system as part of their internal control framework that relies on a well-defined policy for internal audit, functional independence with sufficient standing and authority within the bank, among others.
RBI said while the guidance note lays out the basic approach for risk-based internal audit functions, banks are expected to re-orient their approach, in line with the evolving best practices, as a part of their overall Governance and Internal Control framework.
“Banks are encouraged to adopt the International Internal Audit standards, like those issued by the BCBS and the Institute of Internal Auditors,” the RBI said in a statement.
To bring uniformity in approach followed by the banks and to align the expectations on internal audit function with the best practices, RBI has advised them certain norms on ”authority, stature and independence”, ”competence”, ”staff rotation”, ”tenor for appointment of head of internal audit”, ”reporting line” and ”remuneration.”
RBI further said the internal audit function should not be outsourced. However, where required, experts, including former employees, could be hired on contractual basis subject to the Audit Committee of the Board of Directors being assured that such expertise does not exist within the audit function of the bank, it said.
It has also said banks must ensure and demonstrate through proper documentation that their RBIA framework captures all the significant criteria / principles suited for their organizational structure, the business model and the risks. 