The Internal Audit function provides the Audit Committee, the Management Board and senior management with independent and objective assurance and advice on governance, risk management and internal control. It assists the organisation in reaching its objectives by systematically and methodically evaluating its processes, risk management and internal control system.
In addition to reviewing the effectiveness of these areas and reporting on aspects of the Orange Polska Group’s compliance with them, Internal Audit makes recommendations to address any key issues and improve processes. Once any recommendations are agreed with management, Internal Audit monitors their implementation and reports to the Audit Committee on progress made at every meeting.
The Internal Audit function considers all of Orange Polska Group‘s activities, and reports to the Audit Committee, and to the Management Board President. The Director of Internal Audit attends all scheduled meetings of the Audit Committee, and also has the power to raise any matters with the members of the Committee without the presence of management.
Internal Audit responsibilities are clearly defined and approved as stated in the internal audit charter, which is reviewed and approved annually by the Audit Committee. The Internal Audit function acts in conformity with the standards for the professional practice of Internal Auditing and the Code of Ethics issued by the Institute of Internal Auditors (IIA). Internal audit plans are drawn up annually and take account of risk assessment, changing business needs and issues raised by management, follow-up on prior audit findings and cyclical review planning. The approach also builds reserved hours into the plan for ad-hoc, specially requested audits, and for urgent audit issues that arise throughout the year. The annual internal audit plan is approved by the Management Board President and then submitted for the Audit Committee to review. Progress against the annual internal audit plan is monitored and regularly reported to the Audit Committee.
In the course of its work, the Internal Audit function also liaises with the statutory auditor, discussing relevant aspects of their respective activities and assisting them in internal control testing which ultimately supports the assurance provided to the Audit Committee and management.
The effectiveness of the internal audit is monitored using the quality assurance and improvement programme which is composed of internal assessment activities and annual external assessment by IFACI – l’Institut Francais des Auditeurs et Contrôleurs Internes (the French Chapter of the IIA). Following the assessment carried out in 2020, Orange Polska’s internal audit maintained its IIA certification from IFACI.
The Audit Committee reviews the annual plan of Internal Audit, its budget and progress reports. The Committee monitors the periodic reporting on internal audit actions and findings and responsiveness of management to Internal Audit recommendations. In addition, the Committee meets privately with the Director of Internal Audit and reviews the independence of the internal audit process.