The Internal Audit Division applies and upholds the following principles.

Principle 1: Demonstrate Integrity
Internal auditors demonstrate integrity in their work and behavior.

Integrity is behavior characterized by adherence to moral and ethical principles, including demonstrating honesty and the courage to act based on relevant facts, even when facing pressure to do otherwise, or when doing so might create potential adverse personal or organizational consequences. In simple terms, internal auditors are expected to tell the truth and do the right thing, even when it is uncomfortable or difficult.

Integrity is the foundation of the other principles of ethics and professionalism, including objectivity, competency, due professional care, and confidentiality. The integrity of internal auditors is essential to establishing trust and earning respect.

Principle 2: Maintain Objectivity  

Internal auditors maintain an impartial and unbiased attitude when performing internal audit services and making decisions.

Objectivity is an unbiased mental attitude that allows internal auditors to make professional judgments, fulfill their responsibilities, and achieve the Purpose of Internal Auditing without compromise. An independently positioned internal audit function supports internal auditors’ ability to maintain objectivity.

Principle 3: Demonstrate Competency  

Internal auditors apply the knowledge, skills, and abilities to fulfill their roles and responsibilities successfully.

Demonstrating competency requires developing and applying the knowledge, skills, and abilities to provide internal audit services. Because internal auditors provide a diverse array of services, the competencies needed by each internal auditor vary. In addition to possessing or obtaining the competencies needed to perform services, internal auditors improve the effectiveness and quality of services by pursuing professional development.

Principle 4: Exercise Due Professional Care

Internal auditors apply due professional care in planning and performing internal audit services.

The standards that embody exercising due professional care require:

• Conformance with the Global Internal Audit Standards.
• Consideration of the nature, circumstances, and requirements of the work to be performed.
• Application of professional skepticism to critically assess and evaluate information. 

Due professional care requires planning and performing internal audit services with the diligence, judgment, and skepticism possessed by prudent and competent internal auditors. When exercising due professional care, internal auditors perform in the best interests of those receiving internal audit services but are not expected to be infallible.

Principle 5: Maintain Confidentiality

Internal auditors use and protect information appropriately.

Because internal auditors have unrestricted access to the data, records, and other information necessary to fulfill the internal audit mandate, they often receive information that is confidential, proprietary, and/or personally identifiable. (See also Principle 6 Authorized by the Board and its standards.) This includes information in physical and digital form as well as information derived from oral communication, such as formal or informal meeting discussions. Internal auditors must respect the value and ownership of information they receive by using it only for professional purposes and protecting it from unauthorized access or disclosure, internally and externally.