Internal audit as a strategic mechanism of corporate governance in public interest entities

Abstract

This paper examines the role of internal audit as a mechanism of corporate governance in public interest entities, with a focus on the conditions under which the function becomes effective in practice. While established frameworks provide a coherent conceptual design, their formal adoption does not guarantee meaningful impact on governance processes. Building on the relationship between governance, risk management, and internal control, the paper highlights the importance of translating audit findings into riskbased insights. By testing controls and reassessing residual risk, internal audit helps correct risk perceptions and supports more informed oversight by the board and audit committee. However, this contribution depends on the broader governance context, including organizational incentives, independence, and the effectiveness of oversight mechanisms. In the absence of such coherence, the function faces the risk of remaining formal and having limited influence on decision-making.