CIAQM key terms

A structured set of interrelated processes, policies, and resources an organization uses to direct and control quality so that products or services consistently meet requirements and stakeholder expectations.

A formal statement of an organization's overall intentions and direction regarding quality, approved by top management and providing a framework for setting quality objectives.

Specific, measurable targets an organization sets to achieve the intentions described in its quality policy, typically tied to processes, functions, and timeframes.

The activity of defining which quality standards are relevant to a project or process and deciding how those standards will be satisfied.

Planned and systematic activities designed to provide confidence that quality requirements will be fulfilled, emphasizing prevention of defects rather than detection after the fact.

Operational techniques and activities used to monitor and verify that outputs meet specified quality requirements, focusing on detecting and correcting defects.

Examination of a product, process, or service against defined criteria to determine conformity, often performed at a point in time rather than continuously.

Fulfilment of a specified requirement, such as a standard, regulation, contract clause, or internal procedure.

A failure to meet a specified requirement, which may relate to a product, service, process, or management system element.

Action taken to eliminate the cause of a detected nonconformity or other undesirable situation so that it does not recur.

Action taken to eliminate the cause of a potential nonconformity or other undesirable situation before it occurs.

A structured investigation to identify the underlying reason a problem occurred, distinguishing fundamental causes from symptoms so that corrective action addresses the source.

A recurring activity to enhance performance, often described as a cycle of planning, doing, checking, and acting on results.

A four-stage iterative method (plan, do, check, act) for testing and refining changes, widely used to structure improvement efforts and management system reviews.

An approach that considers uncertainty and its potential effects when planning and operating a management system, so that preventive measures are proportionate to risk.

A person or group that can affect, be affected by, or perceive itself to be affected by an organization's decisions, activities, or quality performance.

The use of indicators, metrics, and monitoring activities to assess how well processes and controls are achieving intended results.

A quantifiable measure selected because it reflects progress toward a critical objective and supports management decisions about performance.

A framework that describes progressive levels of capability or sophistication in a process or function, used to benchmark current state and plan improvement.

The shared values, beliefs, and behaviors within an organization that determine how seriously quality is treated and how openly problems are raised and addressed.

The signals sent by senior leadership through their actions, priorities, and communications that shape the ethical and quality climate of the organization.

The structures and processes by which an organization is directed, controlled, and held accountable, including oversight of risk and quality arrangements.

The function, team, or group within an organization that performs internal audit engagements and provides independent, objective assurance and consulting services.

The senior individual responsible for managing the internal audit activity, including its quality, resources, and conformance with applicable standards.

A formal document approved by the board that defines the internal audit activity's purpose, authority, and responsibility, and establishes its position within the organization.

The freedom from conditions that threaten the ability of the internal audit activity to carry out its responsibilities in an unbiased manner, including organizational reporting lines and freedom from operational duties.

An unbiased mental attitude that allows internal auditors to perform engagements without compromising quality and without subordinating judgment to others.

The placement of the internal audit activity so that it reports to a level within the organization that allows it to fulfill its responsibilities free from interference.

The board, audit committee, or equivalent body charged with governing and overseeing the internal audit activity and receiving its quality reporting.

A situation, relationship, or circumstance that threatens or appears to threaten an internal auditor's objectivity or the activity's independence, requiring disclosure and management.

The degree of skill and diligence reasonably expected of a competent internal auditor, considering the complexity of the engagement and the needs of stakeholders.

The knowledge, skills, and abilities needed to perform assigned audit work effectively, maintained through continuing professional development and appropriate resourcing.

Ongoing learning activities that maintain and enhance an internal auditor's knowledge and skills throughout their career.

The oversight of audit work by more experienced staff to ensure objectives are met, quality standards are followed, and conclusions are adequately supported.

Records prepared or obtained by auditors that document the evidence gathered, procedures performed, and conclusions reached during an engagement.

A supervisory check that working papers are complete, accurate, and sufficient to support findings, performed before an engagement is finalized.

A program covering all aspects of the internal audit activity that evaluates and promotes conformance with standards and continual improvement of the activity's performance.

Ongoing monitoring and periodic self-assessment performed within the internal audit activity to evaluate conformance and identify improvement opportunities.

Continuous or routine supervisory and review activities built into daily audit work that provide early signals about quality and conformance.

A structured review, conducted at planned intervals, in which the internal audit activity evaluates its own conformance and performance against defined criteria.

An independent evaluation of the internal audit activity conducted by a qualified assessor or assessment team from outside the organization at least once every five years.

A person or team outside the organization, free from conflicts of interest, who is qualified to evaluate the internal audit activity against recognized standards.

An external quality assessment performed by qualified reviewers from another organization or comparable function, offering an outside perspective on conformance and performance.

An external quality assessment method involving a comprehensive review of the internal audit activity's conformance, typically through document review, interviews, and testing.

An external assessment approach in which the internal audit activity performs a self-assessment that is then validated by an independent, qualified reviewer.

The defined boundaries of a quality assessment, specifying which elements of the internal audit activity, time period, and standards will be examined.

The standards, policies, or benchmarks against which the internal audit activity's conformance and performance are judged during a quality assessment.

The state of meeting applicable professional standards, a code of ethics, and the internal audit charter in the performance of audit work.

A failure to comply with an applicable standard, code requirement, or charter provision, which must be evaluated for significance and addressed.

A documented set of actions, owners, and timelines designed to correct identified quality deficiencies and prevent their recurrence.

A written document summarizing the objectives, scope, methodology, findings, and conclusions of a quality assessment, including recommendations for improvement.

The periodic communication of the internal audit activity's quality results, conformance status, and improvement actions to the oversight body.

A structured approach defining what quality information will be shared, with whom, in what format, and how frequently.

A sustained effort to identify and implement enhancements to processes, skills, and controls based on monitoring results, feedback, and assessment findings.

Knowledge captured from completed engagements or assessments about what worked well and what should change, used to improve future performance.

Comparing an activity's practices, performance, and maturity against peers or recognized good practice to identify gaps and improvement opportunities.