6. Conclusions
This study confirms that internal audits can add value beyond verifying compliance. The conclusion is that both short- and long-term changes in audit practices are needed. In the long term, it is critical to create management engagement by involving managers in various ways throughout the audit process, for example, in aligning the audit criteria to strategy and risk. However, this changed role of management is not solely dependent on changes not only on the management side but also on the auditor side; the latter are exemplified by a need to ensure that auditors have relevant knowledge and understanding of the organisation’s challenges in the area being audited. By establishing the sponsor role, prerequisites for a good relationship and mutual understanding between management and auditor are established. In addition, to enable short-term gains, other, more hands-on changes are needed, such as explicit requirements regarding the time from audit to report and improved, and customised reporting formats.