CORAA
ICAI Internal Audit Standards Board · Full list · Reviewed 1 October 2026

Standards on Internal Audit.

The full list of Standards on Internal Audit (SIA) issued by ICAI, for 2026. The current set is in ICAI’s February 2026 compendium, applicable from 1 April 2026, and its titles are listed first. Below that, each standard in the earlier October 2022 compendium has its own page: what it covers in plain English, what the internal auditor has to do, how it shows up in the audit file, common mistakes, and the working files to go with it.

Two sets of standards, in plain words

ICAI set up its internal audit committee in February 2004 and renamed it the Internal Audit Standards Board in November 2008. The Board’s standards exist in two generations, and anyone citing an SIA in 2026 needs to know which one they mean.

The current set: the February 2026 compendium. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). It holds the revised standards the Board issued during 2025-26: two Quality Standards (QSIA 1 and QSIA 2) and SIAs renumbered into a 100, 200 and 300 series. ICAI makes that compendium available through a registration form on its compendium page. Only the titles are listed here, and its text is not summarised on this site. ICAI's compendium page does not say whether the standards are mandatory or recommendatory, so we do not describe any standard as mandatory.

The earlier set: the October 2022 compendium. It has 19 principle-based standards issued from 2019, numbered in a 100, 200, 300 and 500 series, plus 5 older standards that kept their original numbers (SIA 5, SIA 6, SIA 7, SIA 11, SIA 18). The per-standard pages on this site describe each standard as it stands in this compendium. Before you cite one in a report, check its current number and text in the February 2026 compendium.

The numbers overlap. SIA 310, for example, is Planning the Internal Audit Assignment in the October 2022 compendium and Presentation and Communication of Internal Audit Report in the February 2026 set. Always quote the number together with the title.

Current set · February 2026 compendium · applicable from 1 April 2026 · titles only

The current Standards on Internal Audit: February 2026 compendium

These are the titles of the current standards, as listed in the ICAI Internal Audit Standards Board’s 2025-26 annual report. The text is in the February 2026 compendium, which ICAI provides through a registration form; it is not summarised here, so this table gives titles and nothing else. The last two columns are a mechanical comparison with the October 2022 compendium: what the same number is called there, and whether a standard with the identical title exists there. They are not an ICAI mapping of old numbers to new ones, and a matching title does not mean the text is the same.

NumberTitle in the February 2026 setSame number in the October 2022 compendiumIdentical title in the October 2022 compendium
Quality Standards
QSIA 1Internal Audit Quality AspectsNo standard with this numberNone
QSIA 2Peer Review and Third-Party AssessmentNo standard with this numberNone
Series 100: Core Concepts and Principles
SIA 110Basic Principles of Internal AuditSIA 110 — Nature of AssuranceNone
SIA 120Terms of Internal Audit EngagementSIA 120 — Internal ControlsNone
SIA 130Managing the Internal Audit FunctionSIA 130 — Risk ManagementSIA 210
SIA 140Internal ControlsSIA 140 — GovernanceSIA 120
SIA 150Risk ManagementSIA 150 — Compliance with Laws and RegulationsSIA 130
SIA 160Compliance with Laws and RegulationsNo standard with this numberSIA 150
Series 200: Audit Execution
SIA 210Knowledge of Entity and Its EnvironmentSIA 210 — Managing the Internal Audit FunctionNone
SIA 220Internal Audit PlanningSIA 220 — Conducting Overall Internal Audit PlanningNone
SIA 230Internal Audit EvidenceSIA 230 — Objectives of Internal AuditSIA 320
SIA 240Use of ToolsSIA 240 — Using the Work of an ExpertNone
SIA 250Internal Audit DocumentationSIA 250 — Communication with those Charged with GovernanceSIA 330
SIA 260Review and Supervision of Audit AssignmentsNo standard with this numberSIA 350
SIA 270Experts and Third-Party EngagementNo standard with this numberNone
SIA 280Irregularities and FraudNo standard with this numberNone
SIA 290Communication with Management and Those Charged with GovernanceNo standard with this numberNone
Series 300: Internal Audit Reporting
SIA 310Presentation and Communication of Internal Audit ReportSIA 310 — Planning the Internal Audit AssignmentNone
SIA 320Issuing Assurance ReportsSIA 320 — Internal Audit EvidenceNone
SIA 330Special Purpose ReportsSIA 330 — Internal Audit DocumentationNone
Earlier set · October 2022 compendium · 100 series · 5 standards

SIA 110 to SIA 150

Key concepts: assurance, internal controls, risk management, governance and compliance.

SIA 110
Nature of Assurance
SIA 110 applies to assurance assignments, meaning assignments where the internal auditor issues a formal opinion.
Read the summary →
SIA 120
Internal Controls
SIA 120 gives a common vocabulary for internal controls and explains who is responsible for what: management's responsibilities and the internal auditor's, as set by law and regulation such as the Companies Act and the SEBI listing regulations.
Read the summary →
SIA 130
Risk Management
SIA 130 sets out risk-management terminology and the responsibilities of the Board, the risk department and management under law.
Read the summary →
SIA 140
Governance
SIA 140 sets out governance terminology and the roles of the Board, the Audit Committee and management under applicable law.
Read the summary →
SIA 150
Compliance with Laws and Regulations
SIA 150 sets out the terminology of compliance with laws and regulations, and the responsibility of the Board and management, under law, for a compliance framework.
Read the summary →
Earlier set · October 2022 compendium · 200 series · 5 standards

SIA 210 to SIA 250

Running the internal audit function: managing it, planning the year, its objectives, experts, and talking to the board.

SIA 210
Managing the Internal Audit Function
SIA 210 puts overall responsibility for the internal audit function on the Chief Internal Auditor.
Read the summary →
SIA 220
Conducting Overall Internal Audit Planning
SIA 220 covers the entity-wide internal audit plan, usually for a year.
Summary and paragraph-level requirements →
SIA 230
Objectives of Internal Audit
SIA 230 requires a written record of how the internal audit function is formed and how it operates, whether it is in-house or outsourced.
Read the summary →
SIA 240
Using the Work of an Expert
SIA 240 deals with when and how an internal auditor gets help from a competent expert because the team lacks the knowledge an assignment needs.
Read the summary →
SIA 250
Communication with those Charged with Governance
SIA 250 requires a communication channel with those charged with governance that is continuous, process-driven, independent, objective and timely.
Read the summary →
Earlier set · October 2022 compendium · 300 series · 7 standards

SIA 310 to SIA 390

Carrying out an assignment: planning, evidence, documentation, review, communication, reporting and follow-up.

SIA 310
Planning the Internal Audit Assignment
SIA 310 covers the plan for an individual assignment.
Summary and paragraph-level requirements →
SIA 320
Internal Audit Evidence
SIA 320 is about the evidence behind the internal auditor's conclusions.
Summary and paragraph-level requirements →
SIA 330
Internal Audit Documentation
SIA 330 is the working-paper standard.
Summary and paragraph-level requirements →
SIA 350
Review and Supervision of Audit Assignments
SIA 350 covers review and supervision during an assignment: confirming or updating the plan, evaluating the procedures, evidence, documentation and conclusions produced by staff, helping to shape observations and draft the report, and confirming that the Standards on Internal Audit were followed throughout.
Summary and paragraph-level requirements →
SIA 360
Communication with Management
SIA 360 requires a written, agreed protocol for communicating with management, so that scope, approach, objectives and timing are clear.
Summary and paragraph-level requirements →
SIA 370
Reporting Results
SIA 370 covers the internal audit report on a significant assignment.
Summary and paragraph-level requirements →
SIA 390
Monitoring and Reporting of Prior Audit Issues
SIA 390 covers what happens to observations after the report: monitoring and closing open issues from earlier audits, independently validating the corrective action the auditee says it has taken, escalating delays, and reporting status to those charged with governance on time.
Summary and paragraph-level requirements →
Earlier set · October 2022 compendium · 500 series · 2 standards

SIA 520 to SIA 530

Particular settings: information technology and operations handled by outside service providers.

SIA 520
Internal Auditing in an Information Technology Environment
SIA 520 covers internal audit work in an information technology environment.
Read the summary →
SIA 530
Third Party Service Provider
SIA 530 is about independent assurance over operations the entity has outsourced to third parties.
Read the summary →
Earlier set · October 2022 compendium · Legacy standards · 5 standards

Legacy standards still in the compendium

Five older standards that kept their original numbers and still sit in the October 2022 compendium. Each is still headed there as recommendatory in the initial period, with the date for any change left blank.

SIA 5 · October 2008
Sampling
SIA 5 covers designing and selecting an audit sample, whether statistical or not, and evaluating the results, so that the internal auditor has sufficient appropriate evidence.
Read the summary →
SIA 6 · October 2008
Analytical Procedures
SIA 6 covers analytical procedures: ratio and trend analysis and the investigation of unusual fluctuations.
Read the summary →
SIA 7 · October 2008
Quality Assurance in Internal Audit
SIA 7 requires a quality assurance system for internal audit, made up of internal and external quality reviews, so that reports comply with professional, regulatory and legal requirements.
Read the summary →
SIA 11 · January 2009
Consideration of Fraud in an Internal Audit
SIA 11 defines fraud and restates that preventing and detecting it is primarily management's responsibility, discharged through internal controls.
Read the summary →
SIA 18 · March 2013
Related Parties
SIA 18 is about evidence that related-party transactions are properly captured by the entity's internal controls and are consistent with its code of conduct and with disclosure law.
Read the summary →

Which set applies?

The February 2026 set. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). The February 2026 set is therefore the current one, and the October 2022 compendium is the earlier set. ICAI's compendium page does not say whether the standards are mandatory or recommendatory, so we do not describe any standard as mandatory. The Board's 2025-26 annual report described the revised standards as recommendatory at present, to become mandatory after a period of six months, and gave no calendar date for that.

What that means for the pages here. The per-standard pages describe each standard as it stands in the earlier October 2022 compendium. The February 2026 compendium renumbers the standards, so check the current number and text there before citing one in a report.

Three habits keep a file safe:

  • Get the February 2026 compendium from the compendium page of the ICAI Internal Audit Standards Board and check the current number and text of a standard before you cite it. Do not describe a standard as mandatory unless ICAI says so.
  • Name the edition you followed in the engagement terms and in the report, and quote each standard by number and title together.
  • State that the audit was conducted in accordance with the Standards on Internal Audit only where the file can back it up. In the October 2022 text, SIA 370 para 4.2 allows that statement only if it can be substantiated. See SIA 370 — Reporting Results.

Standards on Internal Audit — frequently asked

How many Standards on Internal Audit are there?

ICAI's Compendium of Standards on Internal Audit as on 1 October 2022 has 19 principle-based standards from the 2019 set, numbered from SIA 110 to SIA 530, and 5 older standards that kept their original numbers (SIA 5, SIA 6, SIA 7, SIA 11, SIA 18). The current set, in the February 2026 compendium, is renumbered: two Quality Standards (QSIA 1 and QSIA 2) and SIAs in a 100, 200 and 300 series, listed by title on this page.

Are the Standards on Internal Audit mandatory?

ICAI's compendium page gives an applicability date, not a status, so we do not describe the standards as mandatory. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). The February 2026 set is therefore the current one, and the October 2022 compendium is the earlier set. ICAI's compendium page does not say whether the standards are mandatory or recommendatory, so we do not describe any standard as mandatory. The Board's 2025-26 annual report described the revised standards as recommendatory at present, to become mandatory after a period of six months, and gave no calendar date for that.

Which set of SIAs applies in 2026?

The February 2026 set. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). The per-standard pages on this site describe each standard as it stands in the earlier October 2022 compendium; the text of the February 2026 set is available from ICAI through a registration form on its compendium page. Check the current number and text there before citing a standard in a report, and quote number and title together, because the same number carries a different title in the two sets.

Is there an SIA 380?

No SIA 380 appears in ICAI's October 2022 compendium. SIA 110 para 3.6 and SIA 370 paras 1.3 and 4.3 refer to an SIA 380 as though it exists. Cite those paragraphs of SIA 110 and SIA 370 instead of citing SIA 380.

What is the difference between SIA and SA?

SIA stands for Standards on Internal Audit, issued by the Internal Audit Standards Board of ICAI for internal audit work. SA stands for Standards on Auditing, issued by ICAI's Auditing and Assurance Standards Board for the statutory audit of financial statements. They are separate sets with separate numbering, so SIA 320 (Internal Audit Evidence) and SA 320 (materiality) are different standards.

Are the Standards on Internal Audit the same as ISAS?

No. The Information Systems Audit Standards (ISAS) were published in February 2026 by a different ICAI board, the Digital Accounting and Assurance Board. They are a separate set and should not be confused with SIA 520 or any other Standard on Internal Audit.

Source and related reading

These pages summarise each standard as it stands in ICAI's Compendium of Standards on Internal Audit (as on 1 October 2022), working from an extract of that document. They are summaries and close paraphrases, not the text of the standards. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). For that current set we have only the titles, taken from the Board's 2025-26 annual report; its text is available from ICAI through a registration form on the compendium page and is not summarised here. ICAI's compendium page does not say whether the standards are mandatory or recommendatory, so we do not describe any standard as mandatory. Before you cite a number, a paragraph or a status in a report, check the February 2026 compendium. internalaudit.icai.org

For the working side of internal audit, CORAA keeps a free library of internal audit checklists, risk and control matrices and tools. For statutory audit, see the Standards on Auditing (SA) index.