CORAA

SIA 230 — Objectives of Internal Audit

ICAI Internal Audit Standards Board · October 2022 compendium · 200 series
Reviewed 1 October 2026

SIA 230 requires a written record of how the internal audit function is formed and how it operates, whether it is in-house or outsourced. That record links what is expected of the function to ICAI's Framework Governing Internal Audits and sets down accountability, authority and roles.

This page covers SIA 230 as it stands in ICAI’s October 2022 compendium. ICAI’s February 2026 compendium, applicable from 1 April 2026, renumbers the standards, so check the current number and text in that compendium before citing it in a report.

Same number, different title in the current set
In ICAI’s February 2026 compendium, the current set, SIA 230 is titled Internal Audit Evidence. This page covers SIA 230 as it stands in the October 2022 compendium: Objectives of Internal Audit. Only the titles of the February 2026 set are listed here; its text is not summarised on this site. The October 2022 compendium has a standard with that exact title: SIA 320 — Internal Audit Evidence. A matching title does not mean the text is the same. See both title lists side by side.

What the internal auditor has to do

  • Document how the internal audit function is formed and operates, in-house or outsourced.
  • Link what is expected of the function to the Framework Governing Internal Audits.
  • Record accountability, authority and roles.

How SIA 230 shows up in the internal audit file

  • A written document recording how the function is formed and operates, with accountability, authority and roles. In practice this is usually the internal audit charter for an in-house function or the engagement letter for an outsourced one.

Common mistakes in practice

  • Starting work on the strength of an appointment resolution alone, with nothing written on authority, accountability and roles.
  • For an outsourced function, treating the fee proposal as the document this standard asks for.

The file checklist and the mistakes above are practice points drawn from the requirements of the standard. They are not text from the standard.

Note
ICAI's Framework Governing Internal Audits (November 2018) defines internal audit in these words: “Internal audit provides independent assurance on the effectiveness of internal controls and risk management processes to enhance governance and achieve organisational objectives.”

Related standards

SIA 210 · Managing the Internal Audit FunctionSIA 220 · Conducting Overall Internal Audit PlanningSIA 250 · Communication with those Charged with Governance

How this relates to global frameworks

The IIA's Global Internal Audit Standards (effective 9 January 2025) are a separate set from a different body, and there is no paragraph-for-paragraph match. The IIA covers this ground in its first domain, Purpose of Internal Auditing, and in the principle Authorized by the Board.

Status and source

This standard is described here as it stands in the October 2022 compendium, which is the earlier set. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). That compendium renumbers the standards, so check the current number and text there before citing this standard in a report. ICAI's compendium page does not say whether the standards are mandatory or recommendatory, so we do not describe any standard as mandatory. The effective-date clause in each 2019 standard said it applied to internal audits beginning on or after a date to be notified by the Council of ICAI.

These pages summarise each standard as it stands in ICAI's Compendium of Standards on Internal Audit (as on 1 October 2022), working from an extract of that document. They are summaries and close paraphrases, not the text of the standards. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). For that current set we have only the titles, taken from the Board's 2025-26 annual report; its text is available from ICAI through a registration form on the compendium page and is not summarised here. ICAI's compendium page does not say whether the standards are mandatory or recommendatory, so we do not describe any standard as mandatory. Before you cite a number, a paragraph or a status in a report, check the February 2026 compendium. internalaudit.icai.org

Free working files for SIA 230

Take the working versions with you

Editable formats and tools from CORAA’s internal audit library that put SIA 230 into practice. Free to use.

Internal Audit Charter Template →Internal audit scope of work generator →Charter and mandate review →Internal audit applicability checker →

SIA 230 — frequently asked

What is SIA 230?

SIA 230, Objectives of Internal Audit, is a Standard on Internal Audit issued by the Internal Audit Standards Board of ICAI. SIA 230 requires a written record of how the internal audit function is formed and how it operates, whether it is in-house or outsourced. That record links what is expected of the function to ICAI's Framework Governing Internal Audits and sets down accountability, authority and roles.

Is SIA 230 mandatory?

ICAI's compendium page does not say whether the Standards on Internal Audit are mandatory or recommendatory, so we do not describe SIA 230 as mandatory. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). SIA 230 as described on this page is from the earlier October 2022 compendium. The February 2026 compendium renumbers the standards, so check the current number and text there before citing it in a report.

What should the internal audit file show for SIA 230?

A written document recording how the function is formed and operates, with accountability, authority and roles. In practice this is usually the internal audit charter for an in-house function or the engagement letter for an outsourced one.

Is SIA 230 the same standard in the February 2026 compendium?

The number is the same but the title is not. In ICAI's February 2026 compendium, which ICAI lists as applicable from 1 April 2026, SIA 230 is titled "Internal Audit Evidence". This page covers SIA 230 as it stands in the October 2022 compendium, titled "Objectives of Internal Audit". Only the titles of the February 2026 set are listed here; check its text in that compendium before citing it.

← Previous
SIA 220 — Conducting Overall Internal Audit Planning
Next →
SIA 240 — Using the Work of an Expert