Internal auditing is an independent, objective assurance and advisory activity designed to add value and improve an organization's operations. It helps an organization accomplish its objectives by bringing a systematic, disciplined approach to evaluate and improve the effectiveness of risk management, control and governance processes. Internal auditors are independent from the area they are reviewing and ensure no conflict of interest exists in an area prior to auditing.

The Office of Internal Audit applies the international standards for the professional practice of internal auditing.

The Institute of Internal Auditors defines assurance as:

“An objective examination of evidence for the purpose of providing an independent assessment on governance, risk management, and control processes for the organization. Examples may include financial, performance, compliance, system security, and due diligence engagements.”

The Institute of Internal Auditors defines advisory services as:

“Services through which internal auditors provide advice to an organization's stakeholders without providing assurance or taking on management responsibilities. The nature and scope of advisory services are subject to agreement with relevant stakeholders. Examples include advising on the design and implementation of new policies, processes, systems, and products; providing forensic services; providing training; and facilitating discussions about risks and controls.