Evaluator―The party(ies) who evaluates the underlying subject matter against the criteria. The evaluator possesses expertise in the underlying subject …

Firm―A sole assurance practitioner, partnership or corporation or other entity of individual assurance practitioners. “Firm” should be read as referring to its public sector equivalents where …

Fraud―An intentional act by one or more individuals among management, those charged with governance, employees, or third parties, involving the use of deception to obtain an unjust or illegal …

Fraud risk factors―Events or conditions that indicate an incentive or pressure to commit fraud or provide an opportunity to commit …

Implementation―The process of putting controls into effect by deployment or roll-out of controls to enable their operation as designed. …

Inclusive method―A method of dealing with the controls operating at a third party, which are integral to the system or control component which is subject to the assurance engagement, whereby the third party’s relevant control objectives and related …

Indirect controls―Controls which do not directly address the risks of a control objective not being achieved, but have an impact on the effectiveness of direct controls in detecting, preventing or correcting a failure to achieve a control objective on a …

Intended users―The individual(s) or organisation(s), or group(s) thereof that the assurance practitioner expects will use the assurance report. In some cases, there may be intended users other than those to whom the assurance report is …

Internal audit function―A function of an entity that performs assurance and consulting activities designed to evaluate and improve the effectiveness of the entity’s governance, risk management and internal control …

Internal auditors―Those individuals who perform the activities of the internal audit function. Internal auditors may belong to an internal audit department or equivalent function, out-sourcing entity or co-sourced from both internal and out-sourced …