When the chief audit executive (CAE) reports to the chief financial officer (CFO), it can create a potential conflict of interest and impair the independence of the internal audit activity. This reporting structure may lead to limitations in the scope of engagements, particularly when auditing areas under the CFO's purview.
Independence and objectivity are critical for the effectiveness of internal auditing, and reporting to the CFO can undermine these principles, restricting the ability to audit financial and other related areas without bias or undue influence.
References:
* The IIA Standards: Standard 1110 - Organizational Independence: "The chief audit executive must report to a level within the organization that allows the internal audit activity to fulfill its responsibilities. The chief audit executive must confirm to the board, at least annually, the organizational independence of the internal audit activity."
* IIA Practice Guide: "Independence and Objectivity": Discusses the importance of appropriate reporting lines to maintain audit independence and avoid conflicts of interest.