A chief audit executive reports one number to the board every quarter: percent of the audit plan completed. It reads 100%. The board still cannot tell whether the function is fast, accurate, cheap, or useful. That gap is what key performance indicators exist to close.
A key performance indicator (KPI) is a quantified measure tied to a stated objective, tracked against a target over time. The chief audit executive (CAE) builds them for four reasons:
- Demonstrate value: give the board and senior management evidence that the function delivers, in language they already read.
- Drive improvement: expose weak spots (cycle time, overdue action plans) so resources move.
- Support accountability: connect the function's results to the audit plan and the charter mandate.
- Feed the quality program: performance measurement is one of the two monitoring tracks inside the quality assurance and improvement program (QAIP), alongside conformance with the Global Internal Audit Standards.
KEY: An indicator with no target and no owner is a statistic, not a KPI. The exam's preferred answer chain is objective, then indicator, then target, then reporting cadence.
Common mistakes
- Reporting one number. Plan completion alone tells the board about volume and nothing about coverage, quality, or cost. Pair every operational count with an effectiveness measure.
- Confusing efficiency with effectiveness. Cutting engagement hours 26.9% while finding acceptance drops 27 points is a worse function, not a better one.
- Setting 100% targets on staff-controlled measures. It converts the target into a scope-cutting incentive. Bands with variance explanations beat absolutes.
Bottom line
- KPI objectives: demonstrate value, drive improvement, support accountability, and feed the QAIP performance-monitoring track.
- A KPI needs an objective, a defined measure, a target, an owner, and a reporting cadence; without a target it is only a statistic.
- Balanced scorecard perspectives: stakeholder, internal process, financial/resource, and learning and growth.
- Target-setting constraints: data availability, controllability, behavioral distortion, a measured baseline, and a set of roughly 8 to 15 indicators.
Exam shortcut
Classify before you answer. If the stem's measure counts work done (engagements, reports, hours), it is operational or productivity. If it measures resource consumption against plan, efficiency. If it measures whether risk got covered or a control actually improved, effectiveness. Most wrong answers swap efficiency and effectiveness.
The full lesson (about 2,007 words, 13 min read) adds 2 worked examples, all 6 common mistakes, a self-check, free in the app.
Learning objectives
- 3
Browse all free CIA Part 3 lessons or jump into free CIA Part 3 practice questions.