Internal Audit Toolkit 2026 — The New Global Internal Audit Standards, Combined Assurance & SA Public Sector Audit (Guide, Flash Cards & 50-Question Self-Assessment)

On 9 January 2025 the old 2017 internal audit Standards died. Anything still teaching the IPPF's four documents, "consulting engagements," or optional audit strategies is now describing a profession that no longer exists. This toolkit was built for the new world.

The Internal Audit Toolkit covers the IIA's Global Internal Audit Standards as they actually are — plus the two layers no international guide covers: South Africa's combined assurance model and the public sector's statutory internal audit regime.

What's inside — one interactive file, three tools:

📘 Ten chapters of internal audit craft:

• The 2025 changeover explained — what the Global Internal Audit Standards changed, what the restructured IPPF now contains (Standards, Topical Requirements, Global Guidance), and why the old material misleads
• The five domains as the IIA actually wrote them — including the detail most summaries get wrong: Domain I carries no numbered principles, and Domain II's ethics has five principles, with Due Professional Care (the one everyone forgets) restored to its place
• The new mandatory requirements — the internal audit strategy (vision, objectives, initiatives), the board-level "essential conditions," formal KPIs, and Topical Requirements binding by topic
• The Three Lines Model (2020) — first, second, and third lines, why "defence" was dropped, and the governing body's position above all three
• Governing and managing the function — the board-issued charter, the CAE's dual reporting lines, risk-based planning from audit universe to annual plan, co-sourcing and outsourcing done properly
• Assurance vs advisory engagements — the new terminology, the three-party structure, self-review threats and their safeguards
• Quality assurance — the QAIP, internal assessments, the five-yearly external quality assessment, and the conformance statement rules
• Combined assurance — South Africa's own invention — from King III to King IV's Principle 15, carried forward as Principle 12 under King V, with the assurance map as the working tool
• Public sector internal audit — PFMA and MFMA requirements stated precisely (s165's real outsourcing test, s166's audit committee rules), the accounting officer's personal accountability, AGSA's mandate, and the five audit outcomes from clean to disclaimed
• A key-numbers table and a 60-term glossary

🃏 40 Flash Cards — domains, principles, deadlines, and statutes, filterable by topic.

📝 50-question self-assessment — timed mode (75 minutes, 70% benchmark) or practice mode with instant explanations, per-topic results, and unlimited retakes with reshuffled questions.

Who it's for: Internal auditors adapting to the new Standards, CAEs and audit committee members, CIA Part 1 candidates, public sector internal audit units and their audit committees, risk and governance professionals, and students of auditing and governance.

Honesty, as on every product we publish: the Certified Internal Auditor (CIA) is the IIA's own examination — this toolkit is strong conceptual support for the new-Standards content but is not official IIA material and no product can guarantee an exam outcome. For the South African layer — combined assurance and PFMA/MFMA — there is no public exam at all: this is working fluency for people who serve audit functions and audit committees.

How it works: Instant download. One HTML file — any browser, any device, works offline. No account, no expiry.

Sovereignty by Char (Pty) Ltd is an independent publisher, not affiliated with the IIA, IIA SA, the IoDSA, National Treasury, or the AGSA. This toolkit is education, not internal audit advice — full disclaimers inside.