AQUA · Audit Quality Assessment

QAIP, self-assessment and EQA preparation - faster, better substantiated, less hassle.

The AQUA app helps CAEs systematically assess their IA function against the GIAS (Global Internal Audit Standards, IIA), from the annual QAIP/self-assessment to the mandatory external EQA.

From disconnected self-assessment to a secured quality cycle

Many internal audit functions lack structured insight into their own quality level. AQUA brings self-assessment, improvement actions and external assessment together in one platform, built on the IIA standards.

Now

Self-assessment without an objective framework

Own judgements are subjective and blind spots go unnoticed, especially with 52 IIA standards and dozens of requirements to track.

With AQUA

Structured testing against the IIA standards

All 52 Global Internal Audit Standards are embedded, with automatic scoring based on an evidence-based methodology.

Now

PDFs, Excel and SharePoint as an assessment tool

Separate documents and shared folders make substantiation untraceable, and improvement actions get lost among the findings.

With AQUA

One platform from assessment to action

Every finding links directly to an improvement action with owner and deadline, in the same platform as the assessment.

Now

EQA preparation takes months, trends are missing

External quality assessment means a manual, document-intensive process, and without stored scores improvement over the years cannot be demonstrated.

With AQUA

EQA-ready platform with trend history

The same platform also supports the external assessor, with scores that stay comparable year on year.

A selection from AQUA

Click a thumbnail for that screen, or the image itself for the full-size view.

Where the quality programme stands, from conformance per standard to open improvement actions.1 / 6 shown

Domain-specific assessments

In addition to the 52 core standards, AQUA supports IIA Topical Requirements, thematic assessments for specific risk domains that the IIA designates as priority areas.

TR

Cybersecurity

Assess audit coverage on cybersecurity risks against IIA Topical Requirements. Essential for organisations with significant digital exposure or an elevated risk profile.

TR

Third-Party Management

Suppliers and chain partners carry their own risks. TR Third-Party helps IA functions assess and strengthen their coverage on this growing risk domain.

TR

Organisational Behavior

Culture, integrity and ethics as an audit domain. AQUA supports the assessment of internal audit on behavioral and cultural risks in line with IIA standards.

A complete QAIP solution

AQUA brings everything needed for a professional quality assurance and improvement programme together, from self-assessment through improvement management to external evaluation.

From QAIP to EQA, optionally

From annual QAIP and self-assessment to optional EQA preparation, all in one platform. An EQA is not mandatory, but should you choose to pursue one, Audirium conducts it.

Gap to action

Each finding links directly to an improvement action. Track progress, assign owners and monitor deadlines, all in context.

Fully built on IIA standards

All 52 Global Internal Audit Standards embedded, including principles, requirements and considerations. Automatic scoring based on an evidence-based methodology. Topical Requirements fully integrated.

Personal conduct checklists (RA/RE)

Under each self-assessment you assess every person individually against the code of ethics of their own professional body, per fundamental principle, with tension signals such as confidentiality versus the duty to report to the board.

Insight & Foresight + AI improvement plan

An Insight & Foresight scan assesses the function’s forward-looking capability across methods, competences and enabling conditions. The AI improvement plan proposes prioritised actions based on that, straight into the action tracker. Read the analysis (Dutch) →

Secure team collaboration

Data per organisation is strictly separated, with SSO, MFA, audit logging and HTTPS, hosted in Europe. Multiple team members work simultaneously, with roles from contributor to reviewer to external assessor.

From start to reporting in five steps

1

Choose your assessment type

Start a Self Assessment, EQA or Topical Requirement such as Cybersecurity. The dashboard shows all ongoing and completed assessments immediately.

2

Assess per requirement

For each standard you record Generally Conforms, Partially Conforms or Does Not Conform, with rationale and evidence.

3

Score, insight and foresight

After each round the platform shows your maturity scores per principle, and the Insight & Foresight scan the function’s forward-looking capability.

4

Link improvement actions

Findings become actions with owner, deadline and priority. The action overview shows progress across the entire improvement programme.

5

Report, incl. personal norms

Generate a report for the audit committee with scores and maturity levels, including the personal RA/RE conduct checklists per fundamental principle.

EQA module: ready for the external assessor

Once every five years, the IIA requires an external quality assessment. For listed companies and semi-public institutions this is also embedded in the Corporate Governance Code. AQUA prepares your IA function, and supports the external assessor as well.

QAM 2024 integrated: the IIA Quality Assessment Manual 2024 is fully embedded as a reference framework for external assessors.

Dual perspective: SA and EQA are presented side by side for easy comparison of internal and external assessment per standard.

Export ready: generate a complete EQA report for the Audit Committee, including maturity scores per principle and domain.

Findings and narratives: external assessors add findings that are immediately visible to the CAE and management.

SAIV or Full EQA: your team conducts the assessment itself (SAIV) while the assessor validates and signs off, or the assessor takes on the full assessment (Full EQA). No documents back and forth by email, everything in one shared environment.

EQA at a glance

Required frequency Once every 5 years
Outcomes GC / PC / DNC, per Standard → Principle → Overall
Reference framework GIAS + QAM 2024
Assessment form SAIV / Full EQA
Languages NL / EN
Interested in an EQA engagement with Audirium? Learn about our EQA services →

Ready to professionalise your QAIP?

Request a demo or contact us for more information about AQUA for your organisation.