2.2 Public Sector Auditing: INTOSAI & ISSAI Architecture

Key Takeaways

  • INTOSAI is the worldwide umbrella organization for Supreme Audit Institutions (SAIs), maintaining consultative status with the United Nations and setting international public sector auditing standards.

  • The Lima Declaration (INTOSAI-P 1) and Mexico Declaration (INTOSAI-P 10) set principles for legal, functional, organisational, financial and reporting independence of SAIs.

  • The INTOSAI Framework of Professional Pronouncements (IFPP) structures public sector audit into Founding Principles, ISSAI 100 Core Principles, and three specialized audit streams: Financial, Performance, and Compliance auditing.

  • Public-sector auditing serves citizens and legislatures, addresses use of public resources and legal authority, and reports under the SAI’s mandate while respecting lawful confidentiality restrictions.

  • The European Court of Auditors (ECA) serves as the EU's external Supreme Audit Institution under Articles 285–287 TFEU, issuing an annual Statement of Assurance (DAS) on financial reliability and legality/regularity.

Last updated: October 2026

2.2 Public Sector Auditing: INTOSAI & ISSAI Architecture

Public sector auditing operates in an environment distinct from commercial corporate auditing. Governments, public agencies, and international institutions manage taxpayers' funds under constitutional mandates rather than market forces. For prospective EU auditors, understanding the public sector standard-setting architecture established by the International Organization of Supreme Audit Institutions (INTOSAI) and the International Standards of Supreme Audit Institutions (ISSAI) is indispensable.


1. INTOSAI and the Constitutional Role of SAIs

Founded in 1953, INTOSAI serves as the autonomous, non-political umbrella organization for Supreme Audit Institutions (SAIs) worldwide. SAIs are the highest public audit bodies of a state or supranational union (such as the European Court of Auditors for the European Union, the Bundesrechnungshof in Germany, the Cour des comptes in France, or the Government Accountability Office in the United States).

INTOSAI maintains special consultative status with the United Nations Economic and Social Council (ECOSOC). UN General Assembly Resolutions 66/209 and 69/228 formally recognized that efficient, effective, and transparent public administration requires independent SAIs to foster good governance, fiscal discipline, and democratic accountability.


2. Foundations of SAI Independence: Lima and Mexico Declarations

Independence is the vital lifeblood of public sector auditing. If an audit institution is subject to political influence or executive control, its findings lose public trust. INTOSAI codified independence principles in two milestone instruments:

The Lima Declaration of Guidelines on Auditing Precepts (1977, INTOSAI-P 1)

Widely revered as the "Magna Carta of Government Auditing", the Lima Declaration established that public audit is an indispensable element of democratic governance. Key precepts include:

  • Constitutional Grounding: The existence, mandate, and independence of the SAI and its members must be anchored in the state constitution or supreme law.
  • Independence from the Executive: The SAI must be functionally, organizationally, and financially independent of the executive branches it inspects.
  • Financial Independence: SAIs must be allocated the financial resources necessary to accomplish their mandate through a dedicated budget approved directly by parliament, free from executive reduction or manipulation.
  • Exhaustive Access to Information: The SAI must possess the statutory right to examine all documents, registers, and facilities related to public financial management.

The Mexico Declaration on SAI Independence (2007, INTOSAI-P 10)

Building upon Lima, the Mexico Declaration translated conceptual autonomy into eight operational pillars:

  1. Existence of an appropriate and effective constitutional or statutory framework.
  2. Independence of SAI heads and members, including security of tenure and legal immunity in the normal discharge of duties.
  3. A sufficiently broad mandate and full discretion in the discharge of SAI functions.
  4. Unrestricted access to information and documentation.
  5. The right and obligation to report directly and publicly on their work.
  6. Freedom to decide the content and timing of audit reports and to publish and disseminate them.
  7. Existence of effective follow-up mechanisms on SAI recommendations.
  8. Financial, managerial, and administrative autonomy, including the availability of human and material resources.

3. The INTOSAI Framework of Professional Pronouncements (IFPP)

The modern INTOSAI Framework of Professional Pronouncements (IFPP) organizes public sector auditing standards into a transparent, three-tiered structure:

  1. INTOSAI Founding Principles: Foundational charters establishing international legal status and autonomy (INTOSAI-P 1 Lima and INTOSAI-P 10 Mexico).
  2. Core Principles (ISSAI 100): ISSAI 100: Fundamental Principles of Public Sector Auditing defines the overarching framework, purpose, and concepts applicable across all public sector engagements.
  3. Specific Audit Streams & Standards:
    • Financial Auditing (ISSAI 200 & ISSAI 2000–2899 series): Standards adapted directly from the IAASB's ISAs, accompanied by INTOSAI Practice Notes (PNs) that provide guidance for public sector applications (such as government fund accounting, sovereign debt, and statutory budgetary reporting).
    • Performance Auditing (ISSAI 300 & ISSAI 3000–3899 series): Principles and guidelines for examining whether public interventions, programs, and institutions operate in accordance with the principles of Economy, Efficiency, and Effectiveness (the "Three Es").
    • Compliance Auditing (ISSAI 400 & ISSAI 4000–4899 series): Principles and standards for assessing whether activities, financial transactions, and operational execution adhere to applicable authorities, statutory laws, budgetary resolutions, and established financial regulations.
INTOSAI Framework of Professional Pronouncements (IFPP)
 ├── INTOSAI Founding Principles (INTOSAI-P 1 Lima, INTOSAI-P 10 Mexico)
 ├── Core Principles (ISSAI 100: Fundamental Principles)
 └── Specific Audit Types:
      ├── Financial Audit (ISSAI 200 / ISSAI 2000 series - based on ISAs)
      ├── Performance Audit (ISSAI 300 / ISSAI 3000 series - The Three Es)
      └── Compliance Audit (ISSAI 400 / ISSAI 4000 series - Regularity & Propriety)

4. Comparing Private Commercial Audit and Public Sector SAI Audit

While public sector financial auditors apply ISA principles, the institutional mission and scope of an SAI audit diverge significantly from a commercial corporate audit:

DimensionPrivate Commercial AuditPublic Sector SAI Audit
Primary MandateEngagement contract governed by company lawConstitutional or statutory mandate established by supreme law
Primary StakeholdersShareholders, creditors, board of directors, capital marketsParliament, budgetary oversight committees, citizens, taxpayers
Core PurposeAssess financial statement fairness; protect investment capitalEnsure democratic accountability, transparency, and integrity of public funds
Engagement ScopeFinancial statements and internal control over financial reportingFinancial statements, compliance with legal authorities, and policy performance
Profit MotiveEvaluates profitability, commercial solvency, and return on equityAbsent; evaluates stewardship, budget execution, and public value delivery
Reporting TransparencyAudit report filed publicly; detailed management letters remain confidentialThe SAI can report and publish under its legal mandate; confidential material may remain restricted

5. The European Court of Auditors (ECA) as the EU's SAI

The European Court of Auditors (ECA) serves as the external, independent SAI of the European Union. Created by the Treaty of Brussels (1975) and operational since 1977, the ECA was elevated to full EU Institution status by the Treaty of Maastricht in 1993.

Legal Mandate and Treaty Basis

Under Articles 285 to 287 of the Treaty on the Functioning of the European Union (TFEU):

  • The ECA consists of one Member from each Member State, appointed by the Council after consultation with the European Parliament for a renewable six-year term.
  • The Court examines the accounts of all revenue and expenditure of the Union and all bodies, offices, or agencies established by the Union.
  • The Court provides the European Parliament and the Council with a Statement of Assurance (DAS - Déclaration d'Assurance) on:
    1. The reliability of the accounts (financial audit: whether the consolidated annual accounts are true and fair).
    2. The legality and regularity of underlying transactions (compliance audit: whether revenue collected and payments disbursed comply with the EU Treaties, Financial Regulation, and sectoral rules).

Primary Outputs of the ECA

  • Annual Reports: Incorporating the Statement of Assurance on the EU budget and European Development Funds, published annually in the Official Journal.
  • Special Reports: In-depth performance and compliance audits focused on specific policy areas, funding instruments (such as the Recovery and Resilience Facility, Common Agricultural Policy, or Horizon Europe), or administrative themes.
  • Opinions: Formal assessments on new or revised legislative proposals with substantial financial implications, issued at the request of other EU institutions.
Loading diagram...
INTOSAI Professional Pronouncements Architecture (IFPP)
Test Your Knowledge

What is the primary contribution of the Lima Declaration (INTOSAI-P 1) to international public sector auditing?

A

It defined standard statistical sampling formulas for auditing public procurement

B

It established that Supreme Audit Institution independence, including financial and organizational autonomy, is indispensable for democratic governance and must be grounded in supreme law

C

It mandated that all public sector bodies adopt private commercial IFRS accounting standards without modification

D

It created the European Court of Auditors as a specialized external review body under the European Parliament

Test Your Knowledge

Under the ISSAI 100 framework, how does a compliance audit fundamentally differ from a performance audit?

A

Compliance audits assess financial statement truth and fairness, while performance audits examine criminal fraud allegations

B

Compliance audits are strictly non-binding advisory reviews, whereas performance audits issue enforceable administrative fines

C

Compliance audits determine whether public activities adhere to governing laws, regulations, and budgetary authorities, whereas performance audits evaluate whether programs achieve economy, efficiency, and effectiveness

D

Compliance audits are performed exclusively by external private firms, whereas performance audits are reserved for parliamentary committees

Test Your Knowledge

Under Article 287 of the Treaty on the Functioning of the European Union (TFEU), what dual conclusion must the European Court of Auditors provide to the European Parliament and the Council in its Statement of Assurance (DAS)?

A

A macroeconomic forecast of future EU growth and an estimate of Member State tax revenue

B

An approval of each Commissioner's travel expenses and an endorsement of multiannual political targets

C

A certification of Member State national budget deficits and an audit of commercial bank liquidity reserves

D

An opinion on the reliability of the consolidated annual accounts and an opinion on the legality and regularity of the underlying revenue and payment transactions

Test Your Knowledge

Which of the following operational safeguards directly implements Principle 4 and Principle 6 of the Mexico Declaration on SAI Independence (INTOSAI-P 10)?

A

Unrestricted statutory access to all documentation and information combined with complete freedom to decide the content, timing, and public release of audit reports without executive pre-clearance

B

A requirement that the executive branch pre-screen and redact critical findings before audit reports are submitted to parliament

C

Limiting audit scrutiny strictly to state-owned commercial corporations while exempting government ministries

D

Allowing the Ministry of Finance to adjust the SAI's annual operating budget based on the number of critical findings issued

Sections you finish are checked off in the contents.