What the Relationship Should Look Like
The CAE-Board relationship that characterises high-performing internal audit functions has several consistent features. The first is access: the CAE meets privately with the Audit Committee Chair on a regular basis — not only at formal meetings, but informally and proactively when significant matters arise. This access is protected by the Standards and must be exercised, not treated as a courtesy available if requested.
The second feature is candour. The CAE who tells the committee only what is comfortable to hear — softening difficult findings, avoiding conflicts with management, moderating assessments to reduce pushback — is not fulfilling the independence obligations of the role. The committee relies on the CAE precisely because the CAE has access to information and professional judgment that management cannot be expected to provide impartially.
The third feature is shared language. Effective CAEs invest in understanding what committee members care about — their concerns, their knowledge gaps, their governance priorities — and tailor communication accordingly. Understanding your audience is not pandering; it is professional communication.
Building the Relationship Deliberately
The CAE-Board relationship must be built deliberately, not assumed. Many CAEs make the mistake of interacting with the Audit Committee exclusively through formal meeting formats. Formal meetings are necessary but insufficient for the kind of trust that characterises effective governance relationships. The most effective CAEs invest in regular bilateral communication with the Committee Chair: informal briefings before formal meetings, prompt communication when significant findings arise, and periodic conversations about the risk environment.
Onboarding new committee members is a specific investment that many CAEs neglect. A new Audit Committee member who does not understand internal audit methodology, independence requirements, or the distinction between internal and external audit cannot perform effective oversight. The CAE who takes responsibility for educating new members builds a committee that is capable of genuine engagement rather than passive reception of information.
Communicating Difficult Information
CAEs who have built genuine relationships with the committee — based on consistent transparency and professional integrity — find that difficult communications are received constructively rather than defensively. The committee trusts the assessment because the CAE has demonstrated over time that assessments are honest rather than strategically calibrated to avoid conflict.
CAEs who have prioritised relationship harmony over transparency find the reverse: when they finally raise a genuinely significant concern, the committee is uncertain whether to take it seriously. The credibility required to communicate difficult information well must be built through consistent honesty on less consequential matters first.
When the Relationship Fails
CAE-Board relationship failures have a recognisable pattern. They typically begin with the CAE accommodating management's preferred narrative in audit reporting. Over time, the committee stops receiving independent assessment and receives instead a managed presentation — effectively becoming dependent on management's perspective rather than an independent one.
When significant control failures occur that internal audit did not report with appropriate emphasis, the question of whether the committee was adequately informed becomes a governance failure with personal liability implications for both the CAE and the committee members. The relationship that prioritised harmony over honesty creates the conditions for the most damaging governance failure of all.
Independence Under Pressure
Management may attempt to influence the scope or conclusions of audit work, the timing of report issuance, or the language used to describe findings. These pressures, if accommodated, fundamentally compromise the independence that makes the CAE's relationship with the board valuable. The CAE must be clear — with management and with the board — that the internal audit function's independence is not a negotiating position. When management pressure becomes inappropriate, the appropriate response is escalation to the Audit Committee Chair through the private access that the Standards protect.