Risk-Based Auditing for Nigerian Non-Profit Organisations: Enhancing Accountability and Effectiveness

Non-profit organizations (NPOs) play a vital role in Nigeria's social fabric, addressing critical issues like poverty alleviation, education, healthcare, and environmental protection.

However, these organizations also face a unique set of challenges that can hinder their impact and mission. These risks can include:

• Compliance issues: Failing to meet regulatory requirements can result in hefty fines, reputational damage, and even suspension of operations. Key regulations include the Companies and Allied Matters Act (CAMA) 2020, which outlines governance requirements for incorporated NGOs. CAMA mandates maintaining proper financial records, holding annual meetings, and appointing directors. Non-compliance with CAMA can lead to penalties and sanctions.
• Financial mismanagement: Fraud, embezzlement, and weak financial controls can erode donor trust and hinder an NPO's ability to deliver its programs.  CAMA emphasizes the importance of robust internal controls to safeguard assets and prevent financial misconduct.
• Operational inefficiencies: Ineffective processes and inadequate internal controls can waste resources and compromise service delivery.

SCUML and NPO Compliance

Adding to the regulatory landscape, the Special Control Unit Against Money Laundering (SCUML) plays a crucial role in safeguarding the integrity of the non-profit sector. SCUML requires NPOs to register and report certain transactions to combat money laundering and terrorist financing.

According to SCUML’s “Final Report National Terrorist Financing Risk Assessment of the Non-Profit Organisations Sector in Nigeria” (February 2023), NPOs are considered vulnerable to terrorist financing abuse due to several factors, including:

• Cash-intensive operations: Many NPOs rely heavily on cash donations and fundraising activities, making them a target for those seeking to launder money.
• Limited resources and capacity: Smaller NPOs may lack the resources and expertise to implement robust internal controls and identify suspicious activity.
• Complex beneficiary structures: Some NPOs work with a network of local partners or beneficiaries, which can make it challenging to track the flow of funds.

Read More: ISA 300: A Comprehensive Guide to Effective Audit Planning

Risk-Based Auditing: A Proactive Approach

Traditional audit methods often follow a one-size-fits-all approach, which can be inefficient for NPOs.  Risk-based auditing offers a more strategic and targeted solution.

Here's how it works:

Risk Assessment

A comprehensive assessment identifies and prioritizes risks based on their likelihood and potential impact on the organization's objectives. This may involve reviewing internal controls, analyzing financial statements, and interviewing key personnel. Common areas of focus for NGOs include:

• Grant compliance: Ensuring adherence to donor regulations and restrictions, as outlined in grant agreements.
• Program effectiveness: Evaluating whether programs achieve their intended outcomes, fulfilling the NPO's mission as mandated by CAMA's requirement to operate for public benefit.
• Cybersecurity threats: Protecting sensitive donor and beneficiary data, in accordance with Nigeria's Data Protection Regulation (NDPR).
• Human resource risks: Managing issues like staff misconduct or inadequate training, as outlined in Nigeria's Labour Act.

Resource Allocation

Audit resources are then focused on areas with the highest risks, ensuring a more efficient and effective audit process.

Read More: Compliance as a Tool for Risk Management: Safeguarding Your Business in an Evolving Landscape

Benefits of Risk-Based Auditing for Nigerian NPOs

• Increased Accountability: Risk-based audits provide a clear picture of an NPO's risk landscape, allowing for better decision-making and improved oversight by boards and management.
• Enhanced Effectiveness: By focusing on high-risk areas, auditors can identify and address potential issues before they escalate, ensuring programs and resources are used effectively and efficiently to achieve maximum impact.
• Strengthened Donor Confidence: Strong risk management practices demonstrate transparency and accountability to donors, fostering trust and encouraging continued support.
• Improved Operational Efficiency: Identifying and mitigating operational risks leads to improved processes, reduced waste, and a more streamlined organization.

Read More: How Does Internal Audit Contribute to Good Corporate Governance?

The Need for Trusted Advisors in Nigeria's NPO Sector

While risk-based auditing offers significant benefits, implementing it effectively requires expertise and experience. Partnering with a trusted auditing firm like Stransact (Chartered Accountants) can provide NPOs with several advantages:

• Deep Understanding of the Non-Profit Sector: We understand the unique challenges and regulatory landscape faced by Nigerian NPOs.
• Experienced Risk Assessment Professionals: Our team possesses the skills and knowledge to conduct comprehensive risk assessments tailored to your organization.
• Data-Driven Recommendations: We leverage data analytics to ensure our recommendations are based on concrete evidence and best practices.
• Cultural Sensitivity: We understand the importance of cultural context and tailor our approach to the specific needs of Nigerian NPOs.

Empowering Informed Decision-Making

Beyond the audit itself, risk-based auditing empowers NPOs to make informed decisions about resource allocation and program design. By understanding their risk landscape, NPOs can prioritize activities with the highest potential impact and mitigate risks that could hinder their success.

For example, an NPO focused on healthcare services in rural areas might identify a high risk of medication theft due to weak internal controls.  A risk-based audit could recommend implementing secure storage facilities and clear staff protocols to address this risk.

Continuous Improvement and Best Practices

Risk management is an ongoing process.  Partnering with a trusted advisor can also provide NPOs with access to ongoing support and resources. This includes staying updated on the latest regulatory requirements, industry best practices, and emerging risks in the non-profit sector.

Download our Doing Business in Nigeria guide

Conclusion

Risk-based auditing is a powerful tool for Nigerian NPOs to achieve greater accountability, effectiveness, and donor confidence.  By understanding the specific risks they face and taking proactive steps to mitigate them, NPOs can ensure their valuable resources are directed towards achieving their mission and delivering positive social impact.

Contact Stransact (Chartered Accountants) today to discuss how we can help your NPO develop a comprehensive risk management framework and conduct a risk-based audit tailored to your organization's specific needs.