D560 Internal Auditing I, catalog number ACCT 6340, is a three-CU graduate course on the fundamentals of internal auditing and value protection for entry-level internal audit professionals. Internal auditors work inside the organization they examine, which creates the defining problem of the discipline: how a function that reports to management can give an honest opinion about management, and what structural arrangements make that possible.
Independent from inside the building
An external auditor achieves independence by not being an employee. An internal auditor is an employee, so independence has to be engineered rather than assumed, and the arrangements that achieve it are a substantial part of what this course teaches.
The primary mechanism is reporting line. Internal audit reports functionally to the board or its audit committee on what it finds, and administratively to management for day-to-day matters. That split is what allows an internal auditor to report a finding about the person who signs their expense claims. Where a task describes internal audit reporting solely to the chief financial officer, the structural problem is the finding, and identifying it is usually worth an aspect on its own.
The second mechanism is scope. Internal audit's remit covers governance, risk management and control across the whole organization rather than only the financial statements, which is broader than the external audit remit and answers a different question. External audit asks whether the statements are fairly stated for outside readers. Internal audit asks whether the organization is being run in a way that protects and creates value for it.
The third is the distinction between assurance and consulting work. Assurance engagements provide an independent assessment; consulting engagements provide advice at management's request. Both are legitimate, and the boundary matters because an auditor who designed a control cannot later provide independent assurance over it. Tasks probe that boundary deliberately.
Turning aspects into an internal audit deliverable
Rubric aspects in your Course of Study are scored independently and each needs a 2. Internal audit aspects mix structural understanding with engagement mechanics, and the structural aspects are the ones students under-answer because they feel like background.
Worked example, structure plus mechanics. Suppose your rubric lists six scored aspects and the directions ask for about 2,200 words. Reserve 150 for the organizational description, leaving 2,050, or 342 per aspect. If two aspects concern governance and independence arrangements, resist treating them as scene-setting: give them 400 each, because they carry the conceptual content of the course. Take 58 from each of the other four, which yields 232, and the remaining aspects sit at 284 with the engagement detail carried by exhibits.
Anchor each engagement decision to a risk in the organization's risk profile. Internal audit work is supposed to be risk-based, which means the plan explains why these areas and not others, and an audit plan with no stated basis for its selection has skipped the step that makes it professional.
How an internal audit engagement is documented
Where the deliverable is an engagement plan or a summary of internal audit's role, this sequence covers the ground the aspects usually assess. Task directions govern where they set their own format.
| Stage | What is documented | The professional point it demonstrates |
|---|---|---|
| Mandate and charter | The authority, scope and reporting lines of the function | That independence is structural rather than personal |
| Risk-based planning | Why this area was selected, tied to organizational risk | That resources follow risk rather than habit or convenience |
| Engagement objectives | What this specific engagement will conclude on | That the engagement has a defined question, not a general look around |
| Scope and boundaries | Processes, locations and periods included and excluded | That omissions are deliberate and disclosed |
| Criteria | The standards against which the area will be judged | That findings compare against something stated rather than against expectation |
| Fieldwork approach | Procedures, evidence sought and how it will be obtained | That conclusions will rest on evidence rather than on impression |
| Reporting | Who receives the report and in what form | That the reporting line supports the function's independence |
| Follow-up | How agreed actions will be tracked to completion | That the value is in the correction, not in the finding |
Criteria deserve the most attention of anything in that list. A finding is a gap between a condition and a criterion, so without a stated criterion there is no finding, only an opinion. Naming the policy, standard, regulation or agreed practice you measured against is what converts an observation into something the organization has to respond to.
Evidence, objectivity and the value question
Internal audit evidence standards are professional rather than legal, but the discipline is the same: conclusions must rest on something a reviewer could check.
- Record the source of every piece of evidence and whether it was observed, inspected, recomputed or obtained by inquiry, since those carry different weight.
- Prefer evidence generated outside the process being examined, since a control's own records are the weakest support for the assertion that the control works.
- Distinguish design from operation. A well-designed control that is not performed provides no assurance, and testing both is the professional expectation.
- Cite professional standards and course material in APA paraphrase, keeping quotation minimal because submissions are similarity-checked.
- Where objectivity could be questioned because of prior involvement, disclose it rather than leaving it to be discovered.
The three lines model is worth using explicitly wherever a task asks how assurance is organized across an entity, because it prevents the common confusion between control and assurance. Operating management owns the risks and the controls that address them, that is the first line. Risk, compliance and similar oversight functions monitor and support those controls, that is the second. Internal audit provides independent assurance over both and reports to the governing body, that is the third. Where a scenario has internal audit performing second-line work such as writing policy or operating a control, the model makes the problem immediately visible and gives you the language to describe it.
The value protection idea in the course description is worth taking literally in your writing. Internal audit justifies its cost by preventing losses, improving processes and giving the board assurance it could not otherwise obtain. Where a submission can attach a plausible figure or a concrete consequence to a finding, it demonstrates the mindset the profession expects far better than a statement that a control is weak.
What clears an internal audit fundamentals task
Each aspect is judged on its own against the competency standard, and the recurring test is whether independence and risk-based reasoning are actually applied.
- Reporting lines are described accurately and any structural threat to independence is identified.
- Engagement selection is justified by risk rather than asserted.
- Criteria are named before any finding is stated.
- Assurance and consulting work are distinguished, with the boundary respected.
- Findings connect to a consequence for the organization rather than ending at a control gap.
WGU records Competent or Not Competent, with no letter grade and no ordinary grade point average, and performance assessment work can be revised and resubmitted with no penalty. That makes a return a queue-time cost inside a six-month flat-rate term. Where a proctored objective assessment is attached, our support is preparation only: standards review, engagement scenarios and an honest readiness call, never a sitting and never a request for portal credentials.
Five mistakes in internal audit coursework
- Describing internal audit as a smaller external audit. The scope, the audience and the question are all different.
- Ignoring the reporting line. Independence in an internal function is structural, and a defective reporting line is itself a finding.
- Stating findings with no criteria. Without a standard to measure against, a finding is an opinion.
- Blurring assurance and consulting. Advising on a control and then assuring over it compromises objectivity.
- Selecting engagements by convenience. Risk-based planning is the professional expectation and the basis for selection has to be visible.
Support on the internal audit fundamentals course
Send the rubric, the directions and the organizational scenario. The draft returns with the mandate and reporting lines analyzed for independence, engagement selection justified against a risk profile, objectives and scope bounded, criteria named before any finding, evidence classified by type and findings connected to a consequence for the organization. The walkthrough covers the criteria step in particular, since that is the habit the second course assumes you have.
D560 continues into D562 Internal Auditing II and shares vocabulary with D251 Advanced Auditing on the external side. Students who take the internal pair consecutively inside one six-month term usually find the second course substantially faster.
Questions students ask about D560
Is D560 the same as ACCT 6340?
What is the difference between internal and external auditing?
Do I need internal audit experience for this course?
Internal audit engagement plan due?
Send the organizational scenario and the rubric. Engagement selection gets justified against risk, and criteria are named before any finding.
Where D560 sits in WGU's programs
The July 2026 catalog places this code in 2 current WGU programs. Open a program page for the complete standard path and term positions. The live Degree Plan remains authoritative after transfer credit, substitutions, and mentor planning.
The assessments, one by one
The public catalog does not publish this course's PA/OA identity or task count. WGU Tutors publishes at most one PA manual per course and only from a WGU-controlled public rubric. Until that source exists, PA help begins from the student's real Course of Study and OA support remains preparation only.