ABSTRACT
Value propositions summarize why an organization's product or service is the preferred choice for a customer. SRI International's value proposition is "We invent products and solutions that change the world." Value propositions should also be developed for individual audits to communicate, from the customer’s point of view, why an audit is important to them. The prior internal audit organization viewed itself as a necessity, not a source of value for the company. Internal audit team members have specific goals associated with delivering value and customer satisfaction. A value proposition for the executive team and the Chief Information Security Officer could be "Internal Audit will provide assurance about whether the information security program can support customer growth of 25% over the next 24 months." The audit becomes more strategic, is forward looking, and is more valuable. Basic assurance, a given, is the minimal expectation of any audit or project.
