Full Text
This study is conducted by analyzing the third-party risk management for accounting outsourcing by the Cebu City PEZA-registered enterprises in line with the IPPF Practice Guide of the IIA. The study focuses on how companies manage third-party risks associated with outsourcing accounting with accounting outsourcing as a common practice not just for tactical objectives but as part of organizations’ strategic objectives. The study used expert purposive sampling in selecting 5 qualified company respondents set with an interview using an interview guide validated by Certified Internal Auditors with respect to the study’s objectives. The researchers conducted the study and have identified how third-party risks for accounting outsourcing are assessed, determined, identified, communicated, mitigated, monitored and reported by the Cebu City PEZA-registered enterprises. The findings of the study shows that PEZA companies had not established a standardized procedure specific to the third-party risks however enterprise risk management programs were used instead by the PEZA companies to asses, determine, identify, communicate, mitigate, monitor, and report third-party risks in accordance with their established policies and procedures.