ADELANTE
Institutional Repository

This study analyzes the third-party risk management for accounting outsourcing by the Cebu City PEZA-registered enterprises in line with the IPPF Practice Guide of the IIA. The study focuses on how companies manage third-party risks associated with outsourcing accounting, with accounting outsourcing as a standard practice not just for tactical objectives but as part of organizations’ strategic objectives. The study used expert purposive sampling to select five qualified company respondents set with an interview guide validated by Certified Internal Auditors concerning the study's objectives. The researchers conducted the study and have identified how third-party risks for accounting outsourcing are assessed, determined, identified, communicated, mitigated, monitored, and reported by the Cebu City PEZA-registered enterprises. The study findings show that PEZA companies had not established a standardized procedure for third-party risks. However, enterprise risk management programs were used instead by the PEZA companies to asses, determine, identify, communicate, mitigate, monitor, and report third-party risks following their established policies and procedures.