IA-06
Process Understanding and Control Assessment Kit (RCM)
Understand and document the process, then build the risk and control matrix and the audit program.
IA-07
Controls Testing and Fieldwork Kit
Test controls with documented samples and results a reviewer can follow.
Inside the kit
What this kit solves
Testing files often fail review for the same reasons: a sample with no stated basis, a population nobody reconciled, and results scattered across tabs. This kit sets the selection method and sample size, with the rationale, in 501, reconciles the population to the system or general ledger in 50101, and records the selected items in 50102. Each control gets its own TOE sheet (50201) linking every item to its result and evidence reference, with evidence filed in folder 506 under the test sheet's full code. 507 summarises each control as effective, ineffective or with exceptions, and 508 logs any scope limitation and its effect.
What your file holds afterwards
- A documented sampling methodology: selection method, sample size and rationale (501)
- A population reconciled to the system or general ledger (50101) and a recorded sample selection (50102)
- One TOE sheet per control (50201), each item cross-referenced to its evidence in folder 506
- Full-population analytics for duplicates, gaps and exceptions (503), plus substantive detail testing of transactions and balances where needed (504)
- A results summary per control (507) and a scope limitation log covering impact and reporting to the Audit Committee (508)
How to use it
- Set the sampling approach and size in 501, then reconcile the population in 50101 before selecting items in 50102.
- Test each control on its own 50201 sheet under 502, adding analytics (503) and detail testing (504) where needed.
- File each piece of evidence in folder 506 under the test sheet's full code, and log any scope limitation in 508.
- Summarise the result for each control in 507, ready for findings write-up in IA-09.
Who it is for
Audit firms and in-house internal audit departments during fieldwork on assurance engagements, once the RCM and work programme from IA-06 are in place.
What is in the kit
| Code | Paper | Format | What you get | Reference |
|---|---|---|---|---|
| 501 | Sampling MethodologyReference: 14.1 | Excel | Template + worked exampleTemplate + example | 14.1 |
| 50101 | Population Receipt and ReconciliationReference: 14.1 | Excel | Template + worked exampleTemplate + example | 14.1 |
| 50102 | Sample SelectionReference: 14.1 | Excel | Template + worked exampleTemplate + example | 14.1 |
| 502 | Tests of Operating Effectiveness (TOE)Reference: 14.2 | Excel | Template + worked exampleTemplate + example | 14.2 |
| 50201 | Control Test SheetReference: 14.2 | Excel | Template + worked exampleTemplate + example | 14.2 |
| 503 | Analytics and Data AnalysisReference: 14.2 | Excel | Template + worked exampleTemplate + example | 14.2 |
| 504 | Substantive Detail TestingReference: 14.2 | Excel | Template + worked exampleTemplate + example | 14.2 |
| 506 | Supporting EvidenceReference: 14.6 | — | Evidence folderEvidence folder | 14.6 |
| 507 | Summary of Test ResultsReference: 14.2, 14.3 | Excel | Template + worked exampleTemplate + example | 14.2, 14.3 |
| 508 | Scope Limitation LogReference: 13.3, 15.1 | Excel | Template + worked exampleTemplate + example | 13.3, 15.1 |
Every kit also includes a user guide (PDF and PowerPoint) and the licence terms, in Arabic and English.
IIA Global Internal Audit Standards (2024) references, with ISQM 1 and SAMA principles where they apply, as given in the guide. References are for cross-referencing and do not imply IIA endorsement.
Where it sits in the audit cycle
- 000File AdministrationIA-01
- 100Acceptance, Engagement and AdministrationIA-02
- 200Permanent and Annual FileIA-03IA-04
- 300Engagement PlanningIA-05IA-08
- 400Process Understanding and Control AssessmentIA-06IA-08
- 500Testing and FieldworkIA-07IA-08
- 600FindingsIA-09
- 700Reporting and Follow-upIA-09IA-10
- 800Advisory EngagementsReplaces 400–700 on advisory engagementsIA-11
- 900Quality Review and File ClosureIA-12
Related kits
IA-09
Findings and Reporting Kit
Rate findings, write them clearly and issue a report for management and the Audit Committee.