IA-07
Controls Testing and Fieldwork Kit
Test controls with documented samples and results a reviewer can follow.
IA-09
Findings and Reporting Kit
Rate findings, write them clearly and issue a report for management and the Audit Committee.
Inside the kit
What this kit solves
A finding without a clear criterion, cause and effect invites challenge and delays the report. 601 sets the rating criteria (high / medium / low) and the overall engagement rating scale (satisfactory / needs improvement / unsatisfactory), and 602 logs every finding with its rating. Each finding is written up on its own sheet, 60301, following the 603 structure: condition, criteria, cause, effect and recommendation, cross-referenced to the test sheets. The discussion with management is minuted in 604, responses and action plans are captured in 605, and the closing meeting in 701, before the draft report (702) and the Audit Committee presentation (704).
What your file holds afterwards
- A single rating methodology and overall engagement rating scale (601), and a findings log with every rating (602)
- One sheet per finding with all five attributes, cross-referenced to the test sheets (603, 60301)
- Minutes of what management agreed and disputed (604), and a corrective action plan per finding with owner and target date (605)
- Closing meeting minutes (701), a draft report for comment (702) and a slot for the final signed report (703)
- A PowerPoint presentation for the Audit Committee covering key findings and the overall rating (704)
How to use it
- Agree the rating criteria in 601 and log findings in 602.
- Write each finding in 60301 using the 603 structure, linked to the test results from IA-07.
- Discuss findings with management and minute it in 604, then record responses and action plans in 605.
- Hold the closing meeting (701), issue the draft (702), file the final report in 703 and prepare the committee deck (704).
Who it is for
Audit firms and in-house internal audit departments at the end of fieldwork on assurance engagements, from rating findings to issuing the report.
What is in the kit
| Code | Paper | Format | What you get | Reference |
|---|---|---|---|---|
| 601 | Finding Rating Methodology and Overall Engagement RatingReference: 14.3, 14.5 | Word | Template + worked exampleTemplate + example | 14.3, 14.5 |
| 602 | Findings LogReference: 14.3 | Excel | Template + worked exampleTemplate + example | 14.3 |
| 603 | Detailed Finding SheetReference: 14.3, 14.4 | Word | Template + worked exampleTemplate + example | 14.3, 14.4 |
| 60301 | Finding No. 1Reference: 14.3 | Word | Template + worked exampleTemplate + example | 14.3 |
| 604 | Minutes of Findings Discussion with ManagementReference: 14.4 | Word | Template + worked exampleTemplate + example | 14.4 |
| 605 | Management Responses and Corrective Action PlansReference: 14.4 | Excel | Template + worked exampleTemplate + example | 14.4 |
| 701 | Closing Meeting MinutesReference: 14.5 | Word | Template + worked exampleTemplate + example | 14.5 |
| 702 | Draft Audit ReportReference: 15.1 | Word | Template + worked exampleTemplate + example | 15.1 |
| 703 | Final Audit ReportReference: 15.1 | — | Slot for a signed copy of another templateSigned copy | 15.1 |
| 704 | Audit Committee PresentationReference: 11.3 | PPT | Template + worked exampleTemplate + example | 11.3 |
Every kit also includes a user guide (PDF and PowerPoint) and the licence terms, in Arabic and English.
IIA Global Internal Audit Standards (2024) references, with ISQM 1 and SAMA principles where they apply, as given in the guide. References are for cross-referencing and do not imply IIA endorsement.
Where it sits in the audit cycle
- 000File AdministrationIA-01
- 100Acceptance, Engagement and AdministrationIA-02
- 200Permanent and Annual FileIA-03IA-04
- 300Engagement PlanningIA-05IA-08
- 400Process Understanding and Control AssessmentIA-06IA-08
- 500Testing and FieldworkIA-07IA-08
- 600FindingsIA-09
- 700Reporting and Follow-upIA-09IA-10
- 800Advisory EngagementsReplaces 400–700 on advisory engagementsIA-11
- 900Quality Review and File ClosureIA-12
Related kits
IA-10
Follow-up and Audit Committee Reporting Kit
Track recommendations to closure and give the Audit Committee periodic reports and KPIs.