IA-01
Working Paper File Management Kit
Organise the audit file from day one: a file index, referencing rules and a single correspondence log.
IA-12
Quality Review and File Closure Kit
Review file quality, then close and archive the file with a record of retention and client data handling.
Inside the kit
What this kit solves
A file closed with open review notes or unsigned papers is hard to defend in any later inspection. This kit starts with the completion checklist (901), confirming every paper is present and signed against the file index, and the review notes log (902), which tracks supervisor, manager and partner notes to clearance. 903 documents the independent engagement quality review under the firm's quality system. 904 compares actual hours with the time budget and analyses variances, and 905 captures the client's assessment of the firm. 906 records the closure date, storage location and retention period, and 90601 records the return or destruction of client data when the contract ends.
What your file holds afterwards
- A completion checklist confirming every paper is present and signed against the file index (901)
- A review notes log with responses through to clearance (902), and an independent engagement quality review (903) whose template includes a note for local banks on external quality assessment
- Actual versus budgeted hours with variance analysis (904), and a client satisfaction survey (905)
- A closure and archiving record (906) with editable firm-policy assumptions: closure within 60 days of the final report, and retention for at least 10 years or the contract period, whichever is longer. These are internal firm assumptions, not regulatory requirements
- A client data return or destruction record at contract end (90601)
How to use it
- Check file completeness and sign-offs in 901 against the index set up in IA-01.
- Clear review notes in 902, then perform the engagement quality review in 903.
- Compare hours in 904 with the time budget prepared in IA-05, and send the 905 survey to the client.
- Close and archive the file in 906, and record the return or destruction of client data in 90601 at contract end.
Who it is for
Audit firms and in-house internal audit departments at the end of every engagement, assurance or advisory, before the file is signed off and archived.
What is in the kit
| Code | Paper | Format | What you get | Reference |
|---|---|---|---|---|
| 901 | File Completion ChecklistReference: 14.6 | Excel | Template + worked exampleTemplate + example | 14.6 |
| 902 | Review Notes and ResponsesReference: 12.3 | Excel | Template + worked exampleTemplate + example | 12.3 |
| 903 | Engagement Quality ReviewReference: 12.1, ISQM 2 | Word | Template + worked exampleTemplate + example | 12.1, ISQM 2 |
| 904 | Actual versus Budgeted HoursReference: 12.2 | Excel | Template + worked exampleTemplate + example | 12.2 |
| 905 | Client Satisfaction SurveyReference: 12.2 | Excel | Template + worked exampleTemplate + example | 12.2 |
| 906 | File Closure and Archiving RecordReference: 14.6 | Word | Template + worked exampleTemplate + example | 14.6 |
| 90601 | Client Data Return or Destruction RecordReference: 5.2 | Word | Template + worked exampleTemplate + example | 5.2 |
Every kit also includes a user guide (PDF and PowerPoint) and the licence terms, in Arabic and English.
IIA Global Internal Audit Standards (2024) references, with ISQM 1 and SAMA principles where they apply, as given in the guide. References are for cross-referencing and do not imply IIA endorsement.
Where it sits in the audit cycle
- 000File AdministrationIA-01
- 100Acceptance, Engagement and AdministrationIA-02
- 200Permanent and Annual FileIA-03IA-04
- 300Engagement PlanningIA-05IA-08
- 400Process Understanding and Control AssessmentIA-06IA-08
- 500Testing and FieldworkIA-07IA-08
- 600FindingsIA-09
- 700Reporting and Follow-upIA-09IA-10
- 800Advisory EngagementsReplaces 400–700 on advisory engagementsIA-11
- 900Quality Review and File ClosureIA-12
Sector notes inside the templates
- Local banks — Saudi Central Bank (SAMA)
Electronic database of reports, findings, corrective action plans and working papers, and an approved records retention manual (Internal Audit Principles for Local Banks (effective 1 January 2022)) - Local banks — Saudi Central Bank (SAMA)
Independent external quality assessment at least every 5 years (Internal Audit Principles for Local Banks (effective 1 January 2022))
The affected templates carry a short line for each requirement with its reference. Check the official text of each reference before relying on it; regulations change.
Related kits
IA-05
Engagement Planning Kit
Plan each engagement: scope, risks, fraud, time budget and the document request list.