internalauditguide.com
The practitioner’s guide
to internal audit
Hundreds of in-depth guides across 65 practice areas — risk, process, standards, and the career itself — written and organized by working practitioners. Free, no registration, no fluff.
Or jump straight in
Start where you are
Three doors into the same library
Whether you are writing your first workpaper or presenting to the board, the guide meets you at your level — and takes you further.
Foundations
New to internal audit
What internal audit actually is, how an audit runs end to end, and the vocabulary that makes the rest of the library readable.
- Demystifying internal audit: terms, processes, objectives
- The step-by-step guide for beginners
- Internal audit jargon, explained
Practice
Practicing auditor
Sharper fieldwork, cleaner workpapers, risk-based plans, and reports that stakeholders actually read.
- Documenting workpapers: best practices
- Risk-based auditing 101
- How to write an internal audit report
Leadership
Leading the function
From audit director to the CAE seat: sourcing strategy, regulator relationships, and the leadership layer most sites never cover.
- Becoming a CAE: skills & steps
- The MRA/MRIA lifecycle, end to end
- Sourcing: in-house, co-sourced, outsourced
Path finder
Thirty seconds to your reading list
Two questions, three hand-picked guides. No email address required — this is a library, not a lead funnel.
The library
Every corner of the profession, mapped
Eleven domains, 65 practice areas, and hundreds of guides — organized by hand the way the work actually happens, not by algorithm.
What internal audit is, why it exists, and the control concepts everything else rests on.
Planning through reporting: fieldwork, workpapers, sampling, issue validation, and quality.
A program-grade risk library: credit, market, liquidity, operational, model, fraud, and more.
The IIA Standards, COSO, audit committees, and what regulators actually expect.
Guidance written for the seat you are in — analyst to CAE, plus auditees and executives.
The CIA exam, CPE, interviews, and the moves that build an audit career worth having.
Audit software, analytics, continuous auditing, AI, and where the profession is heading next.
Sourcing strategy, team structure, templates, and the operating decisions leaders own.
Writing that gets read, and influence without authority — the auditor’s real superpowers.
Book reviews, corporate life, and longer-view essays on the profession.
Sector-specific auditing, led by financial services and banking.
Free audit tools
Working software, right in your browser
Real, hand-built tools for the jobs fieldwork actually has — engineered around one non-negotiable: what you enter stays on your machine. No installs, no accounts, no license keys. Open a page and get to work.
RCM Workbench
The planning end of an audit in one surface: a risk register on a live 5×5 heatmap, the control matrix, design- and operating-effectiveness testing with suggested steps and a sample-size guide, a PBC request list that flags what’s overdue, an issues log with regulatory flags, and team hours. Three worked examples double as training. Exports to Excel, Word, CSV and JSON.
mySampler
Audit sampling a reviewer can reperform: seeded and reproducible, with random, systematic and monetary-unit selection, statistically grounded sample sizes, and a selection memo that documents itself — seed, parameters and population fingerprint on every export.
myDayLog
Log the audit day in five seconds — entries roll up by engagement into timesheet-ready CSVs, with streaks that keep the habit alive. Works everywhere; on your phone it installs to the home screen and runs like an app. Your log stays on your device.
Self-Assessment Hub
Sixteen leader-grade self-assessments — CAE, audit director and audit committee tracks, plus a flagship Standards Readiness check across all 15 principles of the 2024 Global Internal Audit Standards. Honest scoring with coverage math, gap lists that become action plans, saved runs that show your trend, and a printable record. Your answers stay on your device.
Studying for the CIA? The practice questions, study planner and flashcards are just below ↓
Choosing audit software? The shortlist finder and requirements matrix are further down ↓
Studying for the CIA exam?
Three free tools written to the 2025 syllabus and the Global Internal Audit Standards, plus the complete guide to the exam. The planner reads your scores from the question bank, and every question and card links to the guide that explains it. No account needed; your progress saves in your browser.
CIA Practice Questions
156 scenario questions across all three parts, with a rationale for every option. Study mode shows the answer as you go; exam mode runs a timed set at 72 seconds a question.
Start practicing → PlanCIA Study Planner
A day-by-day plan built around your parts, exam dates and weekly hours. It dates every IIA deadline, replans when you fall behind and exports to your calendar.
Build my plan → ReviewCIA Flashcards
199 cards on the fifteen principles and 52 standards of the Global Internal Audit Standards, the 2025 syllabus map and the key terms, with a simple spaced-repetition schedule.
Start studying →New to the CIA? Start with the complete guide: eligibility, the three parts and their 2025 weights, every fee, how scoring works, and a twelve-week plan for each part.
Read the CIA exam guide →Also for candidates: What changed in the 2025 syllabus CIA vs CPA, CISA, CFE and more Keeping your CIA: renewal and status
Choosing audit software?
Independent, research-based reviews of 25 audit platforms and analytics tools, 30 head-to-head comparisons, buying guides from the business case to implementation, and two free tools for the decision. No vendor has paid for, seen or approved any of it.
Shortlist Finder
Eight questions about your function, then a ranked shortlist of platforms with the reasons behind each pick and the poor fits ruled out.
Find my shortlist → EvaluateRequirements Matrix
A free Excel workbook: 156 requirements weighted for your team size, must-have knock-outs, a 25-scenario demo scorecard and scoring for up to five vendors.
Get the workbook → CompareThe best software, by situation
25 platforms and tools rated for eight buying situations, from a small team’s first system to SOX-heavy companies, banks and the public sector.
See the ratings →New to buying audit software? Start with the buyer’s guide: every review, comparison and buying guide in one place, what the software costs, and the method behind every rating.
Open the software guide →Also for buyers: What internal audit software costs The vendor-neutral RFP method The demo script: 25 scenarios
Standards & rigor
Anchored to the profession’s canon
The library is written against the sources practitioners are actually held to. Start with our in-depth analysis of the 2024/2025 Global Internal Audit Standards update — what changed, and what it means for staff, leads, and directors — then trace how the profession got here in the complete history of the IIA’s standards.
Beyond the Standards, the guides work the wider canon: the COSO framework, explained for internal auditors; the OCC’s risk categories that shape supervisory expectations at financial institutions; the MRA/MRIA lifecycle from identification to remediation; and QAIP and preparing for an external quality assessment.
Editorial standard: guides cite primary sources — the Standards themselves, framework texts, and regulators’ handbooks — and are updated as the canon moves.
For audit leaders
The road to the CAE seat, documented
The stretch between audit director and Chief Audit Executive is the least-documented part of the career — titles multiply, ladders flatten, and good guidance disappears. We map it: the roles, the grades, the politics, and the work.
Cornerstone guides
Where serious readers start
Long-form references the rest of the library builds on — each one written to be the last tab you need open on its subject.
The latest
New on the guide
Fresh guides and the pieces readers return to most.
Recently published
-
CAE Compensation: How Chief Audit Executive Pay Is Structured, Set and Negotiated
-
Portfolio Heads and Divisional Chief Auditors: Leading Audit at Business-Line Level
-
The CFO and Internal Audit: A Working-Relationship Guide for Both Sides
-
Getting Audit Recommendations Adopted: The Psychology of Yes in Internal Audit
-
The Escalation Ladder: When and How Internal Auditors Go Over Someone’s Head
-
The Trusted Advisor Path: How Internal Auditors Earn Seats at Decision Tables
Most read, all-time
New guides & tools by email
Don’t check back. We’ll come to you.
500+ in-depth guides, written by working practitioners, growing as fast as we can write. Leave your email and hear when new guides and tools land — no noise, no gating, unsubscribe anytime.
One confirmation email from WordPress.com, then you’re in.
About this site
Built by practitioners
internalauditguide.com is written and maintained by practitioners with more than a decade inside multinational financial institutions — New York, San Francisco, Los Angeles, Toronto — publishing since 2023. Guides cite primary sources, favor depth over volume, and get updated as standards and supervisory expectations move.
Nothing here is professional advice. Everything here is written to be useful.