-
Running Your First Engagement as In-Charge: The Lead Auditor’s Playbook
The first engagement you run is the first time you own an outcome rather than a task. Owning the plan, budget and scope; handing over work you used…
Updated
·
18–27 minutes -
Continuous Monitoring on a Small Budget: Five to Ten Indicators, No Platform
Continuous monitoring is sold as a platform purchase, and most small internal audit functions conclude it is not for them. It is, if the ambition is right: five…
Updated
·
21–31 minutes -
How to Audit the Ethics and Compliance Program: Effectiveness, Not Existence
Every organization of size has an ethics and compliance program; the question regulators, prosecutors and boards ask is whether it works, and internal audit is the function positioned…
Updated
·
22–33 minutes -
Documenting Analytics as Audit Evidence: Queries, Scripts and Reproducibility
When an audit test is a query, the workpaper is the code, and most analytics workpapers would not survive the question a reviewer, an external auditor or a…
Updated
·
18–27 minutes -
Testing Controls in Small Populations: The Twice-a-Year Control Problem, Solved
A control that operates twice a year gives the auditor two chances to see it work, and the usual sampling logic collapses: you cannot sample two, you cannot…
Updated
·
18–27 minutes -
Evidence Standards for Issue Closure: What Proof of Remediation Really Requires
Management says the issue is fixed. The hardest question in internal audit follows: what would it take to believe them? This guide sets the evidence standards for closing…
Updated
·
19–29 minutes -
How to Audit Corporate Governance: A Program for the Structures at the Top
Governance is the set of structures through which an organization is directed and controlled, and it is the audit subject most functions avoid, because the people being audited…
Updated
·
21–31 minutes -
Auditing Trading Floor Controls: Limits, Confirmations and the Rogue Trader Playbook
Every large trading loss that was not simply a bad bet shares a pattern: a trader who understood the control environment better than the people running it, a…
Updated
·
23–35 minutes -
Auditing Insurance Claims: The Core Process From First Notice of Loss to Settlement
Claims is the insurer’s product delivered: the promise sold at underwriting is kept or broken by an adjuster, under time pressure, with authority to spend the company’s money.…
Updated
·
22–34 minutes -
Auditing the Underwriting Process: Where Credit Risk Is Born and How to Test It
Every credit loss a lender ever takes was approved by someone, on some day, against some policy, and the underwriting process is where the decision was made. This…
Updated
·
22–33 minutes -
Internal Audit in Manufacturing: The Complete Guide to Plants, Supply Chains and Cost
Manufacturing is where internal audit was born, and it remains the industry where the function’s work is most physical: inventory that can be counted, scrap that can be…
Updated
·
22–33 minutes -
How to Audit Capital Projects and Construction: Cost, Contract and Schedule Controls
Capital projects are where organizations spend their largest discretionary sums through contracts they rarely understand, administered by people who want the building finished, and the result is that…
Updated
·
20–30 minutes -
Corporate Liquidity Risk: Cash Forecasting, Covenants and Committed Lines
Companies do not fail because they lose money; they fail because they run out of cash and committed funding at the same time, usually with a covenant breach…
Updated
·
21–31 minutes -
Engagement-Level Risk Assessment: From Process Understanding to Test Plan
The annual risk assessment picks what to audit; the engagement-level risk assessment decides what to test once you are there, and it is the step most fieldwork skips…
Updated
·
18–27 minutes -
Attribute Sampling End to End: Plan, Select, Evaluate and Conclude, With the Math
Attribute sampling is the statistical method behind most tests of controls, and most auditors use it by looking up a number and hoping. This guide works a complete…
Updated
·
18–28 minutes -
Control Design Principles: What Makes a Control Actually Work, With Three Redesigns
Most controls are not designed; they accumulate. This guide gives the principles for designing one deliberately: a control objective stated as the error it must catch, precision matched…
Updated
·
19–28 minutes -
How to Audit Model Risk Management End to End: Inventory, Validation, Remediation
Model risk management has a framework audit of its own, and the 2026 interagency guidance that replaced SR 11-7 changed what the auditor measures against. This guide gives…
Updated
·
18–28 minutes -
How to Audit the Business Continuity Program End to End: A Work Program With Test Steps
Business continuity programs are audited often and badly: the auditor confirms that plans exist and tests were held, and the next real disruption shows that the plans did…
Updated
·
18–27 minutes -
Monetary Unit Sampling (MUS) for Internal Auditors: Sample Size, Selection and Evaluation
Monetary unit sampling makes every dollar in a population a sampling unit, so large items are more likely to be selected and the sample can be evaluated in…
Updated
·
19–28 minutes -
Audit Fieldwork: What Happens, How to Run It Week by Week, and What Good Looks Like
Fieldwork is the middle of an internal audit engagement: the weeks between the approved work program and the first draft finding, where evidence is gathered and tested. This…
Updated
·
19–28 minutes -
Professional Skepticism: The Auditor’s Core Discipline, Trained Deliberately
Professional skepticism made practical for internal auditors: what Standard 4.3 of the Global Internal Audit Standards requires, how the PCAOB and IAASB define it, why skepticism is not…
Updated
·
18–27 minutes -
Audit Tick Marks That Mean Something: A Standard Set With Usage Examples
Audit tick marks explained: what they are for, the rule that a tick mark records a procedure rather than a result, a standard legend of 18 marks with…
Updated
·
19–28 minutes -
Handling Audit Test Exceptions: Investigate, Extrapolate or Expand the Sample?
What internal auditors should do when a test turns up an exception: the difference between an exception, a deviation, a misstatement and a deficiency; how to confirm an…
Updated
·
19–28 minutes -
Audit Interviewing: Question Design and Listening Craft for Fieldwork
How internal auditors plan and run fieldwork interviews: the kinds of audit interview and what each is worth as evidence, planning, funnel question design, the follow-up question that…
Updated
·
20–30 minutes -
How to Audit Account Reconciliations as a Program: Standard, Tests and a Worked Engagement
Account reconciliations audited as a program: what a reconciliation proves, a ten-control matrix, the standard a complete reconciliation must meet, a 14-test program, population analytics, and Lakeshore Bancorp’s…
Updated
·
20–29 minutes -
How to Audit the Financial Close: Speed, Accuracy and Control, With a Worked Engagement
The financial close audited as a process: the eight stages and the two clocks, a twelve-control matrix, a close calendar standard, a 14-test program, the analytics that profile…
Updated
·
20–30 minutes -
How to Audit Fixed Assets: Existence, Capitalization, Disposals and a Worked Engagement
The internal auditor’s fixed asset audit: the lifecycle and its risks, a ten-control starter matrix, a 14-test program with two-direction counts and both-way capitalization tests, the register analytics,…
Updated
·
19–29 minutes -
How to Audit Order-to-Cash End to End: The Integrated Audit and a Worked Engagement
The integrated order-to-cash audit: the six handoffs where fragment audits go blind, a cross-stage risk map and twelve-control matrix, a 14-test program, the analytics that join the stages,…
Updated
·
20–30 minutes -
How to Audit Procure-to-Pay End to End: The Integrated P2P Audit and a Worked Engagement
The integrated procure-to-pay audit: the five handoffs where stage audits go blind, a cross-stage risk map and twelve-control matrix, a 14-test program, the analytics that join the stages,…
Updated
·
23–34 minutes -
Procurement Fraud Schemes: Bid Rigging, Kickbacks and Phantom Vendors, and How to Find Them
The corruption branch of the fraud tree with a purchase order attached: bid rigging in its four forms and the indicators, kickbacks and price creep inside the tolerance…
Updated
·
19–29 minutes