-
Procurement Fraud Schemes: Bid Rigging, Kickbacks and Phantom Vendors, and How to Find Them
The corruption branch of the fraud tree with a purchase order attached: bid rigging in its four forms and the indicators, kickbacks and price creep inside the tolerance…
Updated
·
19–29 minutes -
How to Audit Cash Management and Bank Reconciliations: Controls, Not Rituals
The internal auditor’s guide to cash management and bank reconciliations: the cash structure and where it fails, the seven properties of a reconciliation that is a control rather…
Updated
·
19–28 minutes -
How to Audit Payment Operations and Wire Transfers: Stopping the Nine-Figure Mistake
The internal auditor’s guide to payment operations and wire transfers, for banks and corporates: the eight-stage payment life cycle and the rails, who bears the loss under UCC…
Updated
·
19–28 minutes -
How to Audit Treasury: Cash, Debt, Investments and Hedging, With a 14-Test Program
The internal auditor’s guide to corporate treasury: the five activities and where each goes wrong, a ten-control starter matrix, a fourteen-test program built on confirmation and reperformance, the…
Updated
·
19–29 minutes -
How to Audit Inventory: Counts, Costing and Shrink, With a 14-Test Program
The internal auditor’s guide to inventory: the six handoffs where the record and the stock part company, a ten-control starter matrix, a fourteen-test program, how to observe a…
Updated
·
20–30 minutes -
How to Audit Accounts Receivable and Collections: Risks, Controls and a 14-Test Program
The internal auditor’s guide to accounts receivable and collections: where the risk concentrates from invoice to cash, a ten-control starter matrix, a fourteen-test program with sample sizes, the…
Updated
·
20–29 minutes -
Vendor Due Diligence: What to Actually Check, by Risk Tier
A due-diligence workbench organised by what you need to know before you sign and calibrated by risk tier: the fourteen interagency factors with the evidence that counts, depth…
Updated
·
19–29 minutes -
Walkthrough vs Test of Controls: Different Questions, Different Evidence
A walkthrough answers whether the process is understood and the control is designed and implemented; a test of controls answers whether it operated across the period. This guide…
Updated
·
19–29 minutes -
Manual, Automated, and IT-Dependent Manual Controls: Testing Implications of Each
The three control natures defined by what can fail, their testing implications side by side (design test, operating test, sample sizes, ITGC reliance, evidence, roll-forward), a five-question classification…
Updated
·
20–30 minutes -
Testing Automated Controls and System Configurations: A Non-IT Auditor’s Method
How to test the controls a system performs without anyone watching: the seven types of automated control and where their logic lives, why one well-designed test can cover…
Updated
·
21–31 minutes -
The Walkthrough Documentation Template: Capturing a Process End-to-End
The walkthrough artifact done properly: an eight-part narrative-plus-flowchart structure with control-point call-outs, system handoffs, evidence inventory, the documented-vs-actual gap log, and a conclusion that drives testing — with…
Updated
·
24–36 minutes -
The Journal Entry Analytics Catalog: Risk-Scoring the General Ledger
Twenty-five journal entry analytics tests in four families, each with logic, data, threshold, what a hit means and its false positives, anchored to the entry characteristics in PCAOB…
Updated
·
19–29 minutes -
A Fraud Red Flags Library, Organized by Business Cycle
Forty-eight fraud red flags across seven categories — procurement, payroll, sales, inventory, treasury, financial reporting, and behavior — each paired with the confirming test that turns suspicion into…
Updated
·
8–12 minutes -
GIAS Domain V: Performing Engagements From Planning to Closure
Domain V of the Global Internal Audit Standards, standard by standard: the fourteen workpapers the domain produces, engagement communication as a thread from notification to closing meeting, the…
Updated
·
19–29 minutes -
The Payroll Analytics Catalog: 30 Tests for Ghost Employees and Beyond
Thirty payroll analytics tests in five families, each with its logic, data, threshold, what a hit usually means and what produces false positives; the five datasets and the…
Updated
·
19–29 minutes -
The Accounts Payable Analytics Catalog: 40 Tests With Logic
Forty accounts payable analytics tests in six families, each with its logic, the data and threshold it needs, what a hit usually means and what produces false positives;…
Updated
·
20–29 minutes -
IPE: Testing the Completeness and Accuracy of Information Produced by the Entity
How to test information produced by the entity: the three attributes (completeness, accuracy, parameters), the two routes under AS 1105 paragraph 10, the report inventory that lets a…
Updated
·
19–29 minutes -
How to Audit Purchasing Cards: Small Transactions, Big Leakage
The P-card audit end to end: issuance and MCC controls, reconciliation discipline, the abuse catalog, terminated-cardholder checks, and the full-population analytics suite that makes this the most testable…
Updated
·
8–11 minutes -
Audit Evidence: Sufficiency, Appropriateness, and the Evidence Hierarchy
What separates evidence from paperwork: the five types and what each proves, the reliability hierarchy, corroboration rules of thumb, and the same assertion tested three ways — weak,…
Updated
·
8–12 minutes -
Test of Design vs Operating Effectiveness (TOD vs TOE): Two Questions, Two Tests
Test of design versus test of operating effectiveness, properly separated: the questions each answers, where AS 2201, the ISAs, COSO and the Global Internal Audit Standards put them,…
Updated
·
19–28 minutes -
How to Audit Revenue Recognition Under ASC 606: An Internal Auditor’s Program
The five-step model turned into an audit program: contract and modification testing, variable-consideration back-tests, cutoff analytics, management-bias indicators, and coordinating with external audit instead of duplicating it.
Updated
·
7–11 minutes -
How to Audit the Vendor Master File: Verification, Bank Changes and a Worked Engagement
The vendor master is the authentication layer of every payment. This guide covers onboarding verification, the payee-change fraud vector and its controls, a verification record template, duplicate and…
Updated
·
20–30 minutes -
How to Audit Procurement: Sourcing, Bidding and Contract Award, With a Worked Engagement
The front end of purchase-to-pay: where procurement risk lives, the bid-rigging red flags, sole-source discipline with a justification memo template, conflicts of interest, a 14-test program, the analytics…
Updated
·
19–28 minutes -
Internal Audit Work Program: Template and Worked Example
The work program end to end: every section of the template, how to write procedures a new auditor could execute, a fully worked user-access program with budgets, and…
Updated
·
9–13 minutes -
How to Audit Travel and Expense: Policy, Fraud, Analytics and a Worked Engagement
A practitioner’s guide to auditing travel and expense: the policy-design review, approval integrity, a seven-control starter RCM, the full analytics catalog, MidState Beverage’s worked engagement test by test,…
Updated
·
19–29 minutes -
How to Audit Payroll: Ghost Employees, Off-Cycle Payments and a Worked Engagement
A practitioner’s guide to auditing payroll: the risk map, an eight-control starter RCM, a 12-test program, the ghost and leaver analytics, MidState Beverage’s worked engagement test by test,…
Updated
·
19–29 minutes -
How to Audit Journal Entries: The Management Override Lens, With a Worked Year-End Run
Journal entry testing as the anti-override control: the completeness proof, the fourteen-criterion risk-scoring library, the three-layer selection strategy, the four questions to ask of every entry, top-side entries,…
Updated
·
19–28 minutes -
How to Audit Accounts Payable: Risks, Controls, a 14-Test Program and a Worked Engagement
The internal auditor’s guide to accounts payable: where the risk concentrates in procure-to-pay, a ten-control starter matrix, a fourteen-test program with attributes, the analytics that find real dollars,…
Updated
·
23–34 minutes -
Annotated Workpaper Examples: A Model Testing File From Cover to Conclusion
A complete, realistic audit testing workpaper — purpose, population, sample, procedures, exception, conclusion — annotated to show why each element exists.
Updated
·
10–15 minutes -
Audit Sample Sizes Demystified: Where 25, 40, and 60 Actually Come From
Where audit sample sizes 25, 40, and 60 come from: the attribute-sampling math, when the conventions mislead, and a defensible grid for non-SOX audits.
Updated
·
9–13 minutes