-
How to Audit Cash Management and Bank Reconciliations: Controls, Not Rituals
The internal auditor’s guide to cash management and bank reconciliations: the cash structure and where it fails, the seven properties of a reconciliation that is a control rather…
Updated
·
19–29 minutes -
How to Audit Payment Operations and Wire Transfers: Stopping the Nine-Figure Mistake
The internal auditor’s guide to payment operations and wire transfers, for banks and corporates: the eight-stage payment life cycle and the rails, who bears the loss under UCC…
Updated
·
19–28 minutes -
How to Audit Treasury: Cash, Debt, Investments and Hedging, With a 14-Test Program
The internal auditor’s guide to corporate treasury: the five activities and where each goes wrong, a ten-control starter matrix, a fourteen-test program built on confirmation and reperformance, the…
Updated
·
19–29 minutes -
How to Audit Inventory: Counts, Costing and Shrink, With a 14-Test Program
The internal auditor’s guide to inventory: the six handoffs where the record and the stock part company, a ten-control starter matrix, a fourteen-test program, how to observe a…
Updated
·
20–30 minutes -
How to Audit Accounts Receivable and Collections: Risks, Controls and a 14-Test Program
The internal auditor’s guide to accounts receivable and collections: where the risk concentrates from invoice to cash, a ten-control starter matrix, a fourteen-test program with sample sizes, the…
Updated
·
20–29 minutes -
Vendor Due Diligence: What to Actually Check, by Risk Tier
A due-diligence workbench organised by what you need to know before you sign and calibrated by risk tier: the fourteen interagency factors with the evidence that counts, depth…
Updated
·
19–29 minutes -
Walkthrough vs Test of Controls: Different Questions, Different Evidence
A walkthrough answers whether the process is understood and the control is designed and implemented; a test of controls answers whether it operated across the period. This guide…
Updated
·
19–29 minutes -
Manual, Automated, and IT-Dependent Manual Controls: Testing Implications of Each
The three control natures defined by what can fail, their testing implications side by side (design test, operating test, sample sizes, ITGC reliance, evidence, roll-forward), a five-question classification…
Updated
·
20–30 minutes -
Testing Automated Controls and System Configurations: A Non-IT Auditor’s Method
How to test the controls a system performs without anyone watching: the seven types of automated control and where their logic lives, why one well-designed test can cover…
Updated
·
21–31 minutes -
The Walkthrough Documentation Template: Capturing a Process End-to-End
The walkthrough artifact done properly: an eight-part narrative-plus-flowchart structure with control-point call-outs, system handoffs, evidence inventory, the documented-vs-actual gap log, and a conclusion that drives testing — with…
Updated
·
24–36 minutes -
The Journal Entry Analytics Catalog: Risk-Scoring the General Ledger
Twenty-five journal entry analytics tests in four families, each with logic, data, threshold, what a hit means and its false positives, anchored to the entry characteristics in PCAOB…
Updated
·
19–29 minutes -
A Fraud Red Flags Library by Business Cycle: 48 Flags, a Triage Method, Six Worked Cases
Forty-eight fraud red flags across seven cycles, each paired with its confirming test, plus a four-step triage method that scores clusters, six flags from worked engagements (three real,…
Updated
·
20–30 minutes -
GIAS Domain V: Performing Engagements From Planning to Closure
Domain V of the Global Internal Audit Standards, standard by standard: the fourteen workpapers the domain produces, engagement communication as a thread from notification to closing meeting, the…
Updated
·
19–29 minutes -
The Payroll Analytics Catalog: 30 Tests for Ghost Employees and Beyond
Thirty payroll analytics tests in five families, each with its logic, data, threshold, what a hit usually means and what produces false positives; the five datasets and the…
Updated
·
19–29 minutes -
The Accounts Payable Analytics Catalog: 40 Tests With Logic
Forty accounts payable analytics tests in six families, each with its logic, the data and threshold it needs, what a hit usually means and what produces false positives;…
Updated
·
20–30 minutes -
IPE: Testing the Completeness and Accuracy of Information Produced by the Entity
How to test information produced by the entity: the three attributes (completeness, accuracy, parameters), the two routes under AS 1105 paragraph 10, the report inventory that lets a…
Updated
·
19–29 minutes -
How to Audit Purchasing Cards: Small Transactions, Big Leakage, and a Worked Engagement
The purchasing card audit as an analytics engagement: the design trade, the configuration controls, a nine-control starter matrix, the abuse catalog, sizing, a twelve-test program, the full-population analytics…
Updated
·
19–28 minutes -
Audit Evidence: Sufficiency, Appropriateness and the Hierarchy, With Worked Examples
The discipline of audit evidence: sufficiency and appropriateness, the five types and what each proves, the reliability hierarchy, evidence by assertion, an evidence plan template, one assertion tested…
Updated
·
19–29 minutes -
Test of Design vs Operating Effectiveness (TOD vs TOE): Two Questions, Two Tests
Test of design versus test of operating effectiveness, properly separated: the questions each answers, where AS 2201, the ISAs, COSO and the Global Internal Audit Standards put them,…
Updated
·
19–28 minutes -
How to Audit Revenue Recognition (ASC 606): The Program and a Worked Engagement
Internal audit’s revenue recognition program under ASC 606: the five steps as a risk map, a ten-control starter matrix, the judgment areas and bias indicators, sizing, a twelve-test…
Updated
·
19–28 minutes -
How to Audit the Vendor Master File: Verification, Bank Changes and a Worked Engagement
The vendor master is the authentication layer of every payment. This guide covers onboarding verification, the payee-change fraud vector and its controls, a verification record template, duplicate and…
Updated
·
20–30 minutes -
How to Audit Procurement: Sourcing, Bidding and Contract Award, With a Worked Engagement
The front end of purchase-to-pay: where procurement risk lives, the bid-rigging red flags, sole-source discipline with a justification memo template, conflicts of interest, a 14-test program, the analytics…
Updated
·
19–29 minutes -
Internal Audit Work Program: The Template, Two Worked Programs and a Filled-In Change Log
Every section of the work program template and why it exists, the five-element procedure standard, two fully worked programs (a user access review and a 232-hour payroll audit),…
Updated
·
21–31 minutes -
How to Audit Travel and Expense: Policy, Fraud, Analytics and a Worked Engagement
A practitioner’s guide to auditing travel and expense: the policy-design review, approval integrity, a seven-control starter RCM, the full analytics catalog, MidState Beverage’s worked engagement test by test,…
Updated
·
19–29 minutes -
How to Audit Payroll: Ghost Employees, Off-Cycle Payments and a Worked Engagement
A practitioner’s guide to auditing payroll: the risk map, an eight-control starter RCM, a 12-test program, the ghost and leaver analytics, MidState Beverage’s worked engagement test by test,…
Updated
·
20–29 minutes -
How to Audit Journal Entries: The Management Override Lens, With a Worked Year-End Run
Journal entry testing as the anti-override control: the completeness proof, the fourteen-criterion risk-scoring library, the three-layer selection strategy, the four questions to ask of every entry, top-side entries,…
Updated
·
19–28 minutes -
How to Audit Accounts Payable: Risks, Controls, a 14-Test Program and a Worked Engagement
The internal auditor’s guide to accounts payable: where the risk concentrates in procure-to-pay, a ten-control starter matrix, a fourteen-test program with attributes, the analytics that find real dollars,…
Updated
·
23–34 minutes -
Annotated Workpaper Examples: A Model Testing File From Cover to Conclusion
A complete, realistic audit testing workpaper — purpose, population, sample, procedures, exception, conclusion — annotated to show why each element exists.
Updated
·
18–26 minutes -
Audit Sample Sizes Demystified: Where 25, 40, and 60 Actually Come From
Where audit sample sizes 25, 40, and 60 come from: the attribute-sampling math, when the conventions mislead, and a defensible grid for non-SOX audits.
Updated
·
22–32 minutes -
Fraud Risk Management: The Complete Guide to Assessment, Controls and Audit’s Role
Fraud risk management for internal auditors and the managers who run programmes: how fraud is classified, why it happens, the COSO and ACFE five-principle framework, a scheme-level fraud…
Updated
·
22–32 minutes