-
Risk and Control Matrix (RCM) Template: Every Column, Six Worked Rows, One Real Rebuild
The full risk and control matrix template with every column explained, six fully worked rows, a real rebuild of an accounts payable matrix showing how the walkthrough and…
Updated
·
25–38 minutes -
The Global Internal Audit Standards: Every Domain, Principle and Standard Mapped
The Global Internal Audit Standards are organized as five domains, fifteen principles and fifty-two standards, and this page maps all of them: every principle, every standard by number…
Updated
·
17–25 minutes -
How to Audit Accounts Payable: Risks, Controls, a 14-Test Program and a Worked Engagement
The internal auditor’s guide to accounts payable: where the risk concentrates in procure-to-pay, a ten-control starter matrix, a fourteen-test program with attributes, the analytics that find real dollars,…
Updated
·
23–34 minutes -
Audit Issue Tracking: Data Model, Workflow, Metrics and Moving From Spreadsheet to System
Issue tracking for internal audit: the nine things the process has to do, the data model, workflow states and governance, three tiers of tooling and when each fits,…
Updated
·
18–27 minutes -
What Is Audit Risk? Inherent, Control and Detection Risk Explained, With Examples
Audit risk is the risk the auditor gets it wrong. This guide defines it precisely, explains the inherent-control-detection model and its limits, translates it into internal audit terms,…
Updated
·
18–27 minutes -
Audit Lessons From Corporate Scandals: Twelve Cases, Seven Patterns and Ten Tests
Twelve cases that shaped the profession, Barings to Silicon Valley Bank and FTX, each with what failed, internal audit’s part and what changed afterwards; the five mechanisms (accounting…
Updated
·
18–27 minutes -
The UK Internal Audit Code of Practice: The 37 Principles, the Gaps and a Year to Conform
The Chartered IIA’s Internal Audit Code of Practice, effective from January 2025: where it came from and its status, the nine sections and thirty-seven principles, the twelve scope…
Updated
·
22–32 minutes -
THE ULTIMATE INTERNAL AUDIT FAQs: TOP 50 QUESTIONS
Welcome to a comprehensive resource designed to answer the most pressing, perplexing, or simply curious questions about internal audit. Whether you’re new to the profession, a seasoned auditor sharpening…
Updated
·
34–50 minutes -
The Future of Internal Audit: Ten Shifts Already Under Way and Three Scenarios for 2035
The future of internal audit built from what is already in motion: ten shifts with the 2026 evidence for each (the Standards and topical requirements, AI inside the…
Updated
·
18–27 minutes -
IT General Controls (ITGC) Audit: The Complete Primer for Non-IT Auditors
How to scope and test ITGCs without an IT background: a 24-row test matrix with populations, samples and evidence, a PBC list, a 20-question IT interview script, and…
Updated
·
31–46 minutes -
Internal Audit Jargon Explained: 120 Terms and Concepts New Auditors Need
Internal audit has a vocabulary that new auditors, auditees and audit committee members all have to learn, and most of it is never taught; it is absorbed from…
Updated
·
18–27 minutes -
Risk-Based Internal Auditing: How Risk Drives the Plan, the Scope and the Testing
Risk-based auditing is the discipline of letting assessed risk, rather than the calendar or the org chart, decide what internal audit looks at, how deeply and how often.…
Updated
·
18–27 minutes -
Audit Walkthrough Guide: Question Bank, Script and Example
How to run an audit walkthrough that tests control design instead of confirming the narrative: a 36-prompt what-could-go-wrong bank, an interview script, a planning checklist, and a worked…
Updated
·
33–49 minutes -
The Internal Audit Process Step by Step: Seven Stages From Planning to Follow-Up
Every internal audit follows the same arc, and a beginner who understands the arc stops being surprised by what happens next. This guide walks the seven stages of…
Updated
·
18–27 minutes -
What to Expect During an Internal Audit: The Auditee’s Guide
Written for the people being audited, by an auditor: every phase from notification to follow-up, a 20-item document request list with the reason for each item, how findings…
Updated
·
31–46 minutes -
Risk Control Matrix (RCM): Names, Variants and Approaches
Within the realm of risk management and internal audit, practitioners encounter various names and approaches for what is essentially a risk control matrix (RCM). These variations, while similar…
Updated
·
3–4 minutes -
Substantive Testing in Internal Audit: Procedures and Design
Substantive testing for internal auditors: assertion-by-assertion procedures, a test design template, a fully worked accrued-liabilities cutoff test with a sample of 40 and a projection, and a worked…
Updated
·
34–51 minutes -
Enterprise Risk Management History: A Timeline
Enterprise risk management (ERM) stands today as a cornerstone of organizational resilience, guiding companies through turbulent markets, regulatory shifts, and ever-changing global landscapes. Yet the roots of risk…
Updated
·
18–27 minutes -
The Checklist Manifesto by Atul Gawande: Summary and Lessons for Auditors
Gawande’s argument for checklists, summarised for auditors: the cases, the design principles, why experts resist, a vocabulary, an audit map and a worked example auditing a surgical checklist…
Updated
·
18–28 minutes -
History of IIA Internal Audit Standards: 1947 to GIAS 2024 and the Topical Requirements
The full history of the IIA Standards with every date re-checked: the 1947 Statement of Responsibilities, the 1968 Code of Ethics, the 1978 Standards, the 1999 definition, the…
Updated
·
29–44 minutes -
Internal Audit Co-Sourcing 101: What It Is and Why Your Organization Needs It
In today’s fast-paced business environment, traditional internal audit models can’t keep up with evolving digital risks, stricter regulations, and a tightening talent market. That’s where internal audit co-sourcing…
Updated
·
25–37 minutes -
The Power Broker by Robert Caro: Summary and Governance Lessons for Auditors
Caro’s biography of Robert Moses, summarised for auditors: the rise, the methods as governance mechanisms, the public authority as instrument, the fall, a vocabulary, an audit map for…
Updated
·
19–28 minutes -
Sawyer’s Guide for Internal Auditors: Summary, Editions and Free Study Notes
What Sawyer’s Internal Auditing actually contains, edition by edition from 1973 to the 7th (2019), why there is no free PDF of the book and what our free…
Updated
·
34–51 minutes -
The Audit Society by Michael Power: Summary, Key Ideas and What They Mean for Auditors
Michael Power’s The Audit Society (Oxford, 1997) summarised for auditors: its six chapters and six big ideas, from the audit explosion and rituals of verification to auditability and…
Updated
·
19–29 minutes -
Against the Gods by Peter Bernstein: The History of Risk, Summarised for Auditors
Bernstein’s history of risk, summarised for auditors: the five eras, the story in twelve steps, nine ideas, a vocabulary, the assumptions inside the profession’s tools, and a worked…
Updated
·
18–27 minutes -
The MRA and MRIA Lifecycle: From Regulator Finding to Validated Closure, Updated for 2026
What MRAs and MRIAs are under each US banking agency’s own definitions, the escalation ladder they sit on, the seven-stage lifecycle from intake to closure, a board response…
Updated
·
32–48 minutes -
Internal Controls: What They Are, Who Tests Them, and How
A precise definition of internal control, the classifications that decide how each control is tested, who tests controls and why five parties test the same one, the four…
Updated
·
21–31 minutes -
How Long Does an Internal Audit Take? Timelines and Drivers
Six to ten weeks for a standard audit, and here is what decides which: the three clocks (elapsed time, audit hours, auditee hours), a phase-by-phase timeline with ranges,…
Updated
·
19–28 minutes -
Internal Audit vs. Compliance: Roles, Lines, and Reliance
A practitioner’s comparison of internal audit and compliance: definitions from the standards, a fifteen-dimension side-by-side, the Three Lines Model applied to one regulation, reliance criteria, blurred-line safeguards, two…
Updated
·
27–40 minutes -
How to Identify All Key Auditable Entities when Creating an Audit Universe
Building and maintaining a robust audit universe is a cornerstone of effective internal audit planning and strategic risk coverage. Yet for many senior leaders—particularly directors, newly appointed managing…
Updated
·
15–22 minutes