IA Resource Hub
Templates, worked examples, and tools, in one place.
Every template on the site sits inside the guide that explains how to fill it in, with a worked example from the same company so you can see a finished one. This page is the index: engagement templates, risk and control templates, reference sets, and the tools. Free, no signup, copy and adapt.
- Copy-and-adapt templates
- Worked examples included
- Nothing gated
Engagement templates
From the annual plan to the closed finding
Six templates that follow one engagement end to end, each with a complete example filled in.
Internal audit plan template
Universe, risk scoring, capacity model, and the board approval memo, with a full worked plan.
Open the plan template → PlanningAudit planning memo template
Objectives, scope, risk assessment, approach, hours, and the kickoff agenda for one engagement.
Open the memo template → PlanningAudit work program
How to turn risks into test steps, with sample sizes and evidence requirements built in.
Open the work program guide → FieldworkWalkthrough documentation template
Process narrative, control points, handoffs, and exceptions, with a settlement-to-deposit walkthrough completed.
Open the walkthrough template → ReportingInternal audit report template set
Three report shells, house style rules, and a complete report with findings written in the five Cs.
Open the report templates → Follow-upFinding and issue log template
Field dictionary, status taxonomy, escalation ladder, committee cuts, and a log extract.
Open the issue log template →Risk and control templates
The documents a risk universe runs on
Matrices, registers, assessments, and the workpaper that proves the testing happened.
Risk and control matrix template
Column by column, with worked rows and the scoring logic; builds directly in the RCM Workbench.
Open the RCM template → RiskRisk register template
Fields, scoring, ownership, and review cadence, with a completed register.
Open the risk register → RiskRCSA process
Running a risk and control self-assessment that produces usable results, with the templates.
Open the RCSA guide → GovernanceRisk appetite statements
How to write statements that can be tested, with examples by risk category.
Open the appetite guide → EvidenceAudit workpaper example
A complete test workpaper with preparer and reviewer notes, ready to copy.
Open the workpaper example → ControlsRCM templates by audit scope
The older library of matrix starting points organized by audit area.
Browse by scope →Tools
Nine free tools
Eight run in your browser, with nothing to install and no account to create; the requirements matrix is an Excel workbook.
RCM Workbench
Build, score, and export a risk and control matrix.
Open the Workbench → ToolmySampler
Random, systematic, stratified, and monetary-unit samples with a documentation record.
Open mySampler → ToolmyDayLog
A private fieldwork day log for hours, notes, and follow-ups.
Open myDayLog → ToolSelf-Assessment Hub
Check a function or an engagement against the Standards.
Open the Self-Assessment Hub → CIA toolCIA Practice Questions
156 scenario questions for all three parts, weighted to the 2025 syllabus, with a rationale for every option.
Open the question bank → CIA toolCIA Study Planner
A day-by-day plan for your parts and dates, with every IIA deadline dated.
Build my plan → CIA toolCIA Flashcards
The 52 standards, the syllabus map and the key terms on 199 cards, with spaced repetition.
Start studying → Software toolSoftware Shortlist Finder
Eight questions about your function, then a ranked shortlist of audit platforms with the reasons behind each pick.
Find my shortlist → DownloadSoftware Requirements Matrix
A free Excel workbook: 156 requirements, weights by team size, must-have knock-outs and scoring for up to five vendors.
Get the workbook →The tools page sets out what each one is for, and what it is not.
Reference sets
The lookups you reach for mid-engagement
Internal audit report examples
Finished reports and findings to model yours on.
Open the examples → TestingAudit sample sizes: 25, 40, 60
The convention behind the sizes and when to use each.
Open the sample size guide → FindingsFinding severity ratings
A rating scale with definitions and worked calls.
Open the ratings guide → FraudFraud red flags
A working catalog by process, with what to test.
Open the red flags → FrameworksThe COSO 17 principles
Each principle with points of focus and audit evidence.
Open the COSO guide → StandardsGlobal Internal Audit Standards
The Standards, domain by domain, with what changed.
Open the Standards overview →Missing a template?
Say which one and what it is for. Templates get added when practitioners ask for them.