Internal Audit Process

Conduct a risk assessment to identify the risks associated with the audit.

Based on the risk assessment, prioritize projects to be executed.

Auditor conducts an opening conference to discuss scope, objectives and describes the audit process.

Auditor develops a preliminary audit plan by gathering information to better understand the audit area.

Manager responsible for the audit is promptly consulted about audit concerns.

Management provides additional information to aid the auditor in determining if comment is warranted.

A detailed test program is developed to test areas of high risk, focusing on compliance with policies, procedures, laws and regulations.

Meetings are held to clarify and provide management the opportunity to comment.

A draft report is submitted to management for formal response to issues.

Responses are incorporated into a final report and are distributed to appropriate parties.