Choosing Internal Audit Software: An Evaluation Checklist
What to evaluate when selecting internal audit management software — lifecycle coverage, risk scoring, workpapers, review workflow, follow-up, reporting, and total cost.
Read guide Internal audit blog
Guides and practice notes for internal audit teams.
How to plan risk-based audits, build a risk and control matrix, document workpapers, write findings that hold up, and choose the software to run it all.
Building an ISO 27001 Internal Audit Programme
How to plan and run the ISO 27001 internal audit programme: scope and criteria, Annex A coverage, auditor independence, nonconformities, and management review inputs.
Read guideAudit Findings vs Observations: What's the Difference?
How to distinguish audit findings from observations, when to raise each, and why the distinction affects follow-up and audit committee reporting.
Read guideHow to Structure an Internal Audit Report
A practical structure for internal audit reports: executive summary, scope, opinion, findings with ratings, management responses, and follow-up commitments.
Read guideThe Risk and Control Matrix (RCM) Explained, With Examples
What a risk and control matrix is, how objectives, risks, controls, and procedures fit together, and how to build an RCM that survives review.
Read guideHow to Build a Risk-Based Internal Audit Plan (Step by Step)
A practical walkthrough for building a risk-based annual internal audit plan: define the audit universe, score risk drivers, rank auditable units, and get the plan approved.
Read guide