1. Request for an Audit
The Corporate Internal Audit Group (CIAG) will be requested to perform an operational, financial or compliance audit by management, department head or other personnel.
2. Approval of Audit
Depending on the source of the audit request, CIAG will obtain approval for the audit from executive management or the audit committee of the board of directors.
3. Entrance Conference
The department head and related vice-president will be informed in advance that an audit has been proposed. A meeting will be held between CIAG and the department or area under audit. At this meeting, CIAG will discuss the purpose and objectives of the audit. In addition, the scope will be agreed upon by all parties and dates for fieldwork will be established. This will also be the time to raise and address any issues or concerns that should be considered during the audit.
4. Item Request List
CIAG will provide the department or area under audit an item request list, which will identify all the documents and records that will need to be provided to CIAG to complete the audit.
This is the stage where the actual audit takes place. CIAG will generally be located at the department for fieldwork. CIAG will select a sample of transactions to test controls as identified in the process review. All findings will be discussed with department management before fieldwork is completed. CIAG will coordinate with the department or area under audit and will document, as established in the scope, the overall process, related internal controls, audit work program, information technology systems and develop our findings and recommendations. CIAG will gather all necessary data, identify and investigate any discrepancies and complete all workpapers.
6. Draft Report
At the conclusion of fieldwork and after all workpapers are complete, CIAG will draft a report summarizing all work performed and findings and recommendations. This draft report will be shared with the department or area under audit, executive management and other personnel as considered necessary.
7. Exit Conference
The draft report will be discussed at this meeting including all findings and recommendations. The department or area under audit will have the opportunity to ask questions, address issues and respond to the findings and recommendations.
8. Final Report
CIAG will incorporate department management's responses into the report and issue a final report to the department or area under audit, executive management and the audit committee of the board of directors.
Depending on the nature of the audit, CIAG may perform a follow-up audit to determine the status of its recommendations. A follow-up report will be issued in such a case.