Internal Audit
Plan engagements around the risks that matter, document work programmes and findings, and close corrective actions only through an approval that separates duties.
What it does
Build the annual plan from the risk register: each engagement links to the risks it covers, and its priority is derived from those risks' scores. Record scope, objectives and the work programme for each engagement.
Findings capture criteria, root cause, severity, recommendation and management response, and lead to corrective actions with owners and due dates. Closing a finding takes a two-step approval, and the same person cannot approve both steps.
Key capabilities
What works in the platform today, and what is on the roadmap.
- Available working in the current release
- Planned on the roadmap — not yet available
- Available
Risk-based audit plan
Engagements by plan year and unit, prioritised from the scores of their linked risks.
- Available
Work programmes
Record scope, objectives and the work programme for each engagement.
- Available
Findings and recommendations
Criteria, root cause, severity, recommendation and management response on every finding.
- Available
Corrective actions
Actions with owners, due dates and completion, linked back to the finding.
- Available
Two-step closure approval
Closure requires two approval steps by different people — segregation of duties is enforced by the server.
- Available
Closure and overdue rates
The audit overview reports how many findings are closed and how many actions are overdue.
- Available
Finding clustering
The rule engine groups similar findings that may share a root cause.
- Planned
Working-paper and time management
Detailed working papers, staff time sheets and budget tracking.
How it connects
Records are linked across modules, so the same fact is entered once and seen wherever it matters.
- Risk ManagementEngagement priority comes from the linked risks' scores.
- Controls & RCSAFindings can reference the control that failed, informing its effectiveness.
- Incidents & Corrective ActionsCorrective actions are shared with incident follow-up.
- Dashboards & ReportsAudit overview and printable executive report for the audit committee.
See Internal Audit with your own data
Book a guided walkthrough, or sign in to your workspace to explore the module.
Consulting: consulting@4each1.com · Projects & systems development: projects@4each1.com