This memo documents low-risk opportunities in the network infrastructure environment identified during an internal audit review and meant for management’s information and consideration ...

This document outlines risks and controls common to the application control review process in a risk and control matrix (RCM) format.

This memo outlines the assumptions and decision used to scope the documentation efforts around application security.

This document outlines risks and controls common to the "manage service" process in a risk and control matrix (RCM) format.

This internal audit engagement memo informs an auditee of an upcoming audit and includes the objectives of the audit, proposed timetable and audit team members.

This work program reviews key tax processes and systems related to a company’s U.S. operations.

This audit program outlines steps to perform a comprehensive review of a hotel's financial reporting area and its compliance with its management contract/lease agreement.

This memo documents internal audit's summary of findings from a data governance review.

This sample memo presents a high-level observation of the review and testing of manual and system controls present in a company’s cash applications process.

This memo documents a company’s approach to administering and supervising internal audit work completed by department personnel for a specific project.

This tool focuses on topics that can help shape and support an effective risk culture.

This work program outlines steps for an AS400 review audit. It identifies major areas to investigate during a general or specific controls review in an AS400 installation as well as cri...