This tool includes three sample audit programs that provide steps organizations can take to conduct a capital expenditure audit.

Sample procedures include: link capital project risks to company objectives, initiatives and history; rate capital project risks based on significance and likelihood; determine capital project risks appetite and related risk responses; evaluate inherent and residual capital project-risk levels; seek input, review and consultation from industry, IT and SME personnel; consider the frequency of capital project controls, control types and control categories; and evaluate inherent and residual capital project-risk levels.