What to expect from an audit
There are several key stages involved in any audit. Different things happen at each stage. Here's a quick snapshot of what you can expect.
Engagement, planning and scoping
We’ll meet with relevant senior members from the area to be reviewed and chat through the scope of the audit, when key things need to happen, the relevant people who need to be involved and the independence of each team member. We will also identify:
- The objectives of the audit
- Any limitations to the scope
- The risks associated with the review area
- Start date and expected duration
- Locations or areas we will need to visit
- An audit sponsor within the area
We’ll prepare a Memorandum of Engagement which formalises and summarises what was discussed at the previous 'preliminary consultation' meeting.
Before the audit officially gets underway, we’ll meet with management of the area to be reviewed to:
- Allow us all to meet one another
- Clarify the risks, objectives, scope and timing of the audit broadly amongst the key people involved
- Give staff an opportunity to present their views and perspectives on the risks or any other matter associated with the audit
- Finalise timings and staff involvement requirements
- Arrange access to locations, personnel, files, systems and data
This is where we start spending a good deal of time in your area. During this stage of the audit we will start to:
- Request policy and procedure documents for review
- Assess and evaluate the internal controls in place
- Identify what’s working well and any relevant process improvements
- Review and assess key risks and controls
We will provide you with an update on the status of the audit and our findings throughout the fieldwork so there are no surprises.
At the end of the audit, we will provide you with a draft report. This report will include the issues identified and recommendations for improvements in internal controls to support the matters raised.
You will be asked to provide your comments regarding the recommendations with an action plan on how you will address the issue. The final report is provided to the Risk Committee.
Your feedback is important to us. At the end of the audit we will provide you with a short survey. We would appreciate you completing the survey and returning to us. We can use your feedback to help us improve our service to you.