Internal Audit Planning

Required Inputs

• Organization: Company name, industry, and organizational structure.
• Audit Period: Fiscal year or period covered by the audit plan.
• Available Audit Resources: Number of auditors, total available audit days, budget.
• Prior Audit Results: Previous findings, open issues, and management action plans.
• Risk Assessment Output: Enterprise risk register or risk assessment (link to enterprise-risk-assessment skill if needed).
• Regulatory Environment: Key regulations and compliance obligations.
• Stakeholder Priorities: Board, audit committee, and management concerns.

Execution Steps

1. Define the Audit Universe

Map every auditable entity in the organization. The audit universe is exhaustive -- nothing is excluded without documented justification.

Audit Universe Categories