Author

IIA-Australia

Date

Topics Explored

Format

Extract/Description

The Internal Audit Standards require Internal auditors to develop and document work programs that achieve the engagement objectives. In practice internal auditors use an Audit Work Plan or a Risk and Control Matrix (RACM).

Key Points

1. There is no requirements to use one or the other – it is just important to document a work program for each internal audit engagement or service to guide the internal auditor to achieve the engagement objectives.
2. While the Internal Audit Standards say an audit work program must be developed and documented, they do not say what it should look like or what it should contain – this Factsheet provides guidance.

Relevant Industries

Level of Assumed Knowledge