Internal Audit Documentation Analyzer
Analyze audit evidence and control documentation to identify gaps and develop findings
What You Can Do
You can upload control documentation, audit evidence, compliance artifacts, and audit trails for Claude to analyze systematically. Claude identifies control design weaknesses, tests the adequacy of your audit procedures, quantifies risk exposure, and generates audit findings with explicit linkage to control frameworks and risk registers. This reduces manual documentation synthesis by 40-60% while improving consistency across multiple control areas.
Features
Analyzes design and operating effectiveness documentation to surface control weaknesses against audit requirements and frameworks
Evaluates whether testing evidence supports your control conclusions and flags insufficient or contradictory documentation
Structures risk impact analysis by linking control deficiencies to business processes and quantifying exposure
Generates audit findings with explicit condition, criteria, cause, and effect linkage to support audit conclusions
Identifies systemic issues across multiple control areas and highlights root causes across the control environment
Analyzes approval chains, reconciliations, exception logs, and audit trails to validate operating effectiveness
Links findings and test results to relevant control frameworks (COSO, SOX, ISO) for report alignment
Assesses whether audit procedures and sample sizes provide sufficient evidence for control conclusions
Example Output
Input: Control procedure documentation for a cash disbursement process, supporting evidence of authorization testing, and a sample of transactions
Output:
CONTROL FINDING: Insufficient Segregation of Duties
- CONDITION: In 15 of 50 transactions tested, the same individual both approved and processed payment
- CRITERIA: SOX 404(b) requires segregation of authorization and execution duties
- CAUSE: System configuration allows same user role for both functions; supervisory review compensating control not consistently applied
- EFFECT: Increased risk of unauthorized or erroneous payments; estimated monthly exposure $240K
- RISK RATING: Medium → High (if approval delays increase volume)
- RECOMMENDATION: Restrict user role permissions or implement mandatory dual approval for >$100K
Input: Board-approved reconciliation procedures vs. actual performed reconciliations
Output: Testing inadequacy flag — sample size of 10 reconciliations insufficient for quarterly population of 180; recommend expanding to 30 with documented sampling methodology.
What's Included
- SKILL.md instruction file: Complete system prompt for control documentation analysis workflows
- Control Gap Assessment Template: Structured checklist for identifying design vs. operating effectiveness gaps
- Audit Finding Framework: COSO-aligned template for condition-criteria-cause-effect documentation
- Risk Quantification Worksheet: Tool for converting control deficiencies into financial/operational impact metrics
- Testing Adequacy Checklist: Guidance for evaluating sample sizes, evidence completeness, and procedure effectiveness
Who It's For
- Internal auditors — Conducting control testing and developing audit findings across finance, operations, or IT domains
- Compliance managers — Evaluating control design and operating effectiveness against regulatory frameworks (SOX, GDPR, HIPAA)
- Risk and audit committee support staff — Synthesizing control assessments for board reporting
- Finance shared service leaders — Analyzing control documentation across multiple process areas to identify systemic weaknesses
- IT audit specialists — Reviewing system access controls, change management documentation, and IT control evidence
Best For
- Annual or periodic control testing programs where multiple control areas require systematic documentation review
- Remediation follow-up audits where prior-year findings need to be re-evaluated against updated procedures and evidence
- Compliance assessments against industry frameworks (COSO, COBIT, ISO) requiring linkage of controls to standards
- Preparation of audit reports and management findings requiring explicit justification and risk quantification
- Cross-functional control environment assessments identifying patterns and root causes across multiple business processes
You might also like
You can upload aging reports and AR subledger data to Claude, which analyzes bucket distributions, reconciles balances to the general ledger, flags anomalies and aging pattern irregularities, and generates documented collection strategies. Claude produces prioritized customer lists, DSO benchmarking analysis, allowance adequacy assessments, and compliance-ready audit schedules—transforming raw AR data into actionable cash flow optimization strategies.
by eryet
You can systematically validate employee payroll records, cross-check tax withholding calculations against current tax brackets, verify regulatory compliance across federal/state/local requirements, and flag anomalies that could trigger penalties—all before executing payment runs. This reduces processing time by 40-60% while catching errors that manual spreadsheet reviews typically miss, working across ADP, Workday, Gusto, and manual payroll systems.
by eryet
You systematically extract financial red flags from claim submissions, construct causal narratives linking evidence to fraud conclusions, and quantify potential loss exposure. This skill helps you distinguish between legitimate claim variations and fraud indicators, enabling you to generate investigation summaries defensible in litigation, settlement negotiations, or Special Investigation Unit (SIU) presentations.
by eryet
This skill helps you audit nexus comprehensively by analyzing physical presence rules, economic thresholds, affiliate connections, and marketplace facilitator statutes across all 50 states and relevant localities. You'll document nexus triggers specific to your client's business model—whether they're selling through marketplaces, using drop-shipping, hiring remote employees, or expanding operations. The result is an actionable filing calendar and remediation strategy that minimizes compliance gaps and protects against substantial back-tax assessments, penalties, and interest.
by eryet
You can build comprehensive, jurisdiction-specific transfer pricing documentation for intercompany transactions including management fees, royalties, financing arrangements, and cost allocations. Claude analyzes transaction economics, applies appropriate transfer pricing methods (comparable uncontrolled price, cost plus, resale price, etc.), and generates contemporaneous documentation that withstands audit scrutiny and supports mutual agreement procedures across borders.
by eryet
You can allocate indirect costs (administration, utilities, depreciation, maintenance) across clinical and non-clinical departments using activity-based costing (ABC) and traditional allocation methodologies. This skill helps you calculate precise allocation rates, model reimbursement scenarios, validate cost driver selections, and document allocation methods for compliance—enabling data-driven decisions on service line profitability, pricing strategies, and payer contract negotiations.
by eryet
You can execute structured compliance audits that map regulatory requirements to operational controls, test control effectiveness with documented evidence, quantify compliance risk exposure, and track remediation progress with clear accountability. The framework produces audit findings in regulatory-acceptable format, transforming ad-hoc reviews into defensible procedures that satisfy internal audit standards (IIA) and regulatory expectations.
by eryet
You can systematically evaluate payment timing decisions across your vendor base by modeling discount capture opportunities against working capital requirements. The skill analyzes vendor payment terms, your cash flow constraints, and strategic vendor priorities to generate prioritized payment schedules that maximize savings while maintaining adequate liquidity and protecting critical supplier relationships.
by eryet