Internal Audit Evidence Documentation & Control Testing Framework
Systematize audit evidence collection, control testing, and exception documentation for compliance
What You Can Do
You can systematically collect and validate audit evidence, document control testing procedures with clear linkages to audit objectives, and classify exceptions by risk level with root cause analysis. This skill ensures your audit work papers meet regulatory standards, create defensible audit trails, and consolidate findings across business units for management and external audit coordination.
Features
capture source, date, custodian, and validation status for each audit evidence item
link procedures to audit objectives, document sample size/methodology, and record test results with statistical extrapolation
categorize deviations by risk level (critical, high, medium, low) with impact assessment and root cause tracking
create structured schedules linking testing procedures to findings and recommendations
record control deviations with business justification and alternative control effectiveness assessment
organize evidence for SOX, COSO, regulatory investigations, and external audit coordination
consolidate findings across multiple business units with trend analysis and remediation tracking
Example Output
Example 1: Revenue Cycle Control Testing
Control Tested: Invoice authorization and approval Audit Objective: Ensure all revenue transactions are properly authorized and recorded Sample Size: 45 invoices from Q3 transactions Test Results: 44 invoices properly authorized, 1 exception (invoice #4521 approved after posting) Exception Classification: Medium risk — procedural deviation with compensating downstream review Root Cause: System override during period-end processing Recommendation: Enhance workflow alerts for post-dated approvals
Example 2: Payroll Cycle Exception Log
| Transaction Date | Employee ID | Exception Type | Amount | Risk Level | Root Cause | Status |
|---|---|---|---|---|---|---|
| 2024-01-15 | EMP-2847 | Unapproved overtime | $450 | High | Manager approval delay | Remediated |
| 2024-01-18 | EMP-3102 | Manual journal entry | $1,200 | Critical | Rate calculation error | Under Investigation |
| 2024-01-22 | EMP-1954 | Duplicate payment | $2,100 | Critical | System processing error | Recovered |
Summary: 3 exceptions tested, 2 compensating controls identified, 1 requiring immediate remediation
What's Included
- SKILL.md: complete internal audit evidence documentation framework and control testing procedures
- Evidence Collection Checklist: standardized template for capturing audit evidence with source validation and custodian tracking
- Control Testing Documentation Template: work paper structure linking procedures to audit objectives with sample size and test result recording
- Exception Classification Matrix: risk-level framework (critical/high/medium/low) with impact assessment and root cause analysis
- Audit Trail Compliance Worksheet: SOX, COSO, and regulatory requirement mapping for evidence organization
Who It's For
- Internal Auditors — conducting control testing and documenting evidence for financial and operational audits
- Compliance Officers — maintaining audit trails and exception documentation for regulatory compliance programs
- Finance Managers — supporting internal audit processes and coordinating control testing activities
- External Audit Liaisons — organizing evidence packages and coordinating audit file preparation with external auditors
- Risk and Assurance Teams — consolidating audit findings and tracking control remediation across business units
Best For
- Financial control testing — revenue, expenditure, payroll, fixed asset, and cash management cycle documentation
- Exception tracking and classification — organizing and categorizing control deviations by risk level and root cause
- Audit work paper preparation — creating structured schedules that link testing procedures to findings and recommendations
- Compliance investigation support — building defensible audit trails for SOX, COSO, and regulatory reviews
- Cross-functional audit consolidation — summarizing findings across multiple business units for management reporting
You might also like
You can systematically prepare tax provisions that survive audit scrutiny by calculating current and deferred tax impacts, reconciling effective tax rates from statutory to reported amounts, and documenting uncertain tax positions with FIN 48 support. The skill guides you through multi-jurisdictional tax exposure analysis and helps you create audit-ready workpapers with clear audit trails for quarterly (10-Q) and annual (10-K) financial statement filings.
by eryet
You can analyze transaction clusters to identify layering, placement, and integration schemes using proven AML methodologies. Claude applies typology frameworks to suspicious fund flows, cross-border movements, and beneficiary ownership chains—transforming raw transaction flags into regulatory-grade narratives that justify SAR escalation and withstand compliance audits.
by eryet
You can execute structured compliance audits that map regulatory requirements to operational controls, test control effectiveness with documented evidence, quantify compliance risk exposure, and track remediation progress with clear accountability. The framework produces audit findings in regulatory-acceptable format, transforming ad-hoc reviews into defensible procedures that satisfy internal audit standards (IIA) and regulatory expectations.
by eryet
You can analyze insurance claim files to uncover fraud indicators by synthesizing evidence from policyholder statements, medical/repair records, financial documents, and prior claims history. This skill helps you reconstruct timelines, identify inconsistencies and impossibilities, recognize suspicious financial patterns, and build defensible fraud conclusions suitable for claims adjustment, litigation support, or settlement negotiations. Transform raw claim data into an evidence hierarchy distinguishing confirmed facts, supported inferences, and investigative leads requiring further development.
by eryet
You can allocate indirect costs (administration, utilities, depreciation, maintenance) across clinical and non-clinical departments using activity-based costing (ABC) and traditional allocation methodologies. This skill helps you calculate precise allocation rates, model reimbursement scenarios, validate cost driver selections, and document allocation methods for compliance—enabling data-driven decisions on service line profitability, pricing strategies, and payer contract negotiations.
by eryet
You can systematically classify and track expenses against specific restricted grants and donations, reconcile fund balances with compliance verification, and generate accurate financial statements that separate restricted and unrestricted funds. This skill prevents audit failures, donor relation damage, and grant non-compliance penalties by ensuring every restricted fund expense is properly documented, allowable under grant terms, and traceable to donor/grantor requirements.
by eryet
You can automatically detect attendance discrepancies across time-tracking data, classify exceptions by root cause (system errors, policy violations, legitimate absences), and generate audit-ready documentation. This skill establishes decision frameworks that handle routine exceptions efficiently while flagging complex cases for human review, reducing payroll processing time by 60-70% while improving accuracy and reducing compliance liability.
by eryet
You can rapidly design, document, and validate internal control frameworks aligned with COSO 2013, SOX compliance, and audit standards. Claude helps you map business processes to control objectives, create control matrices linking risks to preventive and detective controls, generate control narratives for auditors, and identify control gaps for remediation planning—compressing what typically takes 200+ annual hours into a fraction of that time while improving control design quality.
by eryet