Internal Audit Documentation Analyzer
Analyze audit evidence and control documentation to identify gaps and develop findings
What You Can Do
You can upload control documentation, audit evidence, compliance artifacts, and audit trails for Claude to analyze systematically. Claude identifies control design weaknesses, tests the adequacy of your audit procedures, quantifies risk exposure, and generates audit findings with explicit linkage to control frameworks and risk registers. This reduces manual documentation synthesis by 40-60% while improving consistency across multiple control areas.
Features
Analyzes design and operating effectiveness documentation to surface control weaknesses against audit requirements and frameworks
Evaluates whether testing evidence supports your control conclusions and flags insufficient or contradictory documentation
Structures risk impact analysis by linking control deficiencies to business processes and quantifying exposure
Generates audit findings with explicit condition, criteria, cause, and effect linkage to support audit conclusions
Identifies systemic issues across multiple control areas and highlights root causes across the control environment
Analyzes approval chains, reconciliations, exception logs, and audit trails to validate operating effectiveness
Links findings and test results to relevant control frameworks (COSO, SOX, ISO) for report alignment
Assesses whether audit procedures and sample sizes provide sufficient evidence for control conclusions
Example Output
Input: Control procedure documentation for a cash disbursement process, supporting evidence of authorization testing, and a sample of transactions
Output:
CONTROL FINDING: Insufficient Segregation of Duties
- CONDITION: In 15 of 50 transactions tested, the same individual both approved and processed payment
- CRITERIA: SOX 404(b) requires segregation of authorization and execution duties
- CAUSE: System configuration allows same user role for both functions; supervisory review compensating control not consistently applied
- EFFECT: Increased risk of unauthorized or erroneous payments; estimated monthly exposure $240K
- RISK RATING: Medium → High (if approval delays increase volume)
- RECOMMENDATION: Restrict user role permissions or implement mandatory dual approval for >$100K
Input: Board-approved reconciliation procedures vs. actual performed reconciliations
Output: Testing inadequacy flag — sample size of 10 reconciliations insufficient for quarterly population of 180; recommend expanding to 30 with documented sampling methodology.
What's Included
- SKILL.md instruction file: Complete system prompt for control documentation analysis workflows
- Control Gap Assessment Template: Structured checklist for identifying design vs. operating effectiveness gaps
- Audit Finding Framework: COSO-aligned template for condition-criteria-cause-effect documentation
- Risk Quantification Worksheet: Tool for converting control deficiencies into financial/operational impact metrics
- Testing Adequacy Checklist: Guidance for evaluating sample sizes, evidence completeness, and procedure effectiveness
Who It's For
- Internal auditors — Conducting control testing and developing audit findings across finance, operations, or IT domains
- Compliance managers — Evaluating control design and operating effectiveness against regulatory frameworks (SOX, GDPR, HIPAA)
- Risk and audit committee support staff — Synthesizing control assessments for board reporting
- Finance shared service leaders — Analyzing control documentation across multiple process areas to identify systemic weaknesses
- IT audit specialists — Reviewing system access controls, change management documentation, and IT control evidence
Best For
- Annual or periodic control testing programs where multiple control areas require systematic documentation review
- Remediation follow-up audits where prior-year findings need to be re-evaluated against updated procedures and evidence
- Compliance assessments against industry frameworks (COSO, COBIT, ISO) requiring linkage of controls to standards
- Preparation of audit reports and management findings requiring explicit justification and risk quantification
- Cross-functional control environment assessments identifying patterns and root causes across multiple business processes
You might also like
You can automatically detect attendance discrepancies across time-tracking data, classify exceptions by root cause (system errors, policy violations, legitimate absences), and generate audit-ready documentation. This skill establishes decision frameworks that handle routine exceptions efficiently while flagging complex cases for human review, reducing payroll processing time by 60-70% while improving accuracy and reducing compliance liability.
by eryet
This skill automates the complex work of calculating material price, quantity, and usage variances; labor rate and efficiency variances; and overhead variances across products, departments, and time periods. You input production data and standard cost tables, and Claude processes the variance calculations, organizes findings by significance, and generates detailed narratives explaining root causes of deviations. This transforms hours of spreadsheet manipulation into a structured analysis package ready for management review and variance committee meetings.
by eryet
You can rapidly cross-reference transaction patterns, revenue data, and economic activity against state-specific nexus thresholds to identify which states trigger filing obligations. The skill flags compliance gaps across physical presence, economic nexus, click-through, and affiliate nexus types, helping you determine filing requirements, quantify retroactive exposure risk, and prioritize registration in new states as clients expand.
by eryet
You can upload aging reports and AR subledger data to Claude, which analyzes bucket distributions, reconciles balances to the general ledger, flags anomalies and aging pattern irregularities, and generates documented collection strategies. Claude produces prioritized customer lists, DSO benchmarking analysis, allowance adequacy assessments, and compliance-ready audit schedules—transforming raw AR data into actionable cash flow optimization strategies.
by eryet
You can systematically validate employee payroll records, cross-check tax withholding calculations against current tax brackets, verify regulatory compliance across federal/state/local requirements, and flag anomalies that could trigger penalties—all before executing payment runs. This reduces processing time by 40-60% while catching errors that manual spreadsheet reviews typically miss, working across ADP, Workday, Gusto, and manual payroll systems.
by eryet
You systematically extract financial red flags from claim submissions, construct causal narratives linking evidence to fraud conclusions, and quantify potential loss exposure. This skill helps you distinguish between legitimate claim variations and fraud indicators, enabling you to generate investigation summaries defensible in litigation, settlement negotiations, or Special Investigation Unit (SIU) presentations.
by eryet
This skill helps you audit nexus comprehensively by analyzing physical presence rules, economic thresholds, affiliate connections, and marketplace facilitator statutes across all 50 states and relevant localities. You'll document nexus triggers specific to your client's business model—whether they're selling through marketplaces, using drop-shipping, hiring remote employees, or expanding operations. The result is an actionable filing calendar and remediation strategy that minimizes compliance gaps and protects against substantial back-tax assessments, penalties, and interest.
by eryet
You can systematically evaluate payment timing decisions across your vendor base by modeling discount capture opportunities against working capital requirements. The skill analyzes vendor payment terms, your cash flow constraints, and strategic vendor priorities to generate prioritized payment schedules that maximize savings while maintaining adequate liquidity and protecting critical supplier relationships.
by eryet