Internal Audit Evidence Documentation & Control Testing Framework
Systematize audit evidence collection, control testing, and exception documentation for compliance
What You Can Do
You can systematically collect and validate audit evidence, document control testing procedures with clear linkages to audit objectives, and classify exceptions by risk level with root cause analysis. This skill ensures your audit work papers meet regulatory standards, create defensible audit trails, and consolidate findings across business units for management and external audit coordination.
Features
capture source, date, custodian, and validation status for each audit evidence item
link procedures to audit objectives, document sample size/methodology, and record test results with statistical extrapolation
categorize deviations by risk level (critical, high, medium, low) with impact assessment and root cause tracking
create structured schedules linking testing procedures to findings and recommendations
record control deviations with business justification and alternative control effectiveness assessment
organize evidence for SOX, COSO, regulatory investigations, and external audit coordination
consolidate findings across multiple business units with trend analysis and remediation tracking
Example Output
Example 1: Revenue Cycle Control Testing
Control Tested: Invoice authorization and approval Audit Objective: Ensure all revenue transactions are properly authorized and recorded Sample Size: 45 invoices from Q3 transactions Test Results: 44 invoices properly authorized, 1 exception (invoice #4521 approved after posting) Exception Classification: Medium risk — procedural deviation with compensating downstream review Root Cause: System override during period-end processing Recommendation: Enhance workflow alerts for post-dated approvals
Example 2: Payroll Cycle Exception Log
| Transaction Date | Employee ID | Exception Type | Amount | Risk Level | Root Cause | Status |
|---|---|---|---|---|---|---|
| 2024-01-15 | EMP-2847 | Unapproved overtime | $450 | High | Manager approval delay | Remediated |
| 2024-01-18 | EMP-3102 | Manual journal entry | $1,200 | Critical | Rate calculation error | Under Investigation |
| 2024-01-22 | EMP-1954 | Duplicate payment | $2,100 | Critical | System processing error | Recovered |
Summary: 3 exceptions tested, 2 compensating controls identified, 1 requiring immediate remediation
What's Included
- SKILL.md: complete internal audit evidence documentation framework and control testing procedures
- Evidence Collection Checklist: standardized template for capturing audit evidence with source validation and custodian tracking
- Control Testing Documentation Template: work paper structure linking procedures to audit objectives with sample size and test result recording
- Exception Classification Matrix: risk-level framework (critical/high/medium/low) with impact assessment and root cause analysis
- Audit Trail Compliance Worksheet: SOX, COSO, and regulatory requirement mapping for evidence organization
Who It's For
- Internal Auditors — conducting control testing and documenting evidence for financial and operational audits
- Compliance Officers — maintaining audit trails and exception documentation for regulatory compliance programs
- Finance Managers — supporting internal audit processes and coordinating control testing activities
- External Audit Liaisons — organizing evidence packages and coordinating audit file preparation with external auditors
- Risk and Assurance Teams — consolidating audit findings and tracking control remediation across business units
Best For
- Financial control testing — revenue, expenditure, payroll, fixed asset, and cash management cycle documentation
- Exception tracking and classification — organizing and categorizing control deviations by risk level and root cause
- Audit work paper preparation — creating structured schedules that link testing procedures to findings and recommendations
- Compliance investigation support — building defensible audit trails for SOX, COSO, and regulatory reviews
- Cross-functional audit consolidation — summarizing findings across multiple business units for management reporting
You might also like
You can upload aging reports and AR subledger data to Claude, which analyzes bucket distributions, reconciles balances to the general ledger, flags anomalies and aging pattern irregularities, and generates documented collection strategies. Claude produces prioritized customer lists, DSO benchmarking analysis, allowance adequacy assessments, and compliance-ready audit schedules—transforming raw AR data into actionable cash flow optimization strategies.
by eryet
You can systematically prepare tax provisions that survive audit scrutiny by calculating current and deferred tax impacts, reconciling effective tax rates from statutory to reported amounts, and documenting uncertain tax positions with FIN 48 support. The skill guides you through multi-jurisdictional tax exposure analysis and helps you create audit-ready workpapers with clear audit trails for quarterly (10-Q) and annual (10-K) financial statement filings.
by eryet
You can systematically validate employee payroll records, cross-check tax withholding calculations against current tax brackets, verify regulatory compliance across federal/state/local requirements, and flag anomalies that could trigger penalties—all before executing payment runs. This reduces processing time by 40-60% while catching errors that manual spreadsheet reviews typically miss, working across ADP, Workday, Gusto, and manual payroll systems.
by eryet
You systematically extract financial red flags from claim submissions, construct causal narratives linking evidence to fraud conclusions, and quantify potential loss exposure. This skill helps you distinguish between legitimate claim variations and fraud indicators, enabling you to generate investigation summaries defensible in litigation, settlement negotiations, or Special Investigation Unit (SIU) presentations.
by eryet
This skill helps you audit nexus comprehensively by analyzing physical presence rules, economic thresholds, affiliate connections, and marketplace facilitator statutes across all 50 states and relevant localities. You'll document nexus triggers specific to your client's business model—whether they're selling through marketplaces, using drop-shipping, hiring remote employees, or expanding operations. The result is an actionable filing calendar and remediation strategy that minimizes compliance gaps and protects against substantial back-tax assessments, penalties, and interest.
by eryet
You can allocate indirect costs (administration, utilities, depreciation, maintenance) across clinical and non-clinical departments using activity-based costing (ABC) and traditional allocation methodologies. This skill helps you calculate precise allocation rates, model reimbursement scenarios, validate cost driver selections, and document allocation methods for compliance—enabling data-driven decisions on service line profitability, pricing strategies, and payer contract negotiations.
by eryet
You can execute structured compliance audits that map regulatory requirements to operational controls, test control effectiveness with documented evidence, quantify compliance risk exposure, and track remediation progress with clear accountability. The framework produces audit findings in regulatory-acceptable format, transforming ad-hoc reviews into defensible procedures that satisfy internal audit standards (IIA) and regulatory expectations.
by eryet
You can systematically evaluate payment timing decisions across your vendor base by modeling discount capture opportunities against working capital requirements. The skill analyzes vendor payment terms, your cash flow constraints, and strategic vendor priorities to generate prioritized payment schedules that maximize savings while maintaining adequate liquidity and protecting critical supplier relationships.
by eryet