Overview
Overview
Internal audit gives management and the board an independent view of whether processes are working as intended and risks are managed.
We design a risk-based plan, test key processes and report observations with practical, prioritised recommendations.
Who this is for
- Mid-sized and growing companies
- Companies required to appoint an internal auditor
- Businesses expanding to new locations
Scope of work
The precise scope is confirmed in writing for each engagement. It typically includes:
- Risk assessment and annual internal audit plan
- Process reviews — procure-to-pay, order-to-cash, payroll, inventory
- Compliance testing
- Reports with management responses
- Follow-up on implementation
Documents usually required
- 01Organisation chart and process documentation
- 02Policies and delegation of authority
- 03Access to ERP and transaction data
We share a checklist specific to your case. Please do not send identity or financial documents by email — existing clients can upload them securely through the client portal.
How we work
- 1
Engagement acceptance
Independence checks, engagement letter and agreement on scope, timelines and reporting.
- 2
Planning & risk assessment
Understanding the entity, its controls and the areas that need the most attention.
- 3
Fieldwork
Testing of transactions, balances and controls, on-site or remotely, with regular status updates.
- 4
Discussion of findings
Observations are discussed with management before the report is finalised.
- 5
Reporting
Issue of the report in the applicable format, along with a management letter where relevant.
Frequently asked questions
How is internal audit different from statutory audit?
Statutory audit expresses an opinion on financial statements; internal audit evaluates processes and controls for management.
Last updated 11 Oct 2026. This page is general information, not professional advice. Applicability depends on your facts and the law in force; we do not guarantee any particular outcome, saving, registration or approval.