Identifying Key Business Cycles
Locate all vital business cycles such as Procure-to-Pay, Order-to-Cash, Payroll, Inventory, Fixed Assets, and Financial Reporting.
Risk Assessment & Risk-Control Matrix
Auditors perform risk assessment and prepare a Risk-Control Matrix linking each risk with the control addressing it, specifying the responsible person, frequency, and evidence.
Control Verification & Testing
The design and implementation of controls are verified via walkthroughs, followed by actual control testing using sample transactions.
Documenting Findings & Remediation
Document findings, exceptions, and remediation plans. Follow-up retesting is performed on failed controls.
IFC Report
A formal IFC report is prepared for statutory auditors and the Board, communicating the effectiveness level of internal controls.