68 controls (46 key) for 12 objectives and 19 risks, each with walkthrough questions, evidence to ask for and test steps.
Risk Control Matrix · editable Excel · 3 sheets · ₹149 / $1.49 · lifetime access, up to 5 downloads

This matrix covers capital projects and capital expenditure from proposal to completion: policies, project risk and feasibility, segregation of duties, budgets and return on investment, buy-versus-lease decisions, tendering and award of contracts, contract terms and guarantees, project insurance, owner-supplied materials, imported plant and machinery, receipt and inspection, stock and reconciliation of site materials, trial runs and installation, capitalisation and the fixed asset register, statutory approvals, project scrap, bill certification and payment, final settlement, project MIS, and disposal of assets. For every control you see what good looks like, whether it is preventive or detective, manual or automated, how often it runs and whether it is a key control, plus the walkthrough questions, evidence to request and steps to test it. Record what you find, the control owner and any gap in the same sheet: the Summary sheet counts effective, partly effective and ineffective controls by objective as you go. Written so that an auditor new to the process can use it, and detailed enough for experienced reviewers. Editable Excel.
Topics: Capital Projects · Procurement
Short internal audit videos · Free articles and guides · YouTube
Learn Internal Audit is run by SKYBOT Technology LLP. The founders, Amit Salla and Zehra Maccawala, are partners at ZMAS and Associates, a Chartered Accountancy firm specialising in internal audit.