Internal Audit Evidence Documentation & Control Testing Framework
Systematize audit evidence collection, control testing, and exception documentation for compliance
What You Can Do
You can systematically collect and validate audit evidence, document control testing procedures with clear linkages to audit objectives, and classify exceptions by risk level with root cause analysis. This skill ensures your audit work papers meet regulatory standards, create defensible audit trails, and consolidate findings across business units for management and external audit coordination.
Features
capture source, date, custodian, and validation status for each audit evidence item
link procedures to audit objectives, document sample size/methodology, and record test results with statistical extrapolation
categorize deviations by risk level (critical, high, medium, low) with impact assessment and root cause tracking
create structured schedules linking testing procedures to findings and recommendations
record control deviations with business justification and alternative control effectiveness assessment
organize evidence for SOX, COSO, regulatory investigations, and external audit coordination
consolidate findings across multiple business units with trend analysis and remediation tracking
Example Output
Example 1: Revenue Cycle Control Testing
Control Tested: Invoice authorization and approval Audit Objective: Ensure all revenue transactions are properly authorized and recorded Sample Size: 45 invoices from Q3 transactions Test Results: 44 invoices properly authorized, 1 exception (invoice #4521 approved after posting) Exception Classification: Medium risk — procedural deviation with compensating downstream review Root Cause: System override during period-end processing Recommendation: Enhance workflow alerts for post-dated approvals
Example 2: Payroll Cycle Exception Log
| Transaction Date | Employee ID | Exception Type | Amount | Risk Level | Root Cause | Status |
|---|---|---|---|---|---|---|
| 2024-01-15 | EMP-2847 | Unapproved overtime | $450 | High | Manager approval delay | Remediated |
| 2024-01-18 | EMP-3102 | Manual journal entry | $1,200 | Critical | Rate calculation error | Under Investigation |
| 2024-01-22 | EMP-1954 | Duplicate payment | $2,100 | Critical | System processing error | Recovered |
Summary: 3 exceptions tested, 2 compensating controls identified, 1 requiring immediate remediation
What's Included
- SKILL.md: complete internal audit evidence documentation framework and control testing procedures
- Evidence Collection Checklist: standardized template for capturing audit evidence with source validation and custodian tracking
- Control Testing Documentation Template: work paper structure linking procedures to audit objectives with sample size and test result recording
- Exception Classification Matrix: risk-level framework (critical/high/medium/low) with impact assessment and root cause analysis
- Audit Trail Compliance Worksheet: SOX, COSO, and regulatory requirement mapping for evidence organization
Who It's For
- Internal Auditors — conducting control testing and documenting evidence for financial and operational audits
- Compliance Officers — maintaining audit trails and exception documentation for regulatory compliance programs
- Finance Managers — supporting internal audit processes and coordinating control testing activities
- External Audit Liaisons — organizing evidence packages and coordinating audit file preparation with external auditors
- Risk and Assurance Teams — consolidating audit findings and tracking control remediation across business units
Best For
- Financial control testing — revenue, expenditure, payroll, fixed asset, and cash management cycle documentation
- Exception tracking and classification — organizing and categorizing control deviations by risk level and root cause
- Audit work paper preparation — creating structured schedules that link testing procedures to findings and recommendations
- Compliance investigation support — building defensible audit trails for SOX, COSO, and regulatory reviews
- Cross-functional audit consolidation — summarizing findings across multiple business units for management reporting
You might also like
You receive a comprehensive framework for evaluating diversified passive income streams, assessing client risk profiles, and recommending portfolio structures that maximize income while maintaining alignment with financial objectives. The skill analyzes income sources (real estate, dividends, bonds, peer lending, digital assets), models cash flow projections, evaluates tax efficiency, and provides data-driven strategy recommendations ranked by performance potential.
by eryet
You can systematically evaluate payment timing decisions across your vendor base by modeling discount capture opportunities against working capital requirements. The skill analyzes vendor payment terms, your cash flow constraints, and strategic vendor priorities to generate prioritized payment schedules that maximize savings while maintaining adequate liquidity and protecting critical supplier relationships.
by eryet
Create comprehensive, personalized wealth strategies that align client assets, goals, and risk tolerance. You can assess complex financial situations, generate multi-faceted investment and tax strategies, and produce professional recommendations that incorporate goal timelines, asset allocation frameworks, and tax efficiency considerations. The skill helps you move beyond generic advice to deliver actionable, client-specific wealth plans backed by structured analysis.
by eryet
You can generate professionally formatted SVG color palettes by providing a theme name, source URL, or specific hex codes. Claude researches color standards, extracts values from web sources, and organizes 4-7 swatches from dark to light with an anchor brand color at center. Each swatch includes click-to-copy hex codes and hover effects for easy reference.
by eryet
You can trace financial transactions across multiple accounts and entities, document complete chain-of-custody for audit evidence, identify fraud indicators and anomaly patterns, and construct defensible audit conclusions that satisfy both forensic rigor and legal admissibility requirements. This skill provides structured protocols for adversarial skepticism, hostile cross-examination preparation, and quantification of losses or damages with transparent methodologies.
by eryet
You can rapidly analyze invoice exceptions—including three-way match failures, discrepancies, duplicates, policy violations, and tax code errors—and automatically assign severity levels (critical, high, medium, low) based on financial impact and risk. Claude then generates targeted remediation instructions and routes each exception to the appropriate resolver (AP clerk, manager, tax team, or procurement), complete with audit trails for compliance and first-touch resolution tracking.
by eryet
You can upload aging data from your accounting system and Claude will systematically categorize invoices by delinquency bucket, identify high-risk accounts with payment pattern analysis, explain why balances are aging, and generate prioritized collection strategies with account-specific context. This transforms static aging reports into actionable recovery plans that help you understand portfolio health and accelerate cash flow.
by eryet
You can systematically classify and track expenses against specific restricted grants and donations, reconcile fund balances with compliance verification, and generate accurate financial statements that separate restricted and unrestricted funds. This skill prevents audit failures, donor relation damage, and grant non-compliance penalties by ensuring every restricted fund expense is properly documented, allowable under grant terms, and traceable to donor/grantor requirements.
by eryet