Internal Audit Plan and Report Generator

Problem Addressed

Internal audit projects often stall after scope is set: audit plans, risk matrices, workpapers, and findings reports need to be rebuilt repeatedly. This skill targets financial, operational, compliance, and fraud-investigation audit scenarios. It structures audit preparation into a reusable workflow: confirm audit type, scope, objective, and available materials, then generate an audit plan, risk assessment matrix, audit procedures, workpaper templates, and an audit findings report under Chinese internal audit standards. For U.S.-listed, H-share, or IFRS-reporting needs, it can add SOX 404, IFRS, and HKFRS focus areas.

How It Works

The main flow is “plan → procedure → evidence → finding → report.” It maps inherent and control risk signals across common high-risk areas such as revenue recognition, procurement-to-pay, expense reimbursement, inventory, related-party transactions, and treasury. For fraud investigations, it considers pressure, opportunity, and rationalization signals, and uses Benford's law, duplicate-transaction checks, and abnormal amount or timing detection to flag anomalies. Workpaper support includes sampling guidance, control testing, walk-through testing, COSO five-component evaluation, and SOX defect classification: material weakness, significant deficiency, and deficiency.

Boundaries

It produces audit frameworks, procedures, and report drafts, not audit conclusions. Risk ratings, remediation recommendations, and SOX defect classifications require audit management review against complete evidence. If policies, financial data, or business context are missing, output remains a generic template. Statements involving inference and verified facts must be kept separate, and the management response field must not be omitted.