internal-audit-basics
Apply internal audit thinking — risk-based scoping, testing, and reporting — to improve controls and process reliability. Use when building internal audit functions, performing control reviews, or responding to assurance needs.
- License 许可
- MIT
- 最近更新
- 2026-07-22
- Stars
- ★ 7
- Forks
- 1
01 前言 Front Matter
- name
- internal-audit-basics
- description
- Apply internal audit thinking — risk-based scoping, testing, and reporting — to improve controls and process reliability. Use when building internal audit functions, performing control reviews, or responding to assurance needs.
03 SKILL.md 正文
Internal Audit Basics
Overview
Internal audit provides independent assurance that controls and processes work as intended. Even lean teams benefit from risk-based review discipline.
When to Use
- Establishing or scoping internal audit
- Reviewing high-risk processes (payments, revenue, access)
- Following up on external audit findings
- Assurance for the board/audit committee
Core Practices
- Start from risk, not from a generic checklist
- Define scope, criteria, and evidence standards
- Test design and operating effectiveness
- Report findings with severity and actionable remediation
- Track remediation to closure
Principles
- Independence and objectivity are the product
- Findings without remediation ownership are incomplete
- Partner with the business; don’t only police
- Focus on what could actually hurt the company
Verification
- [ ] Reviews are risk-prioritized
- [ ] Findings have owners and due dates
- [ ] Follow-up verifies closure, not only promises
04 同仓库更多 Skills
compliance-monitoring
Design compliance monitoring and testing programs that verify controls work in practice and surface issues before regulators do. Use when building monitoring plans, compliance testing, or continuous control monitoring.
complaints-handling
Operate complaints-handling processes that meet regulatory standards — logging, timely resolution, root-cause analysis, and fair outcomes. Use when designing or improving regulated complaints frameworks or analyzing complaint themes for conduct risk.
aml-kyc-basics
Apply AML/KYC fundamentals — customer due diligence, monitoring, suspicious activity escalation, and recordkeeping — for financial crime compliance. Use when designing onboarding controls, transaction monitoring concepts, or AML program components in financial services.
ai-model-compliance
Apply compliance controls to AI and automated decision systems — transparency, fairness, human oversight, documentation, and regulatory alignment. Use when deploying AI in regulated processes (credit, fraud, customer decisions) or responding to AI governance expectations.
data-quality-management
Manage data quality end-to-end — dimensions, rules, remediation, and prevention — beyond one-off cleaning scripts. Use when building sustained data quality programs or fixing systemic accuracy, completeness, or consistency problems.
data-lineage
Capture and use data lineage — where data comes from, how it transforms, and what depends on it — for impact analysis, debugging, and trust. Use when tracing metric origins, assessing change impact, or diagnosing broken pipelines.