Internal Audit Report

About this template

When to use it

A one-page form for taking the result of an internal or self-audit up to the audit committee or management. What has to survive in an audit report is less what you found than what evidence you found it on, and who does what by when. That is why the three items run scope and method, then findings and basis, then required actions.

What is in the file

• The label “Internal audit results” above the title, then one gray line: “Complete it in order, from Audit scope and method through the Overall opinion.”
• A four-cell header table — Audit period · Audit subject · Audit team · Report No. — with 2026-02-02 ~ 2026-02-27, “Purchasing and contracting (Materials Purchasing Team)”, “Audit Office, 3 people” and AUD-2026-002.
• Three numbered items: 1. Audit scope and method / 2. Findings and their basis / 3. Required actions and deadlines.
• A Key metrics table: Check item 18 · Findings 5 · Amount in findings KRW 12,400,000 · Action due 2026-05-29.
• A Confirmation and approval table with three boxes — Auditor, Head of Audit, Audit Committee.

Filling order

1. Write the Audit subject as an activity, not a department. That is why the sample reads “Purchasing and contracting (Materials Purchasing Team)”. A department name alone claims you examined everything that department does.
2. 1. Audit scope and method — the period, the sampling basis and sample size, and which procedures you actually used. Without the sample size, nobody can tell whether five findings is a lot or a little.
3. 2. Findings and their basis — one per line, naming the rule breached and how many times it happened. Where there is a money impact, show the calculation so it is not redone later.
4. 3. Required actions and deadlines — three things, all mandatory: whether the action is a correction, a caution or an improvement; which department owns it; and by when.
5. Replace the four Key metrics cells. Amount in findings has to equal the sum of the calculations in item 2.
6. The approval table goes Auditor, then Head of Audit, then Audit Committee. It is not a signature block for the audited department.

How to write a finding

• Keep fact and judgment apart. State the fact established first, then which rule it breaches.
• Record the voucher numbers relied on and where they are kept. When someone disputes the finding months later, nothing has to be hunted down again.
• Ask the audited department for its response and carry it in the same report. Flagging the items where the facts are genuinely disputed is what protects the report’s credibility.
• A finding about a broken process and a finding about one person’s mistake need different remedies. Separate them in item 3.

What changes with the type of audit

• A financial audit turns on amounts and vouchers, so the calculations in item 2 grow. An operational audit turns on rule compliance, so the citations grow. A special audit lives or dies on a narrow scope statement.
• This form is for internal audit. An external financial audit report follows the auditor’s own prescribed format and cannot be replaced by this file.
• Notify the audited department of the scope and period before fieldwork starts, and record the notification date in item 1.

Making the actions stick

Write one required action per sentence. Drop any of what, who or by when, and nobody can verify whether it happened. Set a separate date on which you check after the deadline has passed, and revisit the outcome in item 1 of the next report. That is the difference between Action due 2026-05-29 and a finding that reappears next year.

Common mistakes

• Plenty of findings and no deadlines. Without a date the same finding comes back at the next audit.
• Presenting a sample result as though it covered everything. Putting the sample size in the scope item prevents the misreading.
• Estimating the money impact. An amount with no calculation behind it is the first thing to collapse in the meeting.
• Leaving the follow-up date blank. The action deadline and the re-check date are two different days.