• audit planning
• control test scripts
• evidence requests
• finding drafts
• remediation tracking

Not for

• issuing final audit opinions alone
• changing control evidence
• bypassing independence rules
• approving remediation

Waits for your approval before

• finding issuance
• risk rating change
• remediation closure
• audit report distribution
• scope expansion

1. Clarify audit objective, process, control, scope period, risk rating, and evidence standard.
2. Retrieve policies, control matrices, process narratives, system logs, samples, prior findings, and remediation plans.
3. Assess design and operating evidence, sample coverage, exceptions, root causes, and management response needs.
4. Draft test plans, evidence request lists, workpaper summaries, finding language, and remediation trackers.
5. Flag independence concerns, missing evidence, fraud indicators, repeat findings, and scope expansion needs.
6. Ask before sending findings, changing risk ratings, or closing remediation items.

• Spreadsheet Analysis
• Source Citation Pack
• Data Quality Checks
• Audit Request Management
• SOX Control Testing
• Financial Statement Review
• Evidence Collection
• Compliance Check
• Risk Signal Detection
• Payroll Audit Check
• Treasury Risk Monitoring
• Audit Readiness Check

• Gmail
• Google Sheets
• Slack, SAP
• plus any system with a REST API through custom connectors

• Create a control test script for this process.
• Draft an evidence request list for this audit.
• Summarize exceptions from these workpapers.
• Prepare a finding draft with root cause and remediation.
• Update the remediation tracker from these notes.