This methodology toolkit and outline is intended for the single use (i.e. use by one internal audit team) of the client that downloads this from Risk & Assurance Ltd.

The client has a license to use this outline as a foundation for their audit methodology but does not have the authorisation to share this with any third party without the express written permission of Risk & Assurance Insights Ltd.

This outline methodology is intended as a starting point and the purchaser must take any and all necessary steps to determine an appropriate audit methodology that suits their organisation and their circumstances. This includes considering the appropriate ordering of the steps detailed, appropriate templates to be used and whether they should be regarded as mandatory or not.

This specifically includes making any and all modifications to ensure that their audit methodology meets any statutory, regulatory or other guidance of note that should be taken into account.

Where appropriate the client should consider alternative methodologies for other assignment types.

Any amended methodology should acknowledge risk & assurance insights ltd as a source.

Reference to the IIA standards is current to the IIA IPPF, but no warranties are given, express or implied that these references are complete nor that the outline methodology completely accords with the IIA standards.

Purchasers of this methodology should take any and all steps to ensure this methodology is up-‐dated in line with their needs and circumstances and that staff are trained in the intelligent application of the guidance.

Clients should notify info@riskai.co.uk in relation to any notable errors or omissions so that the methodology can be up-­dated.