All Resources Data

Paid Resources

Is your Internal Audit World-Class? (eBook)

How do you assess the effectiveness of your internal audit function? How do you know whether it is world-class?

Norman Marks, a retired Chief Audit Executive, thought leader, and author, tackles this question in a short book that focuses on two tools that he highly recommends.


Read More →

World-Class Internal Audit (eBook)

This book is about the professional experiences that shaped Norman and led him to be acknowledged by audit committees, company executives, and his peers as the leader of world-class internal audit teams. 


Read More →

Making Business Sense of Technology Risk (eBook)

If you look at any survey of the top risks facing organizations, you will find technology-related risks (such as cyber and disruptive technologies) among those cited as being of greatest concern. In this eBook, Norman discusses ways to consider how the possibility of technology failures (and opportunities) should affect decision-making, both strategic and tactical.


Read More →

Risk Management in Plain English (eBook)

Why is risk management so often a review of what might go wrong? Norman Marks suggests that this ‘doom management’ approach should be replaced with ‘success management’.


Read More →

Open Resources Requests

audit programme

Hi,my name is Harun and iam an internal auditor working for government of Kenya.i request on assistance in carrying out water projects audits.The agency am working for deals with water and sanitations and they carry out construction of water dams and boreholes.
i would like to do audits on implemented projects both completed and ongoing looking forward for your assistance.
i watch videos from Dr Amanda and truly i have gained an insight of what an audit is in terms of practical application.
i can be reached through

Read More →


Mejores Practicas para la revisión de Proveedores

Read More →

Basic auditing training – the role and function of auditors

Im looking to train auditors in the Debt Review environment. Im looking fir material that would assist with the functions of auditing and thd role auditors play in a financial company. What is auditing? Why is it important to have an auditing department in a corporate environment. The various functions of an auditor. Thank you for the assistance

Read More →

CIA exam practice question

I need for the time being exam practice question and some internal practice guide also any material which help me to be certified because i am not certified yet .thank you

Read More →

Shared Resources

Risk Mitigation Strategy Monitoring

Reposting this on behalf of our community member Jen who kindly shared this document with everyone. This document provided comprehensive risk mitigation strategy monitoring. The template is designed by specifically for a NGO project.

Read More→

Agile Auditing FAQ Document

This document was prepared by Karl Sousa and EJ Manalang as part of the Agile Auditing virtual event they led here on Auditopia on August 3, 2021. It lists some FAQ on the topic and answers to questions from community members that we didn’t get to address in the event.

Read More→

SAP SOD on P2P Process Document Flow

This worksheet shared by Claire Worledge was used in the virtual event “Segregation of Duties Audits in SAP”, where we did hands-on practical exercises to check for Separation Of Duties issues in the Purchase To Pay document flow in SAP systems. When we check for SOD issues in a document flow, we not only look at risks relating to who has access to what; but we look at who has actually done what during the period. But even more than that, when we look at a document flow, we can see risks relating to specific documents in terms of user access. For example, I create a purchase order, and then I create a goods receipt for that purchase order and then I create an invoice for that goods receipt, and even the payment for the invoice. When we identify such cases, we are identifying risks that are much more “real” than only looking at who has a separation of duties conflict based on their access.

Read More→

Excel Model to Compute Who Has Violated User Access In SAP

This spreadsheet shared by Claire Worledge was used as the first practical exercise in the virtual event on Thursday July 22nd, 2021 “Segregation of Duties Audit in SAP”. In this spreadsheet we see the methodology followed in order to check who has violated user access, based on the general ledger header table. Normally, this process would be done in a data mining tool (ACL, IDEA, SQL, Alteryx, QLIK), however, here we show it in Excel, for the purpose of understanding the process and to help those of you that don’t have access to any of the above tools.

Read More→

Closed Resource Requests

Process Mining

Kindly share with me the material for “How Internal Audit Can Leverage Process Mining” presentation.

Read More →

Responding to external auditors

External auditors approached me to assess whether they can rely in the work performed by internal audit

Read More →

Planning an engagement

In need of a template of planning engagement document to understand more

Read More →

Audit Tracker

Hello- Looking for a template to track outstanding audit findings

Read More →


Auditopia is a learning and collaboration platform for internal auditors. We tap into our collective knowledge by sharing resources and engaging in virtual community events and collaboration groups. We also offer access to a growing catalog of recorded events and cutting-edge gamified trainings.

Create Free Account
[ultimatemember form_id="117"]

Contact us