Third-Party & SLA Audit Checklist

Vendor ManagementGovernanceRisk Assessment

Audit third-party arrangements: risk-based due diligence, contracts with data protection and audit rights, measurable and validated SLAs, applied penalties, continuity and exit plans, and dependency oversight.

Download PDF Preview Browse More Resources

What you'll find inside

Onboarding and contract checks: clear ownership, financial, legal, cyber and operational due diligence, contract terms, audit rights and subcontracting
SLA performance checks: measurable service levels, validated reports, applied credits and penalties, root-cause actions and approved changes
Continuity and oversight checks: tested continuity, exit plans, reviewed system access, current certificates and insurance, and dependency risk
Risk prompts on control bypass, one-person control of an outcome and exceptions that have become normal practice
An “evidence to retain” list for your workpapers, plus a Done / Review / N/A status key, with space for auditor notes and testing exceptions
A completion page with six closing checks and a final conclusion, owner and follow-up date

Best for

Internal Auditors
Operational Auditors
Risk Professionals
Compliance Professionals

Resource information

Format:: PDF
Pages:: 6
Price:: Free
Registration:: Not required

Related Internal Audit Resources

TemplateVendor Management

Vendor Due Diligence Review Template

Document vendor due diligence before onboarding: registration and beneficial ownership, conflicts, sanctions and adverse information, PEP and high-risk countries, bank verification, payment terms and risk classification.

PDF • 6 Pages • Free

Download PDF View Resource

ChecklistProcurement

Procurement Audit Checklist

Cover the key procurement controls: supplier due diligence and competitive sourcing, approved requisitions and POs, evidenced receipt, invoice matching, and monitoring for split spend, duplicates and bank changes.

PDF • 6 Pages • Free

Download PDF View Resource

ToolGovernance

Process Ownership & RACI Clarity Tool

Map key activities to Responsible, Accountable, Consulted and Informed roles to expose ownership gaps, conflicting accountability and concentration of duties.

PDF • 6 Pages • Free

Download PDF View Resource

TemplateInternal Controls

Risk & Control Matrix Template

Build a practical risk and control matrix that links each business objective and risk to its control, owner, frequency and evidence, then records the planned test and conclusion.

PDF • 6 Pages • Free

Download PDF View Resource

Continue Learning

BooksPractical books for internal auditors Learning HubCourses you can apply tomorrow Other ResourcesBrowse the full free library