Audit Scope Builder Tool

Audit requests often arrive as a single line such as "audit procurement". This tool converts that request into a clear scope by linking objectives, risks, processes, locations, systems and exclusions. It is deliberately short, designed to be completed in a planning meeting and attached to the planning file.

Use it before the scope is agreed with management. The core inputs are the business objective or process purpose, the top risks that could prevent it, the processes to include, locations, legal entities or channels, systems and data sources, the time period, key exclusions and why, and primary stakeholders. A scoring matrix rates each item from 0 to 2 on risk relevance, control dependency, recent change, data availability and management concern, with space to record judgment notes. A working sheet captures the final entries.

The worked example scopes a travel expenses audit: the objective is to assess whether travel spending is authorized, reasonable, policy-compliant and accurately reimbursed; agency bookings, employee claims, hotel and taxi spend, approvals, corporate cards and high-risk exceptions are included; relocation benefits and expatriate housing are excluded. Update the tool when new evidence changes the risk or conclusion.