Skip to content

CS Professional · Internal and Forensic Audit

Internal Audit Engagements and Planning: CS Professional Study Guide

Internal audit engagements and planning covers how an internal auditor accepts an assignment, understands the entity, assesses risk, builds a plan and audit programme, gathers evidence and documents it under the Standards on Internal Audit. In the exam, you apply these steps to a case: state the rule, analyse the facts, conclude.

What this chapter covers

This chapter follows an internal audit assignment from the first step to the working papers. It starts with accepting the engagement and the engagement letter. It then moves to the charter and audit universe, risk-based planning, the engagement plan and audit programme, understanding the entity and its controls, and evidence, sampling and working papers. It ends with the Standards on Internal Audit that govern all of these.

The chapter is the base for Internal Audit, which carries 60 marks in Elective 4.2. Later chapters on execution, reporting and specific areas assume you know how an engagement is set up and planned. Forensic Audit, worth 40 marks, also uses the ideas of evidence, documentation and understanding controls.

Planning has a close parallel in external audit. SA 300 says planning an audit has the same objective whether the audit is initial or recurring, but an initial audit may need expanded planning. SA 610 (Revised) deals with how the external auditor uses the work of internal auditors. Reading both sides helps you answer case questions on coordination and reliance.

The paper is written and case-based, and you must show provision, analysis of facts and conclusion. Planning questions suit this format well. A scenario gives you an entity, a risk or a client request, and you must say what the auditor should do and why. Because the elective is open book, you will not be tested on recall alone. Marks go to applying the right step in the right order, drafting a clear engagement letter or programme, and linking your answer to the standards. A student who understands the logic of this chapter can answer questions in later chapters more easily.

Internal Audit Engagements and Planning: topics in the order to study them

  1. 1Internal Audit Charter and Audit UniverseStart with the authority and scope of the function, because every engagement and plan sits inside them.
  2. 2Internal Audit Engagement Letter and AcceptanceNext, learn how a single assignment is accepted and its terms recorded, which follows from the charter.
  3. 3Risk-Based Internal Audit PlanningThen see how the audit universe is ranked by risk to decide which engagements are done and when.
  4. 4Understanding the Entity and Internal ControlsYou need this knowledge before you can plan an individual engagement in detail.
  5. 5Engagement Planning and Audit ProgrammeWith risk and control understanding in hand, you can turn them into scope, resources, timing and procedures.
  6. 6Audit Evidence, Sampling and Working PapersOnce the programme is set, learn how procedures produce evidence and how you record it.
  7. 7Standards on Internal Audit Governing EngagementsFinish by tying every step back to the standards, which you can then cite in answers.

How to prepare Internal Audit Engagements and Planning

Prepare this chapter as one connected process, not seven separate notes. Use the order above and keep one running example, such as a manufacturing company's purchase cycle.

  1. Read each topic once and write a one-line purpose for it, such as why the engagement letter exists or why risk drives the plan.
  2. Draw a single flow from charter to audit universe to risk ranking to engagement plan to programme to evidence to working papers. Redraw it from memory until you can do it without looking.
  3. For each stage, list what the auditor decides, what is documented and which standard applies. Keep this as a short table in your own notes.
  4. Read the SA 300 and SA 610 (Revised) extracts for the external audit view. Note ideas such as expanded planning in initial audits, changing the plan when new information arrives, and using less of the internal audit work when risk or judgment is high.
  5. Practise short case answers in the format of provision, analysis and conclusion. Draft a sample engagement letter and a small audit programme with objectives, procedures and sample sizes.
  6. Mark the paragraphs of the standards in your open book so you can find them quickly, but write your answers in your own words.
  7. Revise by redoing one case question from each topic without notes, then check what you missed.

Common mistakes in Internal Audit Engagements and Planning

  • Treating the charter, the engagement letter and the plan as the same document.

    Fix: Remember the level of each: the charter covers the whole function, the letter covers one engagement, and the plan covers how that engagement will be done.

  • Planning by habit instead of by risk.

    Fix: In every answer, link the chosen areas and procedures to an identified risk from the facts given.

  • Jumping to testing before understanding the entity and its controls.

    Fix: State first what you must learn about the entity, its processes and controls, then say how it shapes the tests.

  • Confusing the internal auditor's role with the external auditor's under SA 610 (Revised).

    Fix: Remember that the external auditor makes all significant judgments and cannot hand them to the internal audit function. Internal auditors are not independent of the entity.

  • Giving a generic answer without applying the facts.

    Fix: Use a three-part structure: the rule, the facts that matter, and a clear conclusion with the action to take.

  • Neglecting documentation.

    Fix: End each answer with what is documented and who reviewed it, since working papers are the proof of the work.

Last-day revision: Internal Audit Engagements and Planning

  • The charter sets the purpose, authority and responsibility of the internal audit function.
  • The audit universe is the full set of auditable areas, which is then ranked by risk.
  • Risk-based planning directs effort to the areas with higher risk first.
  • The engagement letter records scope, responsibilities, access and reporting for one assignment.
  • Plan the engagement before fieldwork: objectives, scope, team, timing and programme.
  • Understanding the entity and its controls comes before you decide the nature and extent of tests.
  • The audit programme turns objectives and risks into specific procedures.
  • Evidence must be sufficient and appropriate, and working papers must support every conclusion.
  • Sampling is a way to test part of a population, and the sample must suit the objective and risk.
  • SA 300: initial audits may need expanded planning, including communication with the predecessor auditor.
  • SA 300: change the strategy and plan when new evidence differs significantly from what you expected.
  • SA 610 (Revised): the external auditor uses less internal audit work when judgment is high, risk is higher, or objectivity or competence is weaker.

Internal Audit Engagements and Planning practice questions

Internal Audit Engagements and Planning in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Internal Audit Engagements and Planning: frequently asked questions

How much of Elective 4.2 does this chapter cover?

Elective 4.2 has Internal Audit for 60 marks and Forensic Audit for 40 marks. This chapter sits in the Internal Audit part and underpins many later questions. Check the current ICSI syllabus for exact chapter distribution.

Is Elective 4.2 an open book paper?

Yes, elective papers are open book. You still need to know where things are and how to apply them, because the questions are case-based and need your own analysis.

Do I need to read the SA 300 and SA 610 text for this chapter?

It helps. SA 300 shows how planning works in an audit, including initial engagements. SA 610 (Revised) shows how an external auditor judges and uses internal audit work. Both sharpen your answers on planning and reliance.

What is the best way to practise this chapter?

Write short case answers in the provision, analysis and conclusion format. Also draft a sample engagement letter and an audit programme, because drafting is part of the practical focus of the paper.