Model
Vendor Management Capability Maturity Model (CMM)
This capability maturity model can be used to measure the maturity of an organization’s vendor management process and to assist its progress from the initial/ad-hoc state toward the optimized state.
Updated Work Program
Fixed Asset Accounting Review Audit Work Program
This audit program reviews the adequacy and efficiency of current capital asset management policies and procedures as they relate to asset procurement, tracking and monitoring, recording and reporting, disposal of assets, and depreciation.
Updated Audit Report
Corporate Treasury Review Audit Report
This sample internal audit report illustrates treasury review objectives, scope and procedures performed. It includes a sample of treasury review observations and management implementation plans that address these issues.
Updated Questionnaires
Financial Close Process Questionnaire: Generate Financial Statements and Disclosures
This questionnaire focuses on the financial close process, specifically generating financial statements and related disclosures.
Entity-Level Control Environment Questionnaire
This questionnaire template provides a number of COSO elements and the related control objectives for entity-level controls. Within the questionnaire, you can document whether the control exists, whether it was designed properly, related test procedures, and management's action plan for deficiencies.
IT Capacity and Scalability Risk Questionnaire
This questionnaire outlines business risks and leading practices for both capacity and scalability in the IT business environment.
Enterprise Risk Assessment Process Questionnaire
This questionnaire addresses key issues that boards and management should consider as they evaluate their confidence in the organization’s enterprise risk assessment process.
Updated Request for Proposal
Request for Proposal: Establishing an Internal Audit Function
This sample request for proposal (RFP) is used to solicit services to establish an internal audit function. It discusses the standard information providers should include in their proposals.
Article
Managing Risk in an Agile Organization
This article shares Protiviti’s perspective and philosophy on establishing leading practices for ensuring that risk management is designed appropriately to keep pace with agile organizations.