Internal Audit

Run the audit year with agents at your side.

From a risk-based plan to the committee report, agents draft the work and your auditors review, test and sign.

Request a demo →

Audit plan FY2027

OverviewDetailedMethodology

AUDITDEPARTMENTRISKQUARTER

ProcurementFinanceHIGHQ1

Access managementITHIGHQ1

PayrollHRMEDIUMQ2

Vendor onboardingProcurementMEDIUMQ3

✦ AgentProcurement moved to Q1Two high findings last year and a new payments system.

What changes

Less chasing. More judgement.

Plan from risk

A multi-year plan ranked from your control universe and prior findings.

Test in hours

Agents draft the matrix, request evidence and fill test steps for review.

Report from the record

Observations in the five C’s, signed by preparer, reviewer and approver.

Features

Every stage of the engagement, on one record

Procurement · RCM

ScopeRCMProcess

RISKCONTROLTEST

Approval above authorityCFO approves over SAR 200kRe-perform 25

Bank details changedCall-back before changeInspect call-back log

Split ordersDuplicate PO checkRun the ERP query

✦ Agent3 controls draftedFrom Procurement Policy §4, each with its test. Yours to accept.

AcceptReview

In line with the IIA standards

Five C’s in. A report the committee can act on.

Every observation is written the IIA way, in your own report template, and the agent shows where each part came from.

CCriteria
CCondition
CCause
CConsequence
CCorrective action

Procurement audit · ReportDrafting…

Cover
Contents
Executive Summary
Objective
Scope of the Audit
Methodology
Background
Assessment Overview
Observation Overview
Detailed Observations
Distribution and Acknowledgements

OVERSIGHTInternal Audit Report · Procurement · FY2026

4. Detailed Observations

Observation 2 · ProcurementPayments approved without the CFO

HighIn Progress

BackgroundCCriteria

“Payments above SAR 200,000 require approval by the Chief Financial Officer.” Procurement Policy §4.2

Observation SummaryCCondition

1. Approval above authority. 3 of 25 sampled payments were approved by the Procurement Director alone.

Root-CauseCCause

The ERP approval route was not updated after the 2026 policy change.

RiskCConsequence

Large payments can leave without the approval the board set.

Recommendations · Action PlanCCorrective action

Action	Target date	Status
Update the ERP approval route; re-review Q3 payments	30 Nov 2026	In Progress

Confidential · Page 14 of 22Drafted · ready for review

Use cases

Everything internal audit needs, in one place.

Risk-based audit planA three-year plan ranked from your universe.

Process understandingWalkthroughs drafted from policies and interviews.

Risk and control matrixRisks, controls and test steps for each process.

Evidence requestsOne portal for owners, tracked per test step.

Work papersTests, samples and conclusions with full provenance.

ObservationsWritten in the IIA five C’s from the evidence.

Audit reportYour format, with preparer, reviewer and approver.

Follow-upOwners reminded; overdue actions escalate.

Quality and independenceSign-offs and QA reviews in line with the IIA standards.

Questions

Asked by internal audit teams.

Does the AI decide the audit result?

No. Agents draft and suggest. Your auditors accept, change or reject every step, and each change is logged.

Can we use our own methodology?

Yes. Risk ratings, report format and sign-off rules are set to your methodology.

Where is our audit data processed?

In Saudi Arabia. Data is stored and processed by AI in the Kingdom.

On the same record

GovernancePolicies, approvals and committee packs in one controlled library.→RiskEvery risk against appetite, with the controls and evidence behind it.→ComplianceEach regulation broken into clauses and mapped to your controls.→BCMCritical processes, vendors and continuity plans, tested and current.→

Request a demo

See it run on your scope.

Bring a real engagement or your annual plan. Thirty minutes on your material, and a reply within one working day.