Audit
Audit management for banks
From the year’s risk-based audit plan to the closure certificate: risk ratings, the annual plan, concurrent, statutory, RBIA, IS and PACS audits, findings, compliance and branch inspections, on one record.
Risk assessment and rating
Control Risk from the checklist, Business Risk from the core, one rating with its trend.
Checklist marks roll up into a Control Risk band for each area and overall, using bands your bank sets. Business Risk comes from the deposit and advance figures in your Core Banking System. A Risk Audit Matrix combines the two into a risk rating with its trend, and that rating drives how often each unit is audited in the annual plan. Overrides need a second approver.
- 01
Control Risk bands
Checklist marks rolled up per area and overall, against bands the bank sets.
- 02
Business Risk from the core
Deposit and advance figures read from the Core Banking System.
- 03
Risk Audit Matrix
The two combined into a risk rating, with its trend.
- 04
Approved overrides
A changed rating needs a second approver before it counts.
- 05
Drives the plan
The rating sets how often each unit is audited.
Annual audit plan
The year’s plan from risk ratings and your frequency policy.
Generate the year’s audit plan from risk ratings and your frequency policy: which units fall due, and when. Branches and the bank’s other auditable units are planned on the same footing, each with its business figures. Schedule around leave and training, so clashes surface before an audit is staffed, and track man-days as the year runs. A planned audit completes when its audit is released.
- 01
Generated from risk
Units fall due by their risk rating and your frequency policy.
- 02
Every auditable unit
Branches and the bank’s other units, each with its business figures.
- 03
Leave and training
Time away planned around, with clashes caught before staffing.
- 04
Man-days
Time logged by the day and tracked against the plan.
- 05
Plan to release
A planned audit completes when its audit is released.
Audits in one workspace
Concurrent, statutory, RBIA, IS and credit audits, on versioned questionnaires.
Concurrent, statutory, risk-based (RBIA), IS and credit audits, plus audit types your bank defines, such as audits of PACS and other societies, all run in one workspace. Each runs on a versioned questionnaire, frozen once published, so an audit keeps the version it started with. Loan accounts are sampled by bank policy and pulled read-only from the Core Banking System. Answers save as you go, evidence attaches to the question it supports, and every deviation lands in the jotting sheet.
- 01
Your own audit types
Concurrent, statutory, RBIA, IS and credit, plus PACS and society audits.
- 02
Versioned questionnaires
Sections, questions and scoring, frozen once published.
- 03
Sampling by policy
Loan accounts sampled by the bank’s policy for each product.
- 04
Live loan data
The population pulled read-only from the core, checked account by account.
- 05
Evidence in place
Files attached to the question they support, scanned on upload.
- 06
Jotting sheet and annexures
Every deviation in one sheet, and irregular accounts listed, ready as Excel.
Findings and compliance
Each finding a thread between the audit side and the branch, through to a closure certificate.
Each finding is a thread between the audit side and the branch, with its evidence attached. A reply hands it to the other side with a deadline, and only the audit side can close it. Deadlines follow severity, unresolved items carry into the next audit, and compliance moves through review to closure, which ends in a certificate.
- 01
Two-sided threads
The branch replies, the audit side decides; each reply hands the finding over.
- 02
Deadlines by severity
Critical findings get the shortest clock, set by the bank.
- 03
Carried forward
Unresolved items carry into the next audit of the unit.
- 04
Compliance review
Compliance submitted, reviewed and accepted against its deadline.
- 05
Closure certificate
When every finding is settled, the audit closes with a certificate.
Inspections and field work
Monthly branch inspections, spot rectification, leakage and incidents.
Monthly branch inspections open on their own. On site, the team records spot rectification, income leakage and incidents as they find them, each linked to the audit it belongs to. Where the network isn’t there, the audit can be worked offline in an Excel file and uploaded back when the team is connected again.
- 01
Monthly inspections
Branch inspections that open on their own each month.
- 02
Spot rectification
What was put right on the spot, recorded on the spot.
- 03
Income leakage
Lost income recorded on the account, signed once and tracked to recovery.
- 04
Incidents
Serious matters escalated, linked to the findings behind them.
- 05
Offline in Excel
Work the audit offline in its Excel file and upload it back.
Every module in audit
Each module, grouped by the work it serves.
Planning
- Annual Audit PlanThe year’s audits by unit and due date, generated from risk.
- Risk Audit MatrixBusiness Risk and Control Risk combined into each unit’s rating.
- Auditable unitsBranches and the bank’s other units, with their business figures.
- Audit typesConcurrent, statutory, risk-based and PACS audits, each with its checklist.
- AvailabilityWho is away and when, with clashes flagged on assignment.
Fieldwork
- Questionnaire BuilderSections, questions and scoring, versioned and frozen on publish.
- Audit workspaceGeneral and business sections, answered and evidenced in place.
- Core banking connectorRead-only pulls of accounts, transactions, GL and loans, with lineage.
- Jotting sheetEvery deviation in one sheet, ready to download as Excel.
- AnnexuresIrregular accounts, pulled from the core or added by number.
- PACS proformaThe bank’s own proforma for primary societies, rated in Part C.
- Sampling policyHow many accounts to check, set per product.
- EvidenceFiles attached to the question they support, scanned on upload.
- Man-daysTime logged per person per day, corrected with a reason.
Follow-up
- Open IssuesFindings with two sides, a thread, an owner and a deadline.
- IncidentsMatters escalated from the field, linked to their findings.
- Income leakageLost income recorded on an account, signed and recovered.
- ComplianceCompliance reports by deadline, ending in a Closure Certificate.
- Regional inspectionsMonthly branch inspections, carried out by the region.
Book a demo
See it on your bank’s audit calendar.
Each bank signs in to its own on-premise install. Demos are arranged through our sales team, on a structure like yours: your regions, your branches and your audit types.