Run internal audits
Run your own internal audits in Asiri: scope, fieldwork, findings and corrective action.
Platform / Audits & reporting
From audit plan to signed report.
Test a sample, record every exception and carry each finding into a report your reviewer can sign. Export it as PDF or Word when it’s done. Asiri does not issue a certification or sign a professional opinion.
Report · Unsigned draftAccess control audit, Q3 2026
- Tomi AdeyemiPrepared
- Ada OkaforReviewed
- Halima SaniSignatoryWaiting
Work through findings
Record exceptions, agree corrective action and retain the review and verification decisions.
Prepare the report together
Your DPCO or DPO runs their audit in the same workspace: evidence requests, a working file, an audit report you edit in Asiri, then review, signing and Word or PDF export.
Plan → test → review → report
Keep the work behind the report.
An audit needs more than a finished document. Bring the scope, tests, evidence and findings into the same working context as the report your team reviews.
- 01
Agree the audit plan
Define the purpose, scope, ownership and timing. Connect the relevant programme so the team knows which requirements the audit examines.
- 02
Record tests and results
Keep the evidence and recorded test results together. Where the work identifies an exception, document the finding rather than smoothing it into a favourable summary.
- 03
Review findings and action
Agree corrective work, responsible people and the review or verification decisions. Keep preparation and independent review responsibilities clear.
- 04
Edit, review and deliver
Bring the work into the A4 report editor. Discuss changes with the team, follow review and signing steps, then export through the PDF and Word controls.
See the work take shape
The policy says six years. Finance keeps everything.
A fictional internal audit compares Koru Commerce’s retention schedule with what Finance actually stores.
Fictional company example
- Evidence examined
- Retention schedule v3 and a listing of the Finance file share
- Finding
- Invoices from 2014 still held, past the six-year period
- Management response
- Accepted: a quarterly deletion run from January
- Action owner
- Finance programme lead, due 15 Dec
Human review
Ada Okafor checks the listing against the schedule, tightens the finding’s wording and sends the report to Halima Sani to sign.
The finding, the response and the evidence reach the signed report together.
Clear responsibilities
Who does what in an audit.
The company coordinates, a preparation team does the testing, and a separate reviewer signs off.
Company coordinator
Gathers context, connects responsible teams and follows up evidence requests.
Preparation team
Records the tests, results and findings used to assemble the working report.
Reviewer
Examines the work, challenges the conclusions and follows the appropriate approval and signing responsibilities.
What you take forward
An editable report, backed by the work.
Keep collaboration and review in the report workflow before taking the deliverable outside the workspace.
- Audit scope, tests and recorded results
- Findings and corrective-action context
- A4 report editing and team discussion
- PDF and editable Word exports
Before you start
What audit teams ask.
Is every audit an NDPA annual return?
No. Internal audits can address your programme and company requirements. The NDPA return is a specialised workflow with its own scope and professional responsibilities.
Can we edit the report before exporting?
Yes. Use the visual A4 report editor and team discussion to work through changes, then follow the report review and signing steps. Export PDF and Word copies using the report controls.
Does Asiri provide an independent opinion?
Asiri organises the work. The responsible professional or reviewer retains judgement and authority. The software does not issue certification or sign an independent professional opinion.
Run your next audit inside the records.
Internal audit and independent professional assurance have different responsibilities. Asiri does not issue a certification or sign a professional opinion. The NDPA return is a specialised workflow, not a requirement for every audit.