# Internal Audit Software > Swiss GRC offers internal audit software on the SwissGRC® Platform. Internal audit teams plan, run and follow up audits in one system, from the audit universe to the closed action. - URL: https://swissgrc.com/en/internal-audit-software/ - Publisher: SwissGRC® - Published: 2025-08-20 - Last updated: 2026-10-07 ## Key facts - The SwissGRC® Platform holds the audit universe, planning, workpapers, findings and actions in one system, so the current audit status can be queried at any time. - The annual audit plan is derived from the risk of each auditable entity, and the inventory shows risk rating, audit frequency and the date of the last audit. - Control tests, checklists and evidence are held on the engagement, and the audit process is modelled with roles, reviews and approvals, from the audit director to the auditee. - A dashboard shows audit status, findings by status and severity, and the state of management actions, and draft and final audit reports are available as ready analyses. - Findings are rated and turned into actions with an owner and a due date, and overdue items stand out. - The Global Internal Audit Standards require in Principle 15 that results are communicated and action plans monitored. The page is built on the Global Internal Audit Standards, IPPF and ISO 19011. Internal Audit # Your audit plan covers a lot. But the right things? Plan, run and follow up internal audits. **From the audit universe to the closed action**, in one system. [Request Demo](https://swissgrc.com/en/internal-audit-software/#contact) [Explore features](https://swissgrc.com/en/internal-audit-software/#features) Trusted by leading organizations What makes the difference ## From the audit report to evidenced impact Auditing is the easy part. What sets a function apart is whether findings demonstrably turn into change. The common starting point ### The annual plan lives in a spreadsheet Audit plan in Excel, workpapers on a shared drive, evidence in the inbox. The report gets finished and the follow-up fades away. - Audit plan in Excel, workpapers on a shared drive - Evidence scattered across mails, screenshots and folders - The committee report takes days of manual work - Open actions drop out of sight once the report is out With the SwissGRC® Platform ### One audit cycle, connected end to end Audit universe, planning, workpapers, findings and actions live in one system. The current status can be queried at any time. - Annual plan derived from the risk of each auditable entity - Workpapers and evidence held on the engagement - Audit report and dashboard at the click of a button - Actions with owner and due date, tracked to closure The SwissGRC® Platform at a glance ## Your entire audit cycle, in one place Order the audit universe, run engagements, report. Click through the three views. Risk based planning ### The audit universe ordered by risk Every auditable entity in one inventory, with risk rating, audit frequency and the date of the last audit. **The annual plan follows the risk**. - Auditable entities with risk rating and audit frequency - High risk entities listed separately - Last audit date and related processes per entity ![Audit universe with auditable entities, risk rating and audit frequency](https://swissgrc.com/en/wp-content/uploads/sites/2/2025/08/Internal_Audit_1.png) Fieldwork ### From the engagement to the workpaper The audit process is modelled as a flow, with roles from the audit director through to the auditee. **Control tests, checklists and evidence sit on the engagement**. - Audit process with roles, reviews and approvals - Control tests and audit checklist as workpapers - A complete audit trail from planning to the report ![Internal audit process with roles and approvals in the SwissGRC Platform](https://swissgrc.com/en/wp-content/uploads/sites/2/2025/08/Internal_Audit_2.png) Reporting ### Audit status and findings at a glance Audit status, findings by status and rating plus the state of management actions in one dashboard. **The report is produced at the click of a button**. - Audit status from planning through to closure - Findings by status and severity - Draft and final audit report as ready analyses ![Audit management dashboard with audit status, findings and actions](https://swissgrc.com/en/wp-content/uploads/sites/2/2025/08/Internal_Audit_3.png) Built on **recognized standards**, from risk based planning through to following up on management actions. Global Internal Audit Standards IPPF ISO 19011 Audit universe Risk based planning Follow-up From the report to impact ## Audited is not resolved. Resolved is resolved. The Global Internal Audit Standards explicitly require, in Principle 15, that results are communicated and action plans monitored. That is exactly where the spreadsheet ends and the platform begins. Risk based annual planning The audit frequency of each entity follows from its risk. Plan, progress and coverage are visible at any time, including for the audit committee. Workpapers and control tests Evidence, checklists and control tests sit on the engagement instead of on a shared drive. The audit trail builds itself. Findings and actions Findings are rated and turned into actions with an owner and a due date. Overdue items stand out instead of dropping out. Quality assurance One consistent approach across every audit, documented and analysable. The basis for the internal quality programme. One data set, several disciplines Findings act directly on risks and controls. Internal audit, ICS and information security work from the same foundation. [Internal control system](https://swissgrc.com/en/internal-control-software-ics/) [Information security](https://swissgrc.com/en/information-security-management-isms-software/) [Risk management](https://swissgrc.com/en/risk-management-software/) Advantages and added value ## More impact, less manual work Comprehensive and simple at the same time. That is what drives adoption and lifts maturity. #### Consistent audits A standardized approach ensures every audit runs to the same quality and methodology. #### Part of a connected GRC system Audits share one foundation with ICS, risk management, ISMS and compliance. Findings take effect where they belong. #### Audit ready at any time Current and accessible audit records. External inspections and certifications stop being exceptional events. #### Less manual work Workflows and ready analyses replace collection emails and manual effort, leaving room for the actual audit work. #### Insight across engagements Recognize patterns across several audits and years and derive targeted improvements from them. #### Closer to management A defensible overall picture for the executive board and the audit committee turns internal audit into a trusted advisor. Contact and demo ## See our internal audit solution in action In a personal demo we walk you through the SwissGRC® Platform and show how audit planning, fieldwork, findings and actions work together. [Request Demo](https://swissgrc.com/en/demo) [Contact Sales](https://swissgrc.com/en/sales) ## Frequently asked questions ### What does internal audit software from Swiss GRC do? It supports the whole audit cycle on the SwissGRC® Platform: audit universe, risk based planning, fieldwork with workpapers, findings, reporting and tracking of actions. All of it runs in one system instead of spreadsheets, shared drives and mails. ### How is the annual audit plan created in the SwissGRC Platform? The plan follows the risk of each auditable entity. Every entity is listed with its risk rating, audit frequency and last audit date, and high risk entities are listed separately. ### How are audit findings followed up? Findings are rated and turned into actions with an owner and a due date. The dashboard shows the state of management actions, and overdue items stand out instead of dropping out of sight. ### Can internal audit work together with ICS, risk management and information security? Yes. Audits share one data set with the internal control system, risk management, information security and compliance, so findings act directly on risks and controls. ### How can I see the internal audit solution in action? Swiss GRC offers a personal demo of the SwissGRC® Platform. It shows how audit planning, fieldwork, findings and actions work together, and it can be requested through the demo or sales contact pages.