Your audit plan covers a lot.
But the right things?
Plan, run and follow up internal audits.
From the audit universe to the closed action, in one system.
Trusted by leading organizations
From the audit report
to evidenced impact
Auditing is the easy part. What sets a function apart is whether findings demonstrably turn into change.
The annual plan lives in a spreadsheet
Audit plan in Excel, workpapers on a shared drive, evidence in the inbox. The report gets finished and the follow-up fades away.
- Audit plan in Excel, workpapers on a shared drive
- Evidence scattered across mails, screenshots and folders
- The committee report takes days of manual work
- Open actions drop out of sight once the report is out
One audit cycle, connected end to end
Audit universe, planning, workpapers, findings and actions live in one system. The current status can be queried at any time.
- Annual plan derived from the risk of each auditable entity
- Workpapers and evidence held on the engagement
- Audit report and dashboard at the click of a button
- Actions with owner and due date, tracked to closure
Your entire audit cycle,
in one place
Order the audit universe, run engagements, report. Click through the three views.
The audit universe ordered by risk
Every auditable entity in one inventory, with risk rating, audit frequency and the date of the last audit. The annual plan follows the risk.
- Auditable entities with risk rating and audit frequency
- High risk entities listed separately
- Last audit date and related processes per entity

From the engagement to the workpaper
The audit process is modelled as a flow, with roles from the audit director through to the auditee. Control tests, checklists and evidence sit on the engagement.
- Audit process with roles, reviews and approvals
- Control tests and audit checklist as workpapers
- A complete audit trail from planning to the report

Audit status and findings at a glance
Audit status, findings by status and rating plus the state of management actions in one dashboard. The report is produced at the click of a button.
- Audit status from planning through to closure
- Findings by status and severity
- Draft and final audit report as ready analyses

Audited is not resolved.
Resolved is resolved.
The Global Internal Audit Standards explicitly require, in Principle 15, that results are communicated and action plans monitored. That is exactly where the spreadsheet ends and the platform begins.
More impact,
less manual work
Comprehensive and simple at the same time. That is what drives adoption and lifts maturity.
Consistent audits
A standardized approach ensures every audit runs to the same quality and methodology.
Part of a connected GRC system
Audits share one foundation with ICS, risk management, ISMS and compliance. Findings take effect where they belong.
Audit ready at any time
Current and accessible audit records. External inspections and certifications stop being exceptional events.
Less manual work
Workflows and ready analyses replace collection emails and manual effort, leaving room for the actual audit work.
Insight across engagements
Recognize patterns across several audits and years and derive targeted improvements from them.
Closer to management
A defensible overall picture for the executive board and the audit committee turns internal audit into a trusted advisor.
See our internal audit
solution in action
In a personal demo we walk you through the SwissGRC® Platform and show how audit planning, fieldwork, findings and actions work together.
DE
FR
IT
العربية