Working Papers

Working papers are the spine of an audit. They are the documented procedures, the evidence examined and the conclusions drawn — the proof that a finding is more than an opinion. ISA 230 and the IIA Standards require that an experienced auditor with no prior connection could pick up the file and understand what was done, by whom, and why the conclusion follows. Without that, a finding cannot be defended and the audit cannot be relied upon.

In the public sector the stakes are higher because AGSA explicitly tests internal-audit working papers when deciding how much of internal audit's work it can rely on. Loose, un-indexed, un-reviewed papers scattered across personal drives mean lost evidence, no supervisory sign-off, and no retention discipline under the National Archives Act — the kind of file weakness that turns a sound finding into a contested one and drags out the external audit.

A controlled working-paper library fixes this at the root. Every paper is indexed, cross-referenced bidirectionally to its finding, version-controlled and retained to schedule, and signed off by the engagement supervisor before the report finalises. The audit becomes reproducible, the evidence becomes defensible, and reliance becomes straightforward.