CORAA

Internal Audit Observation Format — SIA 360/370 Structure

A single-finding observation format following the Condition → Criteria → Cause → Effect → Recommendation structure under SIA 360/370, with a management-response block ready for sign-off.

Free · CORAA original — SA-aligned
Updated 28 Jul 2026
Standard
SIA 360 / SIA 370
Structure
Condition → Criteria → Cause → Effect → Recommendation
Rating scale
Deficiency / Significant Deficiency / Material Weakness
Format
Microsoft Word (.docx)
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

INTERNAL AUDIT OBSERVATION

Entity: ___ · Observation ref: ___ · Process: ___ · Rating: ___

1. Condition — what was found

____________________________________________

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

Why does an internal audit observation need five separate parts instead of just describing the problem?
Condition alone tells management what was found, but Criteria shows why it matters (what standard it falls short of), Cause prevents a superficial fix (addressing symptoms instead of the root cause), and Effect quantifies the risk so the finding can be prioritised correctly. Recommendation then follows logically from the cause, not just the condition — skipping straight from condition to recommendation is how findings end up with fixes that don't actually address why the gap happened.
What is the difference between a Deficiency, a Significant Deficiency, and a Material Weakness?
A Deficiency is a control gap unlikely on its own to allow a material misstatement or loss. A Significant Deficiency is important enough to merit those-charged-with-governance's attention, but not yet a Material Weakness. A Material Weakness carries a reasonable possibility that a material misstatement or loss would not be prevented or detected in time — it escalates to the Audit Committee and, where the entity is subject to Sec 143(3)(i), threatens the statutory auditor's IFC opinion.
Is a written management response mandatory for every observation?
Yes — SIA 360 (communication with management) expects every observation to carry a documented response before the report is finalised, indicating agreement, partial agreement or disagreement, together with the responsible owner and target date. An observation without a management response is incomplete for reporting purposes.
Related templates

You might also need.

Management Action Taken Report (ATR) Template
Free Management Action Taken Report (ATR) template for internal audit. Observations, ratings, management respo
Internal Audit Follow-up / Closure Tracker — SIA 390
Free internal audit follow-up and closure tracker template. Tracks prior observations to closure with repeat-o
Internal Audit Report Template — Findings, Recommendations, Management Response
Free Internal Audit Report template for Indian companies. Findings, recommendations, management responses, aud