CORAA
CORAA University / Cash and bank audit workbook

Cash and bank audit workbook

Generate an Excel/PDF workbook for bank accounts, mandates, receipts, payments, petty cash, BRS, deposits, cut-off, bank portal access and recurring monitoring rules.

Engagement profile
Select audit areas
10 RCM rows selected
AreaRiskControlTestEvidenceCadence
Bank accounts mandatesBank accounts, signatories, portal users or limits are incomplete, unauthorised or not updated.Bank master approval, mandate review, portal user review and dormant account monitoring.Agree bank list to confirmations/GL, match mandates to approvals, review leavers and inspect dormant accounts.Bank confirmations, bank master, board resolutions, mandate letters, portal user list and leaver report.Monthly / Quarterly
Receipts collectionsReceipts, UPI/card settlements, cash collections or customer remittances are not deposited, matched or recorded.Daily receipt matching, settlement reconciliation, cash deposit review and unidentified receipt ageing.Match receipts to bank and customer ledger, reconcile settlements, review cash deposit delays and age unidentified receipts.Receipt register, customer ledger, bank statement, settlement file, cash deposit slip and tracker.Daily / Weekly
Payments transfersVendor payments, refunds, payroll payments or inter-bank transfers are duplicated, unauthorised or outside workflow.Payment run approval, beneficiary validation, maker-checker release and duplicate payment check.Sample payments, check beneficiary changes, review approval trail and scan duplicate UTR/reference numbers.Payment file, bank statement, UTR, invoice/support, approval trail, beneficiary master and exception log.Weekly / Monthly
Bank reconciliationsBRS items are stale, unsupported, repeated, manually adjusted or not independently reviewed.Periodic BRS preparation, independent review, stale item ageing and manual adjustment approval.Reperform selected BRS, age open items, trace clearances and review manual entries/sign-off.BRS, bank statement, cash/bank GL, stale item tracker, journal support and reviewer evidence.Monthly
Petty cash imprestPetty cash is used without limits, approvals, vouchers, physical count or replenishment review.Imprest limit, voucher approval, surprise cash count and replenishment review.Perform cash count, sample vouchers, check splitting/round sums and review replenishment frequency.Cash book, vouchers, approvals, cash count sheet, replenishment statement and exception log.Monthly / Surprise
Deposits FD interestDeposits, margin money or interest income are omitted, pledged without tracking or unreconciled.Deposit register, maturity tracker, interest recomputation and lien/pledge review.Agree deposits to confirmations, recompute interest, review matured items and check lien classification.FD receipts, confirmations, deposit register, interest working, lien letters and GL.Monthly / Quarter close
Bank charges feesBank charges, cash-credit interest, gateway charges or fees are not reviewed against bank terms.Bank charge review, interest recomputation, fee approval and exception reporting.Sample charges, recompute interest, review unusual charges and check accounting classification.Bank advices, statements, sanction terms, interest working, GL and approval notes.Monthly
Cheque DD instrumentsCheque books, DDs, cancelled cheques or physical instruments are not safeguarded or tracked.Instrument custody, cheque sequence control, cancelled cheque review and stop-payment tracking.Inspect unused custody, review sequence gaps, test cancelled instruments and check stale/stop-payment items.Cheque register, instrument inventory, cancelled cheques, stop-payment letters and bank statement.Monthly
Cut-off period endReceipts, payments, transfers or bank entries around period end are recorded in the wrong period.Cut-off review, period-end bank confirmation, post-period clearance review and journal approval.Test pre/post period entries, trace outstanding cheques/deposits, review clearances and inspect journals.Bank statements, BRS, GL, receipt/payment register, post-period statement and journal support.Close
ERP bank accessUsers can create beneficiaries, post bank journals, approve payments, change limits or release funds without segregation.Role-based access, SoD review, beneficiary-change approval and audit-log monitoring.Review users/roles, test SoD conflicts, inspect beneficiary changes and check leavers/shared IDs.ERP users, bank portal users, role matrix, audit logs, beneficiary change log and access review.Monthly / Quarterly

Use this with the cash and bank internal audit checklist, the treasury checklist and the monitoring rules repository.

How it works

Cash and bank internal audit is strongest when bank statements, GL, BRS, receipts, payments, mandates, deposit support and access evidence are tested together. The workbook connects routine cash controls to monitoring rules for stale items, duplicate payments, beneficiary changes and leaver access.

The Excel export gives auditors separate sheets for engagement scope, RCM rows, bank master/mandates, receipts/collections, payments/transfers, BRS stale items, petty cash/deposits, cut-off/access and monitoring exceptions.

Worked example

A CA firm is reviewing cash and bank controls for a company with multiple bank accounts, payment gateway collections, vendor payouts, petty cash and month-end BRS files.

Inputs
ScopeBank master, receipts, payments, BRS, petty cash, deposits, cut-off and access
OutputExcel workbook plus PDF summary
Output
WorkbookRCM, bank mandate testing, receipt matching, payment testing, BRS stale item review, petty cash/deposit review, cut-off/access review and monitoring exceptions

Common mistakes

Stopping at BRS tick marks
Cash and bank audit should also test bank mandate authority, receipt matching, payment approval, beneficiary changes, cut-off, stale items and access controls.
Ignoring gateway and UPI settlements
Collection channels often create timing differences, fees, refunds and chargebacks that need separate reconciliation to bank and customer ledgers.
Not reviewing access with payments
ERP cash roles and bank portal users should be tested with actual payment and beneficiary-change activity, not as a separate access list only.

Frequently asked questions

What is included in a cash and bank audit workbook?+
It includes engagement scope, cash and bank RCM rows, bank master and mandate testing, receipt and collection matching, payment and transfer testing, BRS stale item review, petty cash/deposit review, cut-off/access testing and monitoring rules.
Can I export the cash and bank workbook to Excel?+
Yes. The workbook exports a multi-sheet Excel file and a PDF summary so auditors can document samples, evidence, exceptions, reviewer notes and monitoring rules.
Which data should be requested first?+
Request bank confirmations, bank statements, cash/bank GL, BRS files, receipt register, settlement files, payment runs, UTRs, beneficiary master, petty cash book, deposit register, bank portal users, ERP cash roles and leaver list.

Authoritative sources

ICAI
ICAI IASB - Compendium of Standards on Internal AuditUse SIA planning, evidence, documentation, review, communication and reporting principles.
ICAI IASB - PublicationsUse relevant internal audit guides and generic internal audit publications.
India Code - Companies Act, 2013Use for company-level governance and internal-control context.
Always confirm against the latest version of the source. Regulations evolve and amendments are common.
Related calculators
Cash and bank internal audit checklistTreasury internal audit checklistInternal audit resource hub
Share this tool
Last reviewed: 2026-08-29 · For informational purposes only — not professional advice.