An R2R internal audit programme tests the reliability of month-end close, chart of accounts, manual journals, balance-sheet reconciliations, accruals, provisions, intercompany balances, reporting packs and finance-system access.
R2R controls determine whether management accounts and financial statements can be trusted. Weak close discipline also hides errors from P2P, O2C, payroll, treasury and tax cycles.
Objective: GL accounts are approved, mapped and restricted.
COA, GL master change log, mapping file, user roles.
All new GLs and sensitive account changes.
Objective: Manual journals are supported, approved and posted in the correct period.
JE dump, attachments, approval workflow, close calendar.
Exception-based full population plus high-value sample.
Objective: Reconciliations are prepared, reviewed and cleared.
Recon pack, ageing, subledger reports, reviewer sign-off.
High-risk accounts, aged items and material balances.
Objective: Close entries and reporting outputs are complete and reviewed.
Close tracker, provision workings, reporting pack, period control log.
Selected close months and material estimates.
ICAI IASB lists the Compendium of Standards on Internal Audit as on February 2026 as applicable from 1 April 2026. Use this page as a practical workpaper starter, then verify the latest standard, law, regulation, ERP report and client fact pattern before concluding.
It should cover chart of accounts, GL postings, month-end close, manual journals, reconciliations, accruals, provisions, intercompany, reporting mappings and finance-system access.
No. It is a fieldwork starter. The internal auditor must tailor it to the approved scope, ERP, delegation matrix, locations, volumes, materiality, prior findings and current legal position.
Yes. Use the linked CORAA workbook for the cycle. It contains editable RCM, testing, evidence and monitoring sheets that can be used as a fieldwork base.
