Build an observation tracker for internal audit reports, management responses, action owners, due dates, revised timelines, closure evidence and follow-up conclusions.
| Cycle | Observation | Risk / effect | Rating | Owner | Due | Status |
|---|---|---|---|---|---|---|
Link observations back to the RCM builder and the monitoring rules library.
An ATR tracker keeps internal audit observations from becoming a one-time report. It records the observation, risk/effect, rating, management response, action owner, due date, revised date, status, closure evidence and follow-up conclusion.
The tracker should be used after fieldwork evidence supports the observation and management has had an opportunity to respond. Closure should be based on evidence, not only management confirmation.
The Q1 internal audit report has three observations: one tax compliance issue, one duplicate-invoice monitoring gap and one ITGC leaver-access issue.
