CORAA

Combined Assurance Map Template (Word)

Map each key risk to the assurance given by management, risk and compliance, internal audit and external providers, and find gaps and overlaps.

Free · CORAA original — SA-aligned
Updated 17 Oct 2026
Shows
Gaps and overlaps
Lines
Management · risk · audit · external
Feeds
Audit plan
Format
Editable Word
Share this template
Your firm — letterhead
Appears at the top of the document as the audit firm letterhead.
Used as the letterhead block.
Engagement details
The client and period this document is for.
What’s inside

An excerpt from the template.

Combined Assurance Map — ___

Standard / scope: ___ | Period: ___ | Prepared by: ___ | Date: ___

List the main risks and show who gives assurance over each, across management (first line), risk and compliance functions (second line), internal audit (third line) and external providers. The aim is to see gaps and overlaps, not to produce a long document. Based on the three lines idea in the IIA Three Lines Model; adapt the labels to your organisation.

Reading the map

↑ Excerpt only — the full template is what you download as Word
About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, nothing stored on our servers. We’ll ask for a work email once before your first download so we can send you the file and the occasional relevant update; after that, downloads on this device are instant. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

Who owns the assurance map?
Often the head of internal audit or risk coordinates it, but each line owns its own assurance activity. It is usually reviewed with the audit committee.
Related templates

You might also need.

Internal Audit Charter Template — Section 138 / IIA / SIA
Free Internal Audit Charter template for Indian companies under Section 138 of the Companies Act 2013. IIA / I
ISO Internal Audit Programme and Schedule
Generate an ISO internal audit programme and schedule: risk-based coverage by clause, auditors, independence c
SOX Risk and Control Matrix Template
Generate a SOX-style risk and control matrix with risk, assertion, control type, frequency, owner and evidence