CORAA
Log inRun your first audit free
CORAA University / Free dashboard pack

Internal audit dashboard pack generator

Create a committee-ready internal audit dashboard with plan progress, cycle status, monitoring exceptions, open observations, ageing and action-owner visibility.

Dashboard profile
Plan progress
30%
Actual / planned
334/640
Exceptions
90
High findings
6
Overdue actions
1
Cycle dashboard
CycleQuarterPlanned hoursActual hoursStatusExceptionsHigh findingsOwner
Observation ageing
RefCycleRatingOwnerAgeing daysAction dueRevised dueDue status
Reported
P2P
64/72 hours. 18 exception(s). 1 high finding(s).
Reported
O2C
58/64 hours. 14 exception(s). 1 high finding(s).
Reported
R2R
84/80 hours. 11 exception(s). 2 high finding(s).
In progress
ITGC
72/88 hours. 24 exception(s). 2 high finding(s).
In progress
Inventory
36/72 hours. 16 exception(s). 0 high finding(s).
In progress
Cash and Bank
20/48 hours. 7 exception(s). 0 high finding(s).
Not started
Fixed Assets
0/48 hours. 0 exception(s). 0 high finding(s).
Not started
H2R / Payroll
0/56 hours. 0 exception(s). 0 high finding(s).
Not started
Statutory / Tax Compliance
0/56 hours. 0 exception(s). 0 high finding(s).
Not started
Treasury
0/56 hours. 0 exception(s). 0 high finding(s).
Dashboard discipline

Counts need an evidence trail

A dashboard helps management see movement, but it is not audit evidence by itself. Every metric should tie back to the annual plan, RCM test, source population, reviewer conclusion, observation wording and closure evidence.

Build the source file first: annual plan, RCM, monitoring rules and observation report.

How an internal audit dashboard should work

An internal audit dashboard should show whether the approved plan is moving, which reviews have produced high-risk observations, whether management actions are overdue and which continuous monitoring exceptions still need reviewer conclusion.

The dashboard should not replace workpapers. It is a reporting layer over the annual plan, RCM, source population, evidence, observation register and ATR. A red tile without source data and reviewer conclusion creates heat, not assurance.

This generator creates an audit committee pack with cycle status, hours, exception counts, rating mix and observation ageing. The Excel version keeps those tabs editable so the internal audit team can support meeting papers without rebuilding the file each month.

Worked example - Q1 committee pack

R2R and P2P have been reported, ITGC is still in progress, and two high-risk observations need management visibility. The committee needs progress, overdue actions and what will be monitored next month.

Inputs
Plan progress30%
Monitoring exceptions90
Overdue actions1
Output
PDFDashboard summary for meeting pack
ExcelCycle status, observation ageing and talking points
The dashboard focuses attention on status and accountability. It still needs supporting RCM workpapers, exception details and closure evidence before the figures are circulated.

Common mistakes

Using dashboard counts as audit evidence
Counts need source population, rule logic, sample or full-population coverage and reviewer conclusion. A metric alone is not an audit finding.
Hiding overdue actions inside totals
Overdue high-risk items should be visible by owner and ageing. Otherwise the committee sees progress while repeat issues remain unresolved.
Mixing plan progress with report closure
A review can be completed, reported or closed. Use separate statuses so fieldwork completion is not confused with management action closure.
No link to the annual plan
Dashboard scope should trace to the approved annual plan. Otherwise management cannot tell whether delays are scope changes, resource gaps or reporting slippage.

Frequently asked questions

What should an internal audit dashboard include?+
At minimum it should include annual plan progress, review status by cycle, planned vs actual hours, high and medium observations, ageing of open actions, overdue owners, repeat findings and continuous monitoring exceptions awaiting review.
Is an internal audit dashboard the same as an audit report?+
No. The dashboard is a management and committee reporting layer. The audit report still needs scope, procedures performed, evidence, observations, ratings, management response and follow-up status.
How often should an internal audit dashboard be updated?+
For active internal audit functions, monthly or quarterly is common. Continuous monitoring dashboards may refresh more often, but committee reporting should show only reviewed and explainable exceptions.
Can this dashboard be used for audit committee meetings?+
Yes, as a draft pack. Before circulation, reconcile each metric to the approved annual plan, RCM workpapers, observation register, management responses and closure evidence.

Authoritative sources

MCA
Companies (Accounts) Rules, 2014 - Rule 13 — Rule 13(2) requires the Audit Committee or Board to formulate internal audit scope, functioning, periodicity and methodology.
ICAI
ICAI IASB - Compendium of Standards on Internal Audit — The SIA framework covers planning, evidence, documentation, communication, reporting and follow-up.
Always confirm against the latest version of the source. Regulations evolve and amendments are common.
Related calculators
CORAA Intelligence Studio →Internal audit software for enterprise teams →Internal audit annual plan generator →Observation report generator →ATR tracker →
Share this tool
Last reviewed: 2026-08-30 · For informational purposes only — not professional advice.