What it is
An internal audit report tells management and the audit committee what was examined, what was found and what should be done. This template leads with the overall conclusion and rating, then the background, a findings summary and detailed findings in condition, criteria, cause, effect, recommendation and response form.
It also has positive observations, limitations, a rating scale and a distribution list.
When to use it
- To issue the results of an internal audit engagement.
- When a finding needs to go to the audit committee.
- When standardizing report format across the team.
What’s inside
- Overall conclusion and rating
- Summary and detailed findings tables
- Positive observations and limitations
- Rating scale and distribution
Standard cited
This template follows IIA Global Internal Audit Standards (2024). It is written in our own words, except for phrases the standard requires the document to contain, with [bracketed placeholders] for client details, amounts in USD and dates as MM/DD/YYYY. Check it against the current standard and your firm’s methodology before use.
Questions
What should a finding contain?
The condition, the criteria, the cause, the effect, a recommendation and management’s response. Without the cause and effect, the recommendation has nothing to stand on.
Should the report state limitations?
Yes. Say what was not covered, what data limits applied and that the conclusion applies to the scope and period described.
Related templates
- Audit Finding Sheet (5 Cs)
- Management Action Plan Response Form
- Audit Closing Meeting Agenda and Minutes
- Internal Audit Program Template
Last updated 11/05/2026. All free templates.