What problem does it solve? Internal audit teams must translate risk assessment results into an approved annual audit plan, selecting engagements, allocating auditor days, and documenting leadership sign-off. Doing this manually risks inconsistent coverage, over-allocated resources, and undocumented acceptance of unaddressed high risks. ## Core Features & Use Cases - Risk-Based Engagement Selection: Converts risk assessment scores into a prioritized engagement list with codes, audit universe references, risk ratings, engagement types, quarters, and team leads. - Resource Budgeting: Calculates available auditor days (headcount × working days minus training, admin, and a 15-20% contingency reserve) and validates planned days against capacity. - Explicit Risk Acceptance: Documents high-risk areas not audited this year with reasons and alternative monitoring measures for leadership sign-off. - Mid-Year Adjustments: Creates versioned amendment files instead of overwriting the approved plan, preserving the audit trail. - Use Case: After completing the annual risk assessment, generate the audit plan for the year, allocate 300 available auditor days across 12 engagements, and route it for approval before the fiscal year starts per Decree 05/2019. ## Quick Start Create the annual internal audit plan for this year based on the completed risk assessment, allocating auditor days and flagging any high-risk areas left unaudited.
