Internal Audit Findings Summarizer

يستخدم المدققون الداخليون ومديرو التدقيق هذا الموجه لتحويل ملاحظات الميدان الخام والنتائج المسودة إلى بطاقات نتائج منظمة جاهزة للإدارة — مما يُزيل الوقت المُنفَق في التنسيق والتوحيد القياسي للمخرجات عبر أعضاء الفريق.

You are a senior internal auditor preparing a findings summary report for the audit committee and senior management. I will provide you with raw internal audit findings from a completed audit engagement. Your task is to transform these findings into a structured, professional summary suitable for management review and audit committee presentation.

Audit engagement details:
- Entity or process audited: [AUDIT ENTITY OR PROCESS]
- Audit scope period: [AUDIT PERIOD]
- Applicable framework: [APPLICABLE FRAMEWORK]
- Raw findings: [RAW AUDIT FINDINGS]

For each finding, produce a formatted finding card with the following elements:

**Finding Title** — A concise, action-oriented title that describes the control deficiency (e.g., 'Segregation of Duties Gap in Accounts Payable Approval')

**Risk Rating** — Assign one of four ratings based on potential impact and likelihood: Critical, High, Medium, or Low. Provide a one-sentence justification for the rating, referencing the applicable framework criteria where relevant.

**Control Objective** — State the control objective that was not achieved and the specific control activity that failed or was absent.

**Root Cause** — Identify the root cause of the finding at the appropriate level: design deficiency (the control was never designed to address the risk), operating ineffectiveness (the control exists but is not functioning), or management override. Avoid superficial root causes like 'staff error' — identify the systemic cause.

**Management Impact** — Describe the actual or potential business, financial, or compliance impact if the finding is not remediated. Quantify the impact where possible.

**Recommended Remediation** — Provide specific, actionable remediation steps. Each step should be a discrete action, not a general directive. Reference control design best practices or framework requirements where applicable.

**Ownership** — Identify the process owner responsible for remediation based on the audit scope information provided.

**Recommended Timeline** — Suggest a remediation timeline based on the risk rating: Critical findings within 30 days, High within 60 days, Medium within 90 days, Low within 180 days.

After all individual findings, produce a one-paragraph Executive Summary covering the overall control environment assessment, the total finding count by risk rating, and the highest-priority remediation action.

متغيرات الأمر

استبدل كل عنصر نائب بمعلوماتك الخاصة:

ما ستحصل عليه

بطاقة نتائج منسقة لكل نتيجة خام، تشمل عنواناً مُقيَّماً بالمخاطر وهدف التحكم وتحليل السبب الجذري والتأثير المُحدَّد وخطوات المعالجة المحددة والمالك المسؤول والجدول الزمني. يتبعها ملخص تنفيذي من فقرة واحدة.

💡 نصيحة خبير

أدرج إطار التحكم المعمول به في الموجه — سواء كان SOX القسم 302/404 أو COSO 2013 أو سياسة داخلية محددة. يمنح الإشارة إلى الإطار الذكاءَ الاصطناعي المعايير اللازمة لتعيين تقييمات المخاطر بشكل متسق.

أدوات الذكاء الاصطناعي المتوافقة

أوامر ذات صلة

موارد ذات صلة