Create a bespoke document in minutes, or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Audit Procedure
I need an audit procedure document that outlines the steps for conducting an internal audit of our financial processes, ensuring compliance with local regulations and identifying areas for improvement. The document should include a checklist for auditors, a timeline for each audit phase, and guidelines for reporting findings and recommendations.
What is an Audit Procedure?
An Audit Procedure outlines the specific steps and methods auditors use to examine financial records, internal controls, and business operations. In Malaysia, these procedures must align with the Malaysian Approved Standards on Auditing (ISA) and Companies Act 2016 requirements, helping auditors gather reliable evidence about a company's financial statements.
Good audit procedures include reviewing documents, confirming account balances, observing business processes, and testing internal controls. These systematic checks help Malaysian companies maintain transparency, detect errors or fraud, and comply with Bursa Malaysia's listing requirements. Auditors customize these procedures based on the company's size, industry risks, and specific audit objectives.
When should you use an Audit Procedure?
Use Audit Procedures during annual financial reviews, when preparing for external audits, or when investigating suspected financial irregularities. Malaysian companies must implement these procedures before submitting annual reports to the Companies Commission of Malaysia (SSM) and when meeting Bursa Malaysia's listing requirements.
Key times to apply audit procedures include mergers and acquisitions, major system changes, or when expanding business operations. They're essential for public listed companies facing quarterly reporting deadlines, companies seeking new investments, and organizations responding to regulatory investigations. Regular audit procedures help maintain compliance with Malaysian tax laws and prevent financial misstatements.
What are the different types of Audit Procedure?
- Analytical Test Audit: Evaluates financial data trends and relationships to identify unusual patterns or potential misstatements
- Audit Cash Confirmation: Verifies bank balances and cash transactions through third-party confirmation
- Audit Of Petty Cash: Reviews small cash funds and daily expense transactions for accuracy and proper documentation
- Audit Program For Inventories: Examines stock levels, valuation methods, and inventory management systems
- Audit Assertions For Cash: Tests specific claims about cash accounts, including existence, rights, and completeness
Who should typically use an Audit Procedure?
- External Auditors: Independent professionals from registered audit firms who design and execute audit procedures according to Malaysian Approved Standards on Auditing
- Internal Audit Teams: Company employees who implement regular audit procedures to maintain internal controls and compliance
- Board of Directors: Review and approve audit procedures as part of their oversight responsibilities under the Companies Act 2016
- Finance Department: Provides necessary documentation and responds to audit queries during procedure execution
- Regulatory Bodies: SSM and Bursa Malaysia monitor compliance with audit requirements and review procedure outcomes
How do you write an Audit Procedure?
- Company Details: Gather business registration info, industry classification, and applicable Malaysian reporting standards
- Risk Assessment: Identify key financial risks, control weaknesses, and past audit findings specific to your organization
- Documentation Review: Collect relevant financial statements, internal policies, and system documentation
- Scope Definition: Outline specific areas, accounts, or processes to be audited based on materiality and risk
- Timeline Planning: Set realistic deadlines aligned with reporting requirements and resource availability
- Team Assignment: Determine who will perform each audit task and their required qualifications under Malaysian standards
What should be included in an Audit Procedure?
- Audit Objectives: Clear statement of purpose, scope, and alignment with Malaysian Approved Standards on Auditing
- Methodology Section: Detailed testing procedures, sampling methods, and evidence collection requirements
- Risk Assessment: Documentation of identified risks and corresponding audit responses
- Timeline Framework: Specific deadlines and milestones aligned with regulatory reporting requirements
- Data Protection: Compliance measures with Personal Data Protection Act 2010
- Quality Control: Review procedures and documentation requirements per Malaysian Institute of Accountants standards
- Sign-off Protocol: Authorization levels and documentation of reviewer independence
What's the difference between an Audit Procedure and a Compliance Procedure?
Audit Procedures are often confused with Compliance Procedure, but they serve distinct purposes in Malaysian business operations. While both support organizational governance, their scope and application differ significantly.
- Primary Focus: Audit Procedures specifically examine financial records and internal controls to verify accuracy and detect irregularities. Compliance Procedures, however, ensure ongoing adherence to laws, regulations, and internal policies across all business operations.
- Timing and Frequency: Audit Procedures typically follow a scheduled cycle (annual, quarterly) with defined start and end points. Compliance Procedures run continuously throughout the year.
- Implementation Scope: Audit Procedures target specific accounts, processes, or financial statements. Compliance Procedures cover broader regulatory requirements, including licensing, reporting, and operational standards.
- Regulatory Framework: Audit Procedures must follow Malaysian Approved Standards on Auditing, while Compliance Procedures align with various regulatory bodies' requirements, including SSM, Bursa Malaysia, and industry-specific regulators.
Download our whitepaper on the future of AI in Legal
ұԾ’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ұԾ’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.