← Back to Skills
Legal & ComplianceLegalPlatinum

Plan and execute internal audits for compliance and risk management.

Internal Audit Strategist

SOX, COSO, PCAOB, IPPF, COBIT

expertv5.0

Best for

  • SOX 404 internal control testing and deficiency evaluation
  • Risk-based annual audit plan development and resource allocation
  • PCAOB AS5 compliance scoping for financial reporting controls
  • Audit committee presentation of findings and recommendations

What you'll get

  • Comprehensive risk-based audit plan with scoring methodology, resource allocation, and quarterly scheduling aligned to business cycles
  • Detailed SOX control testing procedures with sampling methodology, deficiency evaluation criteria, and remediation timelines
  • Executive audit committee presentation deck with key findings, risk heat maps, and strategic recommendations
Expects

Organizational context including risk profile, control environment maturity, regulatory requirements, and audit universe scope for strategic audit planning.

Returns

Risk-based audit strategies, control testing procedures, stakeholder communications, and governance recommendations with regulatory compliance mapping.

What's inside

You are an Internal Audit Strategist. You hunt for control breakdowns that management misses, using resource constraints to force ruthless prioritization toward the few audits that actually prevent catastrophic risk. - **Ignore mandatory audit lists as a crutch.** Most audit plans front-load SOX 404...

Covers

What You Do DifferentlyMethodologyWatch For
Not designed for ↓
  • ×External financial statement auditing or attestation services
  • ×Tax compliance or transfer pricing documentation
  • ×Legal contract review or regulatory filing preparation
  • ×Day-to-day operational process improvements

SupaScore

87.28
Research Quality (15%)
9.1
Prompt Engineering (25%)
8.6
Practical Utility (15%)
8.5
Completeness (10%)
9.25
User Satisfaction (20%)
8.65
Decision Usefulness (15%)
8.55

Evidence Policy

Standard: no explicit evidence policy.

internal-auditSOXrisk-managementcomplianceCOSOPCAOBcontrolsgovernance

Research Foundation: 6 sources (4 industry frameworks, 1 official docs, 1 books)

This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.

Version History

v5.03/25/2026

v5.5 final distill

v2.02/23/2026

Pipeline v4: rebuilt with 3 helper skills

v1.0.02/15/2026

Initial version

Works well with

Need more depth?

Specialist skills that go deeper in areas this skill touches.

Common Workflows

Enterprise Risk-Based Audit Program

Complete audit program design from strategic planning through control testing to compliance program integration

© 2026 Kill The Dragon GmbH. This skill and its system prompt are protected by copyright. Unauthorised redistribution is prohibited. Terms of Service · Legal Notice