At Netrika we conduct assessment based on risk across the organization & similar industry. There are three parts to an audit or business process review engagement:
A formal report is prepared and shared with the engagement areas management. The report includes an assessment of the internal control environment, a summary of the issues identified during the engagement, and management's corresponding corrective action plans. A summary of the engagement results is provided to the client.
Advisory observations may also be identified during an engagement; these would be items of lesser concern, however ones implemented they may provide opportunities for enhancing controls, increasing efficiency, or improving operations. These items are shared only with the engagement areas management and do not require the development and implementation of management corrective action plans.