Write an audit finding management will understand and act on
Turns my testing notes into a finding with condition, criteria, cause, effect, and a practical recommendation, rated by risk.
The prompt
Help me write an internal audit finding from my working notes.
What I tested and how: [SCOPE, period, sample size, method]
What I found: [EXCEPTIONS - e.g. "7 of 40 vendor changes had no independent approval"]
The requirement it breaks: [POLICY, procedure, control description, or regulation - quote it]
What management told me about why: [EXPLANATIONS from interviews]
Known or potential impact: [losses, misstatement, regulatory exposure - only what is supported]
Our rating scale: [e.g. High / Medium / Low with definitions, or PASTE]
Structure the finding as:
1. Title - under 12 words, states the problem, not the topic.
2. Condition - what is happening, with the exact numbers from my testing.
3. Criteria - what should be happening, citing the source.
4. Cause - the root cause (design gap, ownership gap, system limitation, training, resourcing), not just "the control was not performed".
5. Effect - the realistic risk if not fixed, proportionate to the evidence.
6. Recommendation - addresses the cause, is specific and achievable.
7. Suggested rating with a one-line justification against my scale.
Rules:
- Use only facts I gave you. Mark any gap as [CONFIRM] rather than filling it.
- Neutral, factual tone: no blame, no names, no words like "failure" or "negligent".
- Do not extrapolate sample results to the population unless I used statistical sampling.
- Keep the whole finding under 300 words.
Highlighted [brackets] are blanks to replace with your own details.
Fill in the blanks and use this promptMore Legal & Compliance prompts
What to fill in
- SCOPE, period, sample size, method
- EXPLANATIONS from interviews
- e.g. High / Medium / Low with definitions, or PASTE
- CONFIRM
How this prompt is built
This prompt follows the Few-Shot structure (Few-shot prompting). A few-shot prompt includes one or more worked examples of the input and the output you want, so the model can copy the pattern instead of guessing it.
Related prompts
- Write the quarterly report to the audit or risk committeeProduces a concise committee report covering plan progress, key findings, overdue actions, and the matters that need their attention.
- Write a suspicious activity report (SAR) narrativeA clear, chronological SAR narrative that answers who, what, when, where, why, and how, ready for compliance review.
- Check auditor independence before accepting a new attest clientA structured independence and threats-and-safeguards review for a CPA firm before taking on an audit, review, or other attest engagement.
- Assess a patent or invention against prior artA structured first-pass analysis of what a patent or invention claims, how it compares with known prior art, and questions for a patent attorney.