BAICS Internal Control Templates
BAICS Internal Control Templates
A Baseline Assessment Report contains an executive summary, objectives, scope and methodology, findings and recommendations, overall findings, and attachments. It includes detailed findings on each internal control component and summaries such as interim reports highlighting significant deficiencies, a control universe listing all controls and deficiencies, and gaps identified by oversight bodies .
Key elements of an Audit Engagement Plan include the introduction, audit objectives, audit scope, criteria, and methodology, as well as resources/inputs. The introduction sets the context, objectives align the audit with organizational goals, and the scope defines boundaries. Criteria set performance standards, methodology outlines audit steps, and resources detail necessary inputs. Each element ensures structured planning and execution, enabling audits to effectively assess and improve organizational controls .
Evaluating controls using flowcharts and narrative notes helps auditors visually and descriptively understand the processes, pinpoint inefficiencies, and identify control gaps. These tools facilitate clear communication of complex procedures, making it easier to assess whether the controls are functioning as intended and support the overall objectives of the audit by giving insights into process flows and potential risk areas .
The establishment of a Planning Team supports internal audit functions by leading the conduct of the Baseline Assessment of the Internal Control System (BAICS). Key activities undertaken by the Planning Team include evaluation and analysis of documents relevant to internal control systems, preparation and administration of questionnaires on key processes, review of processes and controls, evaluation using flowcharts, testing of controls, conducting walkthroughs, interim analysis, and preparation of various reports such as the Interim Report and Baseline Assessment Report .
In audit findings, 'criteria' represent the standards against which performance is assessed, 'condition' describes the current state or findings of facts, 'conclusion' involves evaluating the degree of compliance and effectiveness, and 'cause' identifies the reasons for any deficiencies. Together, these components provide a structured approach to identify issues, assess their impact on compliance and operational efficiency, and form the basis for audit recommendations .
The PGIAM's directive for the IAU to refrain from non-internal audit tasks protects its integrity by ensuring that internal audits remain objective and independent. By not being involved in operational tasks, the IAU avoids potential conflicts of interest and maintains its role as an impartial evaluator of an agency’s processes and controls, which is essential for delivering unbiased and constructive recommendations .
The Internal Audit Unit (IAU) of a government agency should refrain from participating in the operations and processes of another unit, as it conflicts with the post-audit function of internal audits. The IAU is not responsible for or required to participate in activities that are essentially part of the regular operating functions or the primary responsibility of another unit within the organization .
An Audit Engagement Plan aligns with the achievement of an organization's objectives by ensuring audits are designed to assess compliance with laws and managerial policies, safeguard resources, ensure financial accuracy, and evaluate operational efficiency. The plan outlines objectives consistent with the organization's goals, establishing a framework that includes audit objectives and scope to address critical processes and control systems, thereby directly supporting the organization's broader objectives .
Internal auditors are responsible for compiling and presenting audit findings, including criteria, condition, conclusion, and cause, in an Audit Report. They must ensure findings are evidence-based and provide actionable recommendations. Management comments are incorporated to provide a balanced view, offering explanations or rebuttals to findings, which are addressed in the auditor's rejoinder. This interaction helps improve future compliance and audit effectiveness .
Conducting a risk assessment is crucial in planning audit engagements as it helps identify areas with the highest potential for deficiencies or non-compliance. This ensures that audit resources are focused on activities that pose the most significant risks to achieving an agency’s objectives, thereby enhancing the efficiency and effectiveness of audit engagements and contributing to more reliable and comprehensive audit outcomes .

![TEMPLATE 2 – OFFICE ORDER ON THE CREATION OF A PLANNING TEAM
[Official Agency Letterhead]
Internal Audit [Nomenclature, e.g.,](/p?url=https%3A%2F%2Fscreenshots.scribd.com%2FScribd%2F252_100_85%2F356%2F656751283%2F2.jpeg&__src=https%3A%2F%2Fwww.scribd.com%2Fdocument%2F656751283%2FBAICS-Appendixes&__type=image)
![TEMPLATE 3 – BASELINE ASSESSMENT REPORT
[Official Agency Letterhead]
BASELINE ASSESSMENT REPORT
As of [Date]
a.
Executive Sum](/p?url=https%3A%2F%2Fscreenshots.scribd.com%2FScribd%2F252_100_85%2F356%2F656751283%2F3.jpeg&__src=https%3A%2F%2Fwww.scribd.com%2Fdocument%2F656751283%2FBAICS-Appendixes&__type=image)
![TEMPLATE 4 – AUDIT ENGAGEMENT PLAN
[Official Agency Letterhead]
AUDIT ENGAGEMENT PLAN
As of [Date]
Agency Program/Project/Sys](/p?url=https%3A%2F%2Fscreenshots.scribd.com%2FScribd%2F252_100_85%2F356%2F656751283%2F4.jpeg&__src=https%3A%2F%2Fwww.scribd.com%2Fdocument%2F656751283%2FBAICS-Appendixes&__type=image)

![TEMPLATE 5 – AUDIT REPORT
[Official Agency Letterhead]
AUDIT REPORT
I.
Table of Contents
II.
Executive Summary
III.
Audit Fin](/p?url=https%3A%2F%2Fscreenshots.scribd.com%2FScribd%2F252_100_85%2F356%2F656751283%2F6.jpeg&__src=https%3A%2F%2Fwww.scribd.com%2Fdocument%2F656751283%2FBAICS-Appendixes&__type=image)
