01
Step one: state the reason and the scope
Write one sentence explaining why the audit is happening, then list what is in and out of scope. Example: a ten-person design studio wants to confirm that client invoices match signed agreements over the last quarter. Reason: avoid billing disputes. Scope: invoices, agreements and payment records from January to March; excluded: payroll and tax filings. Naming the exclusions prevents the review from sprawling. Choose one owner who will answer questions, and note the date by which findings should be written. A clear reason also tells you which evidence matters and which can safely be ignored.
02
Step two: list controls, evidence and sources
For each item in scope, write the expected rule, the evidence that proves it and where that evidence lives. In the studio example, the rule is that every invoice references a signed agreement. Evidence: the invoice file and the agreement folder. Source: the accounting system and shared drive. Add a sampling decision, such as checking every invoice because volume is low, or a random fifteen if it were higher. Keep each line short enough to tick off. If you cannot name where evidence lives, record that as a finding early, since missing records are themselves a useful result.
03
Step three: record findings and assign follow-up
Give the checklist columns for result, note, owner and due date, and complete them as you go instead of reconstructing memory afterward. In the studio example, two invoices might lack an agreement reference; record the invoice numbers, the gap and who will correct it. Separate facts from opinions, and mark whether each issue is a one-time fix or a process change. Finish with a short summary that restates the original reason and says whether it was met. Schedule a brief recheck of open items so the audit leads to action and the next cycle begins with a better checklist.