AI-led audit, SOX and GRC

Live

AI-led audit management, written from the work

IRAME's audit management writes the risk assessment, audit plan, workpapers and issues from the testing IRA, IRAME's AI auditor, performs. Your team reviews and signs instead of typing. Risk assessment and the annual plan are in early access.

See how IRA works
grc.irame.ai/audit-plan

Who it is for

Run the audit lifecycle in IRAME, or keep your system and send IRA's results into it.

L3 · Third line

Chief Audit Executive

The risk universe, annual plan, every engagement and every open issue in one view, ready for the audit committee.

L3 · Third line

Audit managers

Plan, assign, review workpapers and sign off in one place. Results fill the workpaper as tests run.

L3 · Third line

Teams on TeamMate+ or AuditBoard

Keep your system of record. IRA's results export into it today; a direct API connection is in development.

What it tests

Each module is built on the same engagement record IRA writes as it tests.

Audit Management: module and what it gives you
ModuleWhat it gives you
Risk universe and assessmentAuditable entities scored on your risk scales, refreshed with what testing found.
Annual audit planA risk-based plan with coverage, hours and timing, approved and versioned.
Engagement planningScope, audit program and RACM drafted from your SOPs and prior work.
Workpapers and evidenceEach test step with its data, result and reviewer sign-off.
Issues and action plansFindings in Finding, Impact, Risk and Recommendation, tracked to closure in the Action Taken Report.
Audit committee reportingPlan status, coverage, open issues and overdue actions in one board pack.
Time and resourcesWho is on which engagement, and the hours against budget.
Works with TeamMate+ and AuditBoardResults export into your system of record today; a direct API connection is in development.

How it runs

Each run follows the same five steps, from connecting the data to closing the last exception.

  1. 01

    Map the universe

    Load entities, processes and risk scales. Connect the ERP data behind each process.

  2. 02

    Build the plan

    Score each entity, pick the year's engagements and get the plan approved.

  3. 03

    Run each engagement

    IRA drafts the test plan; once you approve it, IRA tests the full population and fills the workpaper as it goes.

  4. 04

    Raise and assign issues

    Confirmed exceptions become observations with an owner, action plan and due date.

  5. 05

    Report to the committee

    Coverage, findings and overdue actions roll up into the board pack.

Roadmap

These Audit Management modules are in early access or on the roadmap. They are labelled until they are generally available.

Coming

Risk assessment

Auditable entities scored on your risk scales. In early access.

Coming

Annual audit plan

A risk-based plan with coverage, hours and timing. In early access.

Coming

Draft report review

IRA checks each draft finding against its evidence before it goes out.

Customer story

Audits across procure to pay, order to cash, record to report and segregation of duties. Fieldwork took about 4 man-hours instead of 15 man-days.

FAQ

Short answers to what buyers ask us most.

Do we have to replace TeamMate+ or AuditBoard?

IRAME replaces nothing you want to keep. Teams without an audit management system can run the lifecycle in IRAME. Teams on TeamMate+ or AuditBoard (now Optro) keep it and export IRA's results into it today; a direct API connection is in development.

What is different about audit management in IRAME?

IRAME writes the audit record from the work IRA, its AI auditor, performs. Results, evidence and exceptions land in the workpaper as tests run, so your team reviews instead of typing.

Is IRAME audit management generally available?

Engagements, engagement planning, testing, workpapers, issues and the Action Taken Report are live. Risk assessment and annual planning are in early access with design partners.

Does IRAME follow the IIA Global Internal Audit Standards?

IRAME follows the workflow of the 2024 Global Internal Audit Standards: risk-based planning, documented work, supervised review and tracked findings. Full-population testing also addresses Standard 10.3 on technology resources.

Where is our audit data stored?

IRAME runs in IRAME's cloud, your own cloud tenancy, or on-premise with on-premise AI models. Customer data never trains a model. IRAME holds SOC 2 Type II and ISO/IEC 27001:2022.

Stop sampling. Let IRA test everything.

Bring one process. In 30 minutes we show you the exceptions IRA finds and the evidence behind each one.

Talk to sales