top of page

Vendor Management Audit Work Program

Updated: Jun 1, 2021

Example Internal Audit Work Program / Risk and Control Matrix (RCM)

Maintaining appropriate controls over vendors, such as vendor creates and amends, is important to ensure there is no fraud, the business is meeting any local regulatory requirements in terms of paying small businesses and vendors are being paid within the specified timeframes.

We have developed a generic Internal Audit Work Program, or Risk and Control Matrix (RCM) aimed at helping audit teams ensure controls over vendor management have been designed and implemented correctly, and are also operating effectively.