Updates as you answer. Score per area out of 100.
Guide: 70–100 strong · 40–69 needs strengthening · below 40 priority gap.
Priority gaps to address
Answers of “Not at all” or “Partly” will appear here with a suggested action.
Weak oversightClarify the oversight body's mandate and meeting schedule. Find programmes →
Blurred rolesDocument board and management responsibilities. Find programmes →
Conflict of interest riskAdopt a conflict-of-interest policy and register. Find programmes →
Undocumented decisionsRecord decisions and rationale in minutes. Find programmes →
Low transparencyPublish an annual report with key results and finances. Find programmes →
No code of conductAdopt and communicate a code of conduct. Find programmes →
No segregation of dutiesSeparate initiation, approval and recording duties. Find programmes →
Unclear authorization limitsDefine approval limits by role and amount. Find programmes →
Missing reconciliationsReconcile bank and key accounts monthly. Find programmes →
Weak asset controlMaintain an asset register with periodic verification. Find programmes →
No risk policyAdopt a risk management policy and appetite statement. Find programmes →
No risk registerCreate a risk register for strategic and operational risks. Find programmes →
Unowned risksAssign risk owners and mitigation plans. Find programmes →
Risks not reviewedReview the risk register quarterly. Find programmes →
Risks not escalatedInclude top risks in board reporting. Find programmes →
No independent internal auditEstablish an internal audit function reporting to the board or audit committee. Find programmes →
Audit plan not risk-basedBase the annual audit plan on a risk assessment. Find programmes →
Standards not appliedAlign audit methodology with recognized internal audit standards. Find programmes →
Weak audit reportingReport audit findings to the audit committee. Find programmes →
Recommendations not implementedTrack audit recommendations with owners and deadlines. Find programmes →
Compliance not monitoredMaintain a compliance register and review it regularly. Find programmes →
No anti-fraud policyAdopt and communicate an anti-fraud policy. Find programmes →
No whistleblowing channelSet up a confidential reporting channel. Find programmes →
No investigation processDefine an investigation procedure. Find programmes →
No integrity trainingRun regular ethics and integrity training. Find programmes →
Late financial statementsSet and enforce a year-end closing calendar. Find programmes →
Qualified audit opinionsAddress the causes of audit qualifications. Find programmes →
Unresolved audit findingsTrack external audit findings in an action plan. Find programmes →
No budget reportingReport budget versus actual monthly. Find programmes →
Limited financial transparencyPublish required financial information. Find programmes →