Nternal Udit LAN: Project or System Name
Nternal Udit LAN: Project or System Name
AUDIT
PLAN
Project or System Name
U.S. Department of Housing and Urban Development
Month, Year
Revision Sheet
Revision Sheet
Release No.
Rev. 0
Rev. 1
Date
5/30/00
4/10/02
Revision Description
Internal Audit Plan Template and Checklist
Conversion to WORD 2000 format
Page i
I have carefully assessed the Internal Audit Plan for the (System Name). This document has been
completed in accordance with the requirements of the HUD System Development Methodology.
MANAGEMENT CERTIFICATION - Please check the appropriate statement.
______ The document is accepted.
______ The document is accepted pending the changes noted.
______ The document is not accepted.
We fully accept the changes as needed improvements and authorize initiation of work to proceed. Based
on our authority and judgment, the continued operation of this system is authorized.
_______________________________
NAME
Project Leader
_____________________
DATE
_______________________________
NAME
Operations Division Director
_____________________
DATE
_______________________________
NAME
Program Area/Sponsor Representative
_____________________
DATE
_______________________________
NAME
Program Area/Sponsor Director
_____________________
DATE
Page ii
NOTE TO AUTHOR: Highlighted, italicized text throughout this template is provided solely as
background information to assist you in creating this document. Please delete all such text, as well as the
instructions in each section, prior to submitting this document. ONLY YOUR PROJECT-SPECIFIC
INFORMATION SHOULD APPEAR IN THE FINAL VERSION OF THIS DOCUMENT.
The Internal Audit Plan, developed by the Inspector Generals (IG) staff, verifies involvement, which may
range from review of completed work to active audit participation in system activities. The project
manager must formally notify the IG of the existence of the project at the Define stage of the system
development lifecycle, and again at the Build and Evaluate stages to update the list of deliverables.
The project leader fills in the following notification letter template and forwards to the IG.
Introduction
(Project Name) (PCAS Number) (System ID) has transitioned from the Initiate to the Define phase of the
system development lifecycle.
System Overview
Provide a brief system overview description.
Points of Contact
Provide a list of the points of organizational contact.
Schedule Dates
Provide the start date of the Define phase. In subsequent updates, provide the start dates of the Build and
Evaluate phases.
Deliverable List
For each phase (Define, Design, Build, and Evaluate), provide a list of deliverables to be completed.
Page iii
General Information
1.0
GENERAL INFORMATION
This section is an Internal Audit Plan template to be completed by the Inspector Generals office. The
Project Manager is not responsible for completing this template.
1.0
GENERAL INFORMATION
1.1
Purpose
1.2
Scope
Describe the scope of the Internal Audit Plan as it relates to the project.
1.3
System Overview
Provide a brief system overview description as a point of reference for the remainder of the document. In
addition, include the following:
Responsible organization
System code
System category
Major application: performs clearly defined functions for which there is a readily
identifiable security consideration and need
General support system: provides general ADP or network support for a variety
of users and applications
Operational status
Operational
Under development
Page 1
1.4
Project References
Provide a list of the references that were used in preparation of this document. Examples of references
are:
1.5
Provide a list of the acronyms and abbreviations used in this document and the meaning of each.
1.6
Points of Contact
1.6.1 Information
Provide a list of the points of organizational contact (POCs) that may be needed by the document user for
informational and troubleshooting purposes. Include type of contact, contact name, department, telephone
number, and e-mail address (if applicable). Points of contact may include, but are not limited to, helpdesk
POC, development/maintenance POC, and operations POC.
1.6.2 Coordination
Provide a list of organizations that require coordination between the project and its specific support
function (e.g., installation coordination, security, etc.). Include a schedule for coordination activities.
Page 2
2.0
AUDIT PROCESS
2.0
AUDIT PROCESS
2.1
Identify the type of Internal Audit being completed. (e.g., financial, performance, operational)
2.2
2.3
Identify roles and responsibilities for each organization and management area within each organization
that will influence the Internal Audit of the project.
2.4
Explain the Internal Audit Process. Include descriptions and sources of forms and checklists that will be
used for the Internal Audit.
2.5
Schedule
Identify and describe all activities and events associated with the Internal Audit. List all deliverables.
Page 1
3.0 Evaluation
3.0
EVALUATION
3.0 Evaluation
3.0
EVALUATION
3.1
Strategy
3.2
Metrics
Describe how Internal Audits will be measured, and the results analyzed.
Page 3-1