Admin
Maintains access configuration and the organization directories used during audit setup.
Can
- Manage Organizations, business units, audited entities, team members, Users
- View Assessments, audit engagements, Findings, operation receipts
- Audit Management
- Roles and access
Who can do what in Audit Management
Agree who prepares audit work, makes decisions and examines follow-up evidence.
Who can do what
| Role | Assessment planning | Engagements and tests | Controls and risk workpapers | Findings and review | Responses and retests | Evidence and operations |
|---|---|---|---|---|---|---|
| Admin | Edit | Edit | — | Edit | View | Edit |
| Auditor | Edit | Edit | Edit | Edit | View | Edit |
| Audit Manager | Edit | View | View | Approve | Approve | Edit |
| Control Owner | View | View | Edit | View | Edit | Edit |
| Independent Assurance Reviewer | View | View | Edit | Edit | Edit | Edit |
| Chief Audit Executive | View | View | View | View | View | View |
Each role in detail
Auditor
Prepares assessment scopes, engagement tests and findings with linked evidence.
Can
- Manage Assessments, audit engagements, assessment tests, Findings, Risks, workpaper lines, record attachments
- View Controls, business units, audited entities, Organizations, team members, corrective actions, Retests, review decisions, operation receipts
Starts on: Assessment Calendar
Audit Manager
Reviews finding support and authorizes corrective response release within the agreed audit scope.
Can
- Manage Assessments, review decisions
- View audit engagements, assessment tests, Controls, Findings, Risks, workpaper lines, corrective actions, Retests, record attachments, operation receipts, team members, Organizations, business units, audited entities
Reviews and approves
- Approve Findings, corrective actions
Starts on: Assessment Calendar
Control Owner
Maintains control descriptions and prepares corrective responses for review.
Can
- Manage Controls, corrective actions, record attachments
- View Findings, assessment tests, Retests, business units, Organizations, team members, audit engagements, audited entities, review decisions, operation receipts
Starts on: Findings Past Due
Independent Assurance Reviewer
Examines retest evidence and records an independent review of the related finding or response.
Can
- Manage Retests, review decisions, record attachments
- View Assessments, audit engagements, assessment tests, Controls, Findings, corrective actions, Risks, workpaper lines, operation receipts, Organizations, business units, audited entities, team members
Starts on: Workpapers Unposted
Chief Audit Executive
Reads assessment coverage, finding decisions and unresolved operation results across the agreed portfolio.
Can
- View Organizations, business units, audited entities, team members, Assessments, audit engagements, assessment tests, Controls, Findings, corrective actions, Retests, Risks, workpaper lines, record attachments, review decisions, operation receipts
Starts on: Assessment Calendar
Set up Audit Management your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.