Digital work tools for organisationsTemplates · Work tools · Practice Kits for organisations
Audit & evidence · integrated work system

Audit Readiness Practice Kit – Prepare for Audits & Compile Evidence

Work directly with a prepared system covering audit programme, scope, criteria, evidence structure, sampling, workpapers, findings, CAPA and management decisions.

Implement more efficiently & reduce setup effortStart directly with prepared work tools — less time spent on research and building the system from scratch.
  • Structure audit scope and review path define audit mandate, scope, criteria, period and relevant controls in a traceable way.
  • Bring evidence and findings together manage evidence requests, sampling, workpapers and findings in one connected work status.
  • Document actions and decisions record root cause work, CAPA, approvals and management follow-up in a consistent structure.
46 files19 Word work tools2 Excel cockpitsOrganisation licence
View purchase detailsView contents & work toolsView German edition
Product at a glance

Structure internal audits from scope to decision

The Audit Ready Practice Kit is a connected working system for planning, performing, documenting and following up internal audits. It helps organisations turn an audit mandate into a traceable working status with scope, criteria, audit programme, evidence requests, sampling, workpapers, findings, CAPA and management decisions.

The central methodological reference is ISO 19011. Depending on the selected review topic, the package can also support the structured preparation of audit criteria and evidence for privacy, the EU AI Act, the Cyber Resilience Act (CRA), NIS2, ISMS topics and other internal or external governance requirements.

The package does not provide a certificate and does not replace specialist review by the responsible functions. It does provide a practical and traceable implementation framework for audit readiness and internal audit work.

Product typeDigital B2B Practice Kit
Designed forAudit, quality management, compliance and operational teams
File formatsDOCX · XLSX · PDF · MD · JSON · ZIP
DeliveryDigital download through CopeCart
ProviderSP Services GmbH
Price€299.00 incl. VAT

What is the Audit Readiness Practice Kit?

A connected working and evidence system for preparing and following up internal audits.

Which tasks does it support?

Connect the audit programme, scope, evidence, sampling, findings, CAPA, reporting and management decisions.

What is included, and what is outside the scope?

Editable cockpits and work tools; no certification, external assurance or individual audit performance.

From the starting point to a documented work status

What this product helps you do

Starting point

Scope, controls, evidence, sampling, workpapers and open actions are often held in separate files. A connected work status makes their relationships and management decisions traceable.

Outcome

Use an integrated system for a quick review, a complete internal audit cycle or preparation for an external review, with cockpits, editable work tools, a worked example, evidence references and AI support under human control.

From scope to decision

Connect the audit programme, controls, evidence, tests, findings and CAPA within one workflow.

Blank system and worked example

Start with a blank workbook and use the synthetic end-to-end example for orientation.

AI support under human control

Ten audit assistants support drafting and review suggestions; specialist decisions remain with the responsible people.

Implement more efficiently

A prepared structure for your own implementation

The audit programme, scope and evidence logic, work templates and cockpits form a prepared, connected system. Your team can build its own audit case within that structure.

Reduce preparation effort

Prepared processes, work tools and evidence structures help reduce internal research and setup effort.

Use your internal expertise

Use your team's existing expertise within a structured working process.

Bring in specialist expertise where needed

Individual legal, technical and specialist questions remain with the responsible functions. External support can focus on the points that require an individual review or decision.

TASKS & REQUIREMENTS

Audit: key working questions

The Practice Kit provides an audit working system. It does not replace licensed standards, specialist definition of audit criteria, certification or external assurance.

How do we plan, perform and document a structured internal audit?

ISO 19011:2026

Build the audit programme, mandate, scope and criteria, interviews, sampling, workpapers and report systematically.

Work tools in the Practice Kit: Audit Programme and Annual Planning; Audit Mandate / Scope / Criteria / Plan; Interview and Sampling Package; Audit Performance Record; Audit Report

Outcome / evidence: A connected internal audit file from planning through performance to reporting.

Can we organise privacy controls and their evidence for an audit?

GDPR · Article 5(2) · Article 24

Record and connect controls, owners, evidence and reviewer sign-offs for review.

Work tools in the Practice Kit: Audit Checklist Master; Control Evidence Matrix; Evidence Index and Evidence File

Outcome / evidence: An organised control-to-evidence mapping with a documented review status.

Is our AI governance evidence prepared for the selected audit scope?

EU AI Act · depending on scope · particularly Articles 4, 26, 27, 50 and 73

Select relevant AI controls, test evidence, document gaps and track actions.

Work tools in the Practice Kit: Audit Checklist Master; Control Evidence Matrix; Evidence Index; Findings and CAPA

Outcome / evidence: An AI governance audit file with reviewed evidence and documented findings and CAPA.

Can we present CRA and product security evidence with a traceable audit trail?

CRA · depending on scope · particularly Articles 13–14 and 31–32 and Annexes I and VII

Select product security controls and evidence, perform sampling and track findings.

Work tools in the Practice Kit: Audit Checklist Master; Control Evidence Matrix; Evidence Index; External Audit Request List (PBC)

Outcome / evidence: Organised product security evidence with a review trail, findings and PBC readiness status.

Are our NIS2, incident and supply chain controls ready for audit review?

NIS2 · Articles 20–21 and 23 · Implementing Regulation (EU) 2024/2690 · Section 5

Select relevant security controls, review evidence, perform interviews and sampling, and document applicable technical criteria.

Work tools in the Practice Kit: Audit Checklist Master; Interview and Sampling Package; Audit Performance Record / Workpapers; Findings and CAPA

Outcome / evidence: A reviewable security / NIS2 audit file with sampling, findings and actions.

How do we structure an ISMS audit scope?

ISO/IEC 27007:2020

Integrate ISMS criteria and controls into the audit programme, checklists, sampling and evidence testing.

Work tools in the Practice Kit: Audit Programme; Audit Checklist Master; Control Evidence Matrix; Workpapers

Outcome / evidence: An ISMS audit path with a traceable criteria and evidence review.

How do we prepare an AIMS audit scope without claiming certification?

ISO/IEC 42001:2023

Transfer criteria from the licensed AIMS standard into the scope and control / evidence review.

Work tools in the Practice Kit: Audit Mandate / Scope / Criteria / Plan; Audit Checklist Master; Control Evidence Matrix; Evidence Index

Outcome / evidence: An AIMS-oriented internal audit file; no certification or conformity statement.

How do we manage audit readiness, PBC requests, findings and management decisions?

Practice Kit working method · no separate external obligation

Plan a readiness sprint, prioritise evidence gaps, manage PBC requests and document management review.

Work tools in the Practice Kit: 10-Day Audit Readiness Sprint; Audit Readiness Framework; Management Review and Audit Readiness Decision; External Audit Request List (PBC)

Outcome / evidence: An internal audit readiness status supported by actions, evidence and management records; no external assurance opinion.

Package contents

What is included

Coordinated work tools for individual or combined use.

Audit Readiness Cockpits

2 × XLSX

Blank workbook for your own use and a populated synthetic example.

  • Audit universe and scope
  • Control Library
  • Evidence Index
  • Findings, CAPA and management status

Audit work templates

19 × DOCX

Editable templates for planning, review, evidence, test results and closure.

  • Audit programme and scope
  • Checklists and evidence requests
  • Sampling, interviews and workpapers
  • Findings, CAPA, report and management decision

Synthetic end-to-end worked example

Worked example package

A populated case illustrates the connections between IDs, evidence, tests, findings and the closure decision.

  • realistic example data
  • no real customer information
  • connected cross-references
  • orientation for your own workflow

Glossary and evidence library

Working references

Structured terminology, evidence expectations and typical evidence types for preparation.

  • control objectives
  • evidence types
  • quality assessment
  • evidence and filing structure

Ten AI work assistants

Templates and guidance

Support for drafting, review questions and structured analysis under human control.

  • clear inputs and working steps
  • make uncertainty visible
  • review results with specialist judgement
  • no automated audit decision
Product preview

Explore the work tools

Complete worked example – Audit Readiness Practice Kit – Prepare for Audits & Compile Evidence
Complete worked example
Evidence index and evidence file – Audit Readiness Practice Kit – Prepare for Audits & Compile Evidence
Evidence index and evidence file
Example audit cockpit – Audit Readiness Practice Kit – Prepare for Audits & Compile Evidence
Example audit cockpit
Findings and CAPA – Audit Readiness Practice Kit – Prepare for Audits & Compile Evidence
Findings and CAPA
Reusable working process

Follow the complete audit cycle

Four working phases connect preparation, review, decisions and closure.

Decisions and approvals remain with the responsible people.

Build the working baseline

Choose the working pathChoose a quick review, a complete internal audit or preparation for an external review.
Define the audit object, scope and criteriaDocument the audit ID, period, requirements, roles and deliberate exclusions.
The audit path, scope and criteria are documented.

Review & assess

Select controls and review depthActivate relevant controls and document the selected review methods.
Request and assess evidenceManage owners, deadlines, filing locations, versions and evidence quality in the index.
Perform sampling, interviews and testsDocument reproducible results in connected workpapers.
Controls, evidence and review results are connected in a traceable way.

Findings & decisions

Assess findingsRecord relevant findings and document deliberate non-findings.
Work through findings and CAPAManage causes, actions, owners, deadlines and closure evidence.
Findings, causes and actions are assessed and assigned.

Closure & follow-up

Close the report and readiness decisionDocument the audit report, residual risks, open issues and time-limited management decision.
The report, residual risks and management decision are documented.
Quick start

Your first working steps

The quick start creates a basic structure and prioritised work list. Continue with the full workflow at your own pace.

  • Create a dated working copy and open Audit_Ready_Cockpit_BLANK.

  • Create an audit object with a unique AU-ID in the Audit Universe.

  • Define the audit ID, scope, criteria and review period.

  • Activate relevant controls and explain exclusions.

  • Record initial evidence requests with an owner and deadline.

  • Use the example cockpit and worked case for orientation.

Designed for

  • Audit, compliance and quality owners
  • Information security, privacy and AI governance teams
  • Process and control owners
  • small and medium-sized organisations with internal or external review requirements

Prerequisites

  • Microsoft Excel and Word or broadly compatible Office software
  • Access to relevant management system documents and evidence
  • designated owners and specialist adaptation to the scope, criteria and organisation

Not included

  • Performance of an internal or external audit by SP Services
  • individual legal, privacy, certification or standards advice
  • certification, audit opinion, external assurance or audit guarantee
  • customer-specific review, customisation or ongoing regulatory updates
Related next steps

Further Practice Kits and support

Supplier Cybersecurity Practice Kit

Implementing the Cyber Resilience Act (CRA) - Practice Kit

Clear before purchase

Price, licence, support and updates

Licence

Private purchase permits personal use; a business purchase permits internal use within one legal organisation. Individualised results may be shared for their intended purpose; the original package, blank templates and reusable source or assistant files may not be redistributed outside the licensed scope.

Support

Support for download, file structure and reproducible product errors; no individual audit or management system advice.

Updates

The purchased version applies. Technical corrections follow the binding purchase information; ongoing regulatory updates are not included.

Frequently asked questions

Questions before purchase

For further technical product questions, contact digitalprodukte@sp-services-gmbh.de.

Is an internal audit readiness status a certification?+

No. It is an internal, scope-specific, time-limited readiness assessment. The kit provides no certification, audit opinion or external assurance.

Which working paths does the package support?+

Perform a quick review, document a complete internal audit cycle or prepare evidence for an external review.

May I edit the files?+

Yes. The cockpits and work templates are intended for adaptation within the licensed scope.

May I share results with auditors or customers?+

Individualised results may be shared for their intended purpose. The original library, blank templates and reusable source files may not be redistributed outside the licensed scope.

Do the AI assistants make audit decisions?+

No. They support drafts and review suggestions. Qualified people must review and approve findings, risk acceptance, closure and management decisions.

Does the package include internal audit checklist templates?+

Yes. The checklists form part of a complete audit working system and connect to scope, evidence, sampling, findings and actions.

Can I track the audit plan, findings and CAPA in Excel?+

The package includes editable Excel cockpits and Word work tools for planning, evidence, findings, corrective actions and management decisions.

Can the Practice Kit support ISO 9001 audits?+

It can be adapted as a working basis for management system audits. Responsible specialists must define the standard criteria, certification context and audit scope.

What role does ISO 19011 play in the Audit Readiness Practice Kit?+

ISO 19011 is the methodological reference for audit principles, programmes, planning, performance and reporting. The standard is not included. Define the criteria and scope from requirements relevant to your organisation.

Can I review AI Act, CRA or NIS2 evidence with the kit?+

Yes, where these requirements are part of your defined audit scope. The kit supports traceable documentation of controls, evidence, interviews, sampling, findings and CAPA. It does not replace legal interpretation or certification.

Can I prepare an ISO/IEC 42001-oriented audit scope?+

Yes. Transfer criteria from a lawfully used ISO/IEC 42001 edition into the scope, checklists and control / evidence review. The Practice Kit contains no standard text and provides no ISO/IEC 42001 certification or conformity statement.

Ready for the next step?

Audit Readiness Practice Kit – Prepare for Audits & Compile Evidence

€299.00 incl. VAT. Binding purchase and delivery information is provided in the CopeCart checkout.

Buy now
Audit Readiness Practice Kit – Prepare for Audits & Compile Evidence€299.00 incl. VAT
Buy now