Internal Audit Report
Detects internal audit reports containing control assessments and organisational vulnerability findings.
- Type
- regex
- Confidence
- medium
- Confidence justification
- Medium confidence: keyword-based detection requires corroborative evidence for accurate identification.
- Jurisdictions
- global
- Regulations
- Information Privacy Act 2009 (Qld), Privacy Act 1988 (Cth), Security of Critical Infrastructure Act 2018 (Cth)
- Frameworks
- DISP, ISO 27001, NIST CSF
- Data categories
- audit, governance
- Scope
- narrow
- Risk rating
- 8
Should match
Internal audit report— Low-tier probe - report title without substantive audit contentInternal audit report: audit scope, audit objective, and audit opinion.— Medium-tier probe - substantive audit sections without a classified finding responseInternal audit report: high risk finding and audit exception; management response, corrective action, and target completion date.— High-tier probe - classified finding plus management responseTo: Director-General From: Principal Legal Officer Date: 12/08/2026 Subject: Internal audit report Our ref: LS2026-0412 This briefing sets out the Internal audit report for decision.— Populated doc record reaching the 75/85 structure gate
Should not match
Tax audit by the ATO— External tax-audit siblingAudit the financial statements— Financial-audit instructionThe public annual report links to an internal audit report.— Public link mentions only the report titleTemplate example: internal audit report with high risk finding, audit exception, management response, and target completion date.— Template contains otherwise high-tier evidencePolicy guidance: this procedure explains how records about Internal audit report are handled, who may access them and how long they are kept. It contains no records about any person or system.— Policy guidance naming the topic without any record (discovery only)
Known false positives
- External audit or financial audit references. Mitigation: Require internal audit specific terms like internal audit plan or management letter.