Process and procedure documents

Many organizations maintain business processes and procedure manuals using narratives and flowcharts, which clearly describe the responsibilities of employees based on their roles. Process and procedure manuals help to ensure that the managers responsible for the processes (business process owners), and internal auditors share a common understanding of a process. Process and procedure manuals should be updated periodically, as and when required. The accuracy of these documents is essential for risk assessment and controls verification.

The process narratives should include all the subprocesses and procedures that are performed by employees responsible to ensure that there is a complete picture of how the process is actually executed. Process narrative should describe manual procedures as well as procedures enabled through software applications, such as ERP systems that enable the process. Process documentation may also include scope of the process, reference...