Audit Program Management and Administration
What the candidate must know
An audit program is the set of arrangements for a particular audit or group of audits, including planning, resources, procedures, and records. Program management covers establishing objectives, assigning responsibilities, scheduling, resourcing, monitoring performance, and maintaining records. Know the audit program manager role: authorizes the program, ensures resources and competence, reviews results, and reports to top management.
Key administrative elements: audit plan (schedule of audits over a period), audit scope and criteria per audit, auditor assignment avoiding conflicts, document and record control for audit files, and performance indicators (e.g., audit completion rate, findings closure rate, cost per audit). Understand risk-based scheduling: higher-risk processes/areas audited more frequently.
Traps
Questions confuse the audit program (the overall framework/schedule) with an audit plan (the plan for one audit). Another trap: assuming the program manager must personally conduct audits - the role is oversight, not execution. Watch for items suggesting audit frequency should be uniform; risk-based frequency is expected. Also, records of the audit program must be retained as evidence of effective implementation.
Worked example / rule of thumb
Rule of thumb: Program = portfolio; Plan = one engagement. If the stem describes a multi-year schedule and resource allocation, it is program-level. If it describes scope, criteria, and logistics for a single audit, it is plan-level. Example: a 12-month schedule prioritizing high-risk suppliers is program management; the checklist and itinerary for next Tuesday's supplier visit is the audit plan.