Internal Audit Checklist for Inventory Management

SOP-INV-042: Internal Audit Protocol for Inventory Management

1. Document Control Block

2. Executive Summary & Scope

This document delineates the mandatory procedures for conducting a comprehensive internal audit of the Template Registry inventory ecosystem. The objective is to validate the integrity of physical stock against ERP digital records, identify variance drivers, and ensure compliance with Sarbanes-Oxley (SOX) reporting standards and GAAP inventory valuation protocols. This SOP applies to all raw materials, WIP (Work-in-Progress), and finished goods held within centralized and decentralized storage facilities.

3. Prerequisites & Tool Requirements

• System Access: Tier-3 read/write access to the ERP (SAP/NetSuite) and WMS (Warehouse Management System).
• Equipment: Calibrated barcode scanners (RFID/Laser), industrial tablets with audit modules.
• Documentation: Access to the previous audit report (SOP-INV-041-A) and current cycle count variance logs.
• PPE: Steel-toed boots, high-visibility vest, and hard hat required for floor access.
• Certifications: Auditor must hold current 'Inventory Compliance Specialist' (ICS) certification.

4. Roles & Responsibilities (RACI Matrix)

Key: R=Responsible, A=Accountable, C=Consulted, I=Informed

5. Step-by-Step Operational Procedure

Phase I: Preparation & Baseline Reconciliation

• Freeze all inventory movements in the target facility (Stop-Ship/Stop-Receive protocols initiated).
• Extract real-time inventory "snapshot" from ERP for current timestamp.
• Verify calibration logs for all scanning equipment utilized by the audit team.

Phase II: Execution of Physical Count

• Perform Blind Count: Audit team records quantities without sight of ERP digital balance.
• Validate Serial/Batch numbers for high-value SKU assets.
• Inspect storage environment for physical damage, expiration, or unauthorized stock movement.

Phase III: Data Synthesis & Variance Analysis

• Import physical count data into the Variance Reconciliation Module.
• Isolate discrepancies exceeding the +/- 0.5% threshold.
• Categorize variances into: Administrative Error, Shrinkage (Theft/Damage), or Vendor/Receiving Discrepancies.

6. Quality Assurance & Verification Criteria

Audit findings must meet the following benchmarks to be considered a 'Passing' score:

• Accuracy Threshold: 99.5% systemic accuracy relative to physical count.
• Variance Resolution: 100% of discrepancies > $500.00 must have an attached incident report and root cause analysis (RCA).
• Timeliness: Audit report issuance must occur within 72 hours of cycle completion.
• Compliance: 100% alignment with internal security controls (e.g., restricted access logs).

7. Practical Troubleshooting Scenarios

Scenario A: Massive Negative Discrepancy (Ghost Inventory)

• Observation: System shows 500 units; physical count shows 0.
• Corrective Action: Immediate trace-back of the last 10 'Shipment Out' manifests. Cross-reference with Customer Receipt Sign-offs. If no shipping record exists, trigger an automatic 'Security Breach' protocol and escalate to the loss prevention team.

Scenario B: Unidentified Pallet (No SKU/Tag)

• Observation: Pallet found in staging area not reflected in WMS.
• Corrective Action: Move to 'Quarantine Zone'. Tag with 'Unknown Origin' label. Execute a reverse-lookup based on recent Vendor Receipts in the last 48 hours to identify the procurement origin. Do not re-enter into active inventory until identification is finalized.

Scenario C: ERP System Sync Failure

• Observation: Audit handhelds failing to push data to the central server.
• Corrective Action: Cease count immediately. Initiate local-file export to secure encrypted USB drive. Do not resume scanning until IT Operations confirms local-to-server handshake is stable.