Human Resources Audit
A practical starting point for assessing whether people processes are authorised, documented, fair and aligned with organisational policies from recruitment through exit.
What are we trying to establish?
Determine whether people processes are authorised, documented, fair and aligned with organisational policies from recruitment through exit.
Risks worth paying attention to
What should you request?
- Human Resources policies and organisation structure
- Employee master list and personnel files
- Recruitment and approval records
- Performance appraisal records
- Leave and attendance reports
- Training records
- Disciplinary records
- Exit clearance and termination records
Understand the process before testing.
- Who initiates, reviews and approves transactions?
- Which duties should be separated?
- What system controls and approval limits apply?
- How are exceptions identified, approved and monitored?
- How does management know key controls actually operated?
Practical tests you can perform
Test recruitment approvals and supporting documents
Obtain appropriate evidence, investigate exceptions and document your conclusion.
Review completeness of selected personnel files
Obtain appropriate evidence, investigate exceptions and document your conclusion.
Verify promotions and changes to approved authority
Obtain appropriate evidence, investigate exceptions and document your conclusion.
Review performance appraisal completion
Obtain appropriate evidence, investigate exceptions and document your conclusion.
Test leave balances and attendance controls
Obtain appropriate evidence, investigate exceptions and document your conclusion.
Review mandatory training completion
Obtain appropriate evidence, investigate exceptions and document your conclusion.
Check exit clearance and timely access removal
Obtain appropriate evidence, investigate exceptions and document your conclusion.
Analyse employee turnover and recurring vacancies
Obtain appropriate evidence, investigate exceptions and document your conclusion.
Things that should make you look deeper
- Transactions or activities outside normal patterns
- Missing or retrospective approvals
- Repeated exceptions without root-cause action
- Manual adjustments with weak supporting evidence
- Key controls dependent on one person
- Management reports that cannot be reconciled to source records
Questions that can open up the process
- What can go wrong in this process?
- Which controls are most important, and who performs them?
- Where does the process depend heavily on manual intervention?
- Which exceptions occur most often, and why?
- What information does management use to know the process is working?
Need a more detailed checklist?
Steal My Checklist contains ready-to-use audit procedures designed to help you structure fieldwork across key business areas.
Get Steal My Checklist