Internal Audit Substantive Testing Template for New Zealand

Generate a bespoke document

What is a Internal Audit Substantive Testing?

The Internal Audit Substantive Testing document serves as a critical tool for ensuring thorough and consistent audit testing practices across organizations operating in New Zealand. This document is essential when conducting detailed examination of transactions, balances, and other financial and operational data as part of internal audit engagements. It incorporates requirements from New Zealand's Financial Reporting Act 2013, Companies Act 1993, and relevant XRB Standards, while also adhering to International Standards for the Professional Practice of Internal Auditing. The document provides comprehensive guidance on testing methodologies, sampling techniques, and documentation requirements, ensuring that internal audit teams maintain consistent quality and professionalism in their substantive testing procedures.

Trusted by high-performance teams

Frequently Asked Questions

Is an Internal Audit Substantive Testing document legally binding under New Zealand law?

Internal Audit Substantive Testing documents are not legally binding contracts, but they establish critical audit procedures that must comply with New Zealand's Financial Reporting Act 2013 and Companies Act 1993. While the document itself doesn't create legal obligations, the audit work it guides is essential for meeting statutory compliance requirements and professional auditing standards.

How does Internal Audit Substantive Testing differ from external audit procedures in New Zealand?

Internal Audit Substantive Testing is conducted by internal audit teams for management purposes and operational improvements, while external audits are performed by independent auditors to provide statutory compliance under the Companies Act 1993. Internal substantive testing focuses on risk management and internal controls, whereas external audits primarily aim to express an opinion on financial statements.

How long does it typically take to develop comprehensive Internal Audit Substantive Testing procedures?

Developing comprehensive Internal Audit Substantive Testing procedures typically takes 2-6 weeks depending on organizational complexity and scope. Simple procedures for small companies may take 1-2 weeks, while large organizations with multiple business units and complex operations may require 4-6 weeks to ensure all XRB Standards and regulatory requirements are properly addressed.

Can missing or incomplete Internal Audit Substantive Testing documentation affect New Zealand regulatory compliance?

Yes, missing or incomplete substantive testing documentation can significantly impact regulatory compliance and expose organizations to risks under the Financial Reporting Act 2013. Inadequate documentation may result in failed internal controls, undetected errors, and potential regulatory scrutiny, particularly for companies required to maintain robust internal audit functions.

Which New Zealand regulations specifically govern Internal Audit Substantive Testing requirements?

Internal Audit Substantive Testing in New Zealand is primarily governed by the Financial Reporting Act 2013, Companies Act 1993, and XRB Standards issued by the External Reporting Board. These regulations establish the framework for financial reporting, internal controls, and audit quality standards that substantive testing procedures must support.

Common mistakes companies make when implementing Internal Audit Substantive Testing in New Zealand?

Common mistakes include failing to align testing procedures with XRB Standards, inadequate risk assessment documentation, insufficient sample sizes for testing, and not updating procedures to reflect changes in the Financial Reporting Act 2013. Many organizations also fail to properly document testing rationale and results, which can compromise audit quality and regulatory compliance.

Must Internal Audit Substantive Testing procedures be reviewed by external auditors in New Zealand?

While not legally required, external auditors often review internal audit substantive testing procedures when relying on internal audit work under professional auditing standards. This review helps external auditors assess the effectiveness of internal controls and may reduce the extent of their own substantive testing, particularly for companies subject to the Financial Reporting Act 2013.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

New Zealand

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Internal Audit Substantive Testing

When conducting internal audits in New Zealand, you need comprehensive substantive testing procedures that meet both regulatory requirements and professional auditing standards. An Internal Audit Substantive Testing document provides the framework for systematically examining transactions, account balances, and operational processes to detect material misstatements or control deficiencies.

When do you need this document?

You require substantive testing procedures when performing detailed audit work on high-risk areas, significant account balances, or complex transactions. This document is essential when your internal audit team needs to verify the accuracy and completeness of financial data, test the effectiveness of internal controls, or investigate potential fraud or irregularities. Organizations typically implement these procedures during annual audit cycles, special investigations, or when regulatory compliance requires detailed testing of specific business processes.

Key legal considerations

Your substantive testing procedures must address several critical legal elements to ensure compliance and effectiveness. The document should clearly define testing objectives, establish appropriate sample sizes using statistical or judgmental methods, and specify the nature and extent of testing required. You need to ensure proper documentation of all testing performed, including working papers that support audit conclusions and findings. The procedures must also address confidentiality requirements for handling sensitive information, establish clear criteria for evaluating test results, and define escalation procedures when significant deficiencies are identified. Additionally, coordination protocols with external auditors should be established to avoid duplication of effort and ensure comprehensive audit coverage.

Legal requirements in New Zealand

Under the Financial Reporting Act 2013, your substantive testing procedures must align with applicable financial reporting standards and support the reliability of financial information. The Companies Act 1993 requires organizations to maintain proper accounting records, making substantive testing essential for verifying record accuracy and completeness. You must follow XRB Standards, particularly the International Standards on Auditing (New Zealand), which provide detailed guidance on substantive procedures and audit evidence requirements. The Privacy Act 2020 governs how you handle personal information during testing, requiring appropriate safeguards and access controls. For public sector entities, the Public Audit Act 2001 establishes additional requirements for audit procedures and documentation. Your testing procedures should also incorporate Institute of Internal Auditors (IIA) Standards to ensure professional compliance and maintain audit quality standards recognized internationally.

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it

Ready to agree with confidence?
See Genie in action.