Understand the Entity moves the auditor through initial ISA 315 steps commencing with correct ownership information and identification of statutory organs to company analysis including review of operations, financing, and management and governance. Industry and recent public-domain news are reviewed. Risk management analysis and proposed materiality decision making processes are performed.

Risk Identification identifies risks from company analysis sections, preliminary analytical review, ratio signals etc to produce auditor ready risks that including standard Revenue Recognition due to Fraud Risk and Risk of Management Override of Controls as standard. The rationale for the risks being included are explained, can be edited or risks added to or deleted. Risks are automatically categorised as significant, higher or lower and are editable by the auditor.

Line Item Analytics. Income statement and balance sheet line item analysis followed by corresponding scoping in line with materiality. Follow-up with management questions are generated at each stage.

Controls Matching. Client files (control matrix, prior-year audit file, meeting notes, process documentation, policies) are searched to identify relevant controls per classified risk of material misstatement; a primary control is selected and control nature confirmed for each risk — manual, automated, or IT-dependent manual.

Prepare ROMM Audit Procedures. For each classified ROMM with a confirmed primary control, the system plans control testing and the primary substantive approach, then proposes detailed substantive procedures addressing relevant assertions. The audit programme is built bottom-up from risks and controls on the file. Programme preparation time falls sharply — managers review and refine a drafted audit programme rather than assembling control tests and substantive procedures from scratch.

Execute. Planned procedures are executed against the linked risk programme — sample evidence obtained, tests performed, and results documented on working papers with the procedure plan recorded in the header. Fieldwork runs from the signed programme with evidence and audit trail captured as work proceeds — senior review concentrates on conclusions and exceptions, not reconstructing what was done.