1 · Govern
Protect independence and scope
Define the mandate, reporting line and risk-based plan before fieldwork starts.
For banks and microfinance
Audit evidence that survives regulatory and board scrutiny.
Murikah combines specialist assurance with Assurance OS for institutions that need a clear chain from risk assessment and fieldwork to finding ownership, remediation and committee reporting.
What matters
Strong internal control needs a visible third line.
CBK's published Prudential Guidelines place internal audit among the key internal-control functions and require an effective internal audit department. The operating challenge is keeping that independence while making evidence, review and follow-up easier to inspect.
- Independent internal audit with clear reporting to the appropriate board or audit-committee structure.
- Operational, technology, cyber and data assurance that can sit alongside financial and compliance reviews.
- A review trail that shows evidence, reviewer sign-off, finding ownership and remediation status.
- Group and multi-entity visibility without losing the accountability of each regulated entity.
2 · Test
Keep evidence reviewable
Capture work papers, supporting evidence, review notes and sign-off in the same workflow.
3 · Follow up
Make remediation visible
Track owners, dates, overdue actions and committee reporting from the same records.
Regulatory reference: CBK legislation and prudential guidelines ↗.
For regulated financial institutions
Start with the assurance gap that needs attention
Bring the current audit plan, open findings or specialist review need. We will scope the smallest useful starting point.