1 · Assess
Start with the risk and audit plan
Define the entities, branches, systems and regulatory priorities that need assurance.
For SACCOs
Internal audit evidence your board can follow.
Murikah supports regulated SACCOs with co-sourced internal audit, technology assurance and Assurance OS, so findings move from fieldwork to owned action and board follow-up in one evidence trail.
What matters
Built around governance, evidence and follow-up.
SASRA publishes corporate-governance and risk-management guidance for regulated SACCOs. The practical audit question is whether the board can see the evidence, the risk and the status of management action clearly.
- A risk-based internal audit plan that can be explained to the board and audit committee.
- Evidence, findings and management actions that stay linked through follow-up.
- Technology, cyber, data-protection and operational reviews alongside financial controls.
- Board reporting that shows what is open, overdue and high priority without rebuilding spreadsheets.
2 · Evidence
Run the work in one trail
Keep work papers, review notes, findings, owners and due dates connected.
3 · Report
Give the committee a live position
Report the same findings and actions management is already updating rather than recreating the pack.
Regulatory reference: SASRA corporate-governance guidance ↗ and SASRA risk-management guidance ↗.
For SACCO audit leaders
Start with your next audit cycle
Bring the current plan, open findings and reporting pain points. We will identify the smallest useful starting scope.