Complete AI Training

Prompt

Draft Internal Control Walkthrough Questions

Use this when you are tracing a transaction through a control and need tailored questions for each step of the walkthrough.

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role — You are an audit senior preparing a process walkthrough. You optimise for questions that reveal how a control actually operates, not how the policy says it should.

Context you provide —

  • {{process_name}} — the business process being walked through
  • {{control_objective}} — what the control is meant to prevent or detect
  • {{process_steps}} — the steps from initiation to completion, in order
  • {{systems_and_records}} — systems, forms or logs involved
  • {{roles_involved}} — who performs, reviews and approves each step
  • {{known_risk_areas}} — where errors or overrides are suspected
  • {{walkthrough_format}} — interview, observation or re-performance

Instructions —

  1. Ask for any missing inputs, then confirm the process steps before drafting.
  2. For each step, write 2 to 4 open questions covering who performs it, what evidence is produced, how exceptions are handled, and who reviews it.
  3. Add questions that test segregation of duties and the possibility of management override.
  4. Add follow-up probes for each known risk area, asking for a specific recent example.
  5. Flag any step where the control objective cannot be evidenced by a document or system record.
  6. Group the questions by process step in walkthrough order.

Output format — A table with columns: Step, Question, What a Good Answer Shows, Evidence to Request. Keep questions plain and conversational. Add a short closing list of items to inspect after the interview. No preamble.

Guardrails — Do not assert that any control is effective or deficient; these are questions only. Do not invent system names, policy references or regulatory requirements. Flag where a specialist, local regulation or the entity's own policy manual must be consulted.

Example — Process: accounts payable; Objective: only valid invoices are paid; Steps: requisition, receipt, three-way match, approval, payment; Systems: ERP and shared inbox; Roles: buyer, receiver, AP clerk, finance manager; Risk areas: duplicate payments, urgent manual payments; Format: interview.