How to configure and resolve Sprinto workflow check for Internal Audit

An internal audit serves as a structured review process to evaluate the effectiveness of your organisation’s information security controls, risk management, and compliance practices. Conducting internal audits periodically ensures that gaps are identified early and that your compliance posture remains strong before external audits.

Sprinto’s workflow check helps you track, document, and provide evidence of your Internal Audit activity. The collected evidence is later used during compliance audits across frameworks such as ISO 27001, SOC 2, and GDPR.

Before You Begin

Ensure that you:

• Have administrative access to your Sprinto account.

• Know the frequency at which internal audits are to be performed (e.g., quarterly, annually).

• Have access to internal audit reports or summary findings that can be uploaded as evidence.

Configuring the Workflow Check

1. Log in to your Sprinto account as an Administrator.

2. Navigate to Data Library → Workflow Checks.

1. Click Create Check → Add from template.

2. Locate Internal Audit should be conducted periodically from the checklist and click Enable.

3. On the Add Workflow Check page, click Edit to:

   • Set the desired frequency (default: every 12 months).

   • Assign responsible personnel and reviewers.

4. Click Add check.

Once enabled, the check status will appear as Due, Critical, or Failing until evidence is uploaded.

Resolving the Check

Here's a short video on how to resolve this workflow check.

1. Log in to the Sprinto Admin Portal.

2. Go to Data Library → Workflow Checks.

3. Select the Internal Audit should be conducted periodically check.

4. Click Upload evidence.

1. Enter the Evidence Record Date, then choose how to upload:

   • File: Upload the audit report or summary file directly.

   • Link: Provide a link to the internal audit documentation stored securely online.

2. Click Finish.

The check will automatically update to Passing once the evidence is verified.

Evidence Requirements

You can provide one or more of the following:

• Internal audit report or summary.

• Evidence of meeting minutes or corrective actions.

• Screenshots of the audit management tool or tracker showing completed audit status.

Frequency

The default frequency is annual, but you can adjust it to quarterly or bi-annual depending on your compliance requirements.