Appendix 7A: Case Study—Developing a Multi-year, Risk-based Internal Audit Plan for a Retail Chain
Resourcing Schedule for 2024
A project resourcing schedule lists project requirements and matches them with available resources. A typical annual resourcing schedule details the engagement’s size. It includes a list of the audit activities planned for that year, information about the number of hours and personnel required to complete each activity, and a timeframe for completion.
Buy and Large’s resourcing schedule for the current year (2024) is presented below. This resourcing schedule is typical of such schedules.
| Activity Title | Engagement Size | Hours | Personnel Assigned | Scheduled Time of Year |
|---|---|---|---|---|
| Cybersecurity Management Audit | Large | 825 hours | 5 | Q1 (Jan – Mar) |
| Regulatory Compliance Framework Audit | Large | 825 hours | 5 | Q2 (Apr-Jun) |
| Financial Reporting Systems Audit | Medium | 550 hours | 4 | Q1 (Jan – Mar) |
| Market Dynamics and Adaptability Audit | Medium | 550 hours | 3 | Q2 (Apr-Jun) |
| Economic Impact Assessment | Medium | 550 hours | 3 | Q3 (Jul – Sep) |
| IT Infrastructure Review | Small | 330 hours | 2 | Q3 (Jul – Sep) |
| Supply Chain Efficiency Review | Small | 330 hours | 2 | Q4 (Oct-Dec) |
| Privacy Policy Implementation Review | Small | 330 hours | 2 | Q4 (Oct-Dec) |
| Cybersecurity Consulting Project | Consulting | 330 hours | 2 | Q1 (Jan – Mar) |
| Supply Chain Strategy Consulting | Consulting | 330 hours | 2 | Q3 (Jul – Sep) |
| Administrative Tasks | N/A | 500 hours | Varies | Throughout the Year |
| Continuing Professional Education (CPE) | N/A | 300 hours | Varies | Throughout the Year |
