Narratives
How each process runs.
All policies & documentation services
Policies & Documentation
Internal Controls Documentation
FinAura documents your internal controls so anyone can see how they work: process narratives and flowcharts, the risks in each process, the control that addresses each risk, who performs it, how often and how it is evidenced. It serves as your controls framework, the base for testing, and the evidence boards and auditors look for.
- Written for your company, not templates
- Drafting support, ready for legal review
- Bangalore and across India
What is covered
What Internal Controls Documentation Covers
Controls made visible.
Flowcharts
Flows at a glance.
Risk and control matrix
Risk, control, owner, evidence.
Entity-level controls
Governance and IT.
Evidence rules
What proves a control ran.
Updates
After changes, every year.
How the month runs
How It Works
Scope, walk through, document, sign off.
Step 1
Scope
- Processes
- Locations
- Systems
Step 2
Walk through
- Owners
- Documents
- Systems
Step 3
Document
- Narratives
- Flowcharts
- Matrix
Step 4
Sign off
- Owners
- Management
- Test plan
Your part
What We Need From You
- 01Process owners' time
- 02System access
- 03Existing policies and SOPs
- 04Previous audit findings
Our part
What You Get
- Documented controls framework
- A risk and control matrix
- Evidence rules for each control
- A base for testing
A common question
How is this different from the internal financial controls service?
Our internal audit team's IFC documentation focuses on controls over financial reporting for companies with IFC reporting duties. This service documents controls across finance and operations for any company that wants its framework written down.
Where both apply, the work is done once and serves both.
See internal controls testingFrameworkSigned off
ControlsDocumented
ProcessesWalked through
Who it is for
Who It Is For
Companies formalising controls
From habit to framework.
Companies preparing for investors
Governance expected.
Companies after a fraud
Controls written and owned.
Boards
Visibility of controls.
The rules, in plain English
What the Law Says
Companies Act, 2013
Section 134(5)
Directors of listed companies report that internal financial controls are adequate and operating; documented policies and procedures are the evidence.
Official source: mca.gov.inThis is general information, not advice for your situation; we confirm what applies to you before any work starts.
Questions we get asked
Internal Controls Documentation: Questions, Answered
What is a process narrative?
A written description of how a process runs, step by step, highlighting where controls operate.
Do small companies need controls documentation?
Not by law in most cases, but a short framework helps when the team grows or an investor asks.
Who owns the documentation?
Each process owner owns their part; finance or internal audit keeps the whole up to date.
Is it reviewed every year?
Yes, and after system or process changes.
Often Taken Together
All 11 Policies & Documentation services01Policies & DocumentationSOP DocumentationStep-by-step procedures for finance, admin and operations, with forms and checklists, written with the people who do the work.02Policies & DocumentationDelegation of Authority MatrixWho can approve what, up to how much, written down and built into your systems.03Systems & ControlsInternal Audit & ControlsInternal audit, controls design and testing, SOP and process implementation.