An audit schedule sets out what will be audited, when, and by whom. It is the planning document an audit team works from and the evidence a regulator or certification body asks for when they want to know your audit programme is systematic rather than ad hoc.
Below are 10 free audit schedule templates in MS Excel. The columns are editable and the totals are formulas, so entering your audit areas and dates gives you a working annual plan. Use them for internal audits, compliance reviews, safety inspections or supplier assessments.
1. Annual Internal Audit Plan
Audit areas down the left, twelve months across, with a mark in the month each area falls due. The standard annual programme document, and the one most certification auditors will ask to see first.
MS EXCELDownload Now ↓
2. Financial Audit Schedule
Organised by account area — receivables, payables, payroll, fixed assets, cash — with testing dates and the auditor assigned to each. Built around the year-end cycle rather than a rolling programme.
MS EXCELDownload Now ↓
3. Compliance Audit Schedule
Each regulation or standard clause on its own row, with the review date, responsible owner and current compliance status. Makes it straightforward to show which obligations have been checked and when.
MS EXCELDownload Now ↓
4. Quality Management System Audit Schedule
Process areas mapped against standard clauses, so every requirement is covered at least once in the cycle. Designed for organisations working to a management system standard where full coverage has to be demonstrable.
MS EXCELDownload Now ↓
5. Health and Safety Audit Schedule
Inspection areas with a frequency column, since safety checks run on different cycles — fire equipment quarterly, machinery monthly, first aid weekly. Works alongside a cleaning schedule where hygiene standards are part of what gets audited.
MS EXCELDownload Now ↓
6. Inventory and Stock Audit Schedule
Locations or stock categories with count dates and a variance column comparing recorded against physical. Suits rolling cycle counts rather than one annual stocktake, which is where most discrepancies are actually caught.
MS EXCELDownload Now ↓
7. IT and Information Security Audit Schedule
Access reviews, backup verification, patch status and system checks, each with its own review interval. The frequency column matters more here than elsewhere, because an access review six months stale is close to worthless.
MS EXCELDownload Now ↓
8. Supplier and Vendor Audit Schedule
Suppliers listed with a risk rating that drives how often each is assessed, plus the date of the last and next audit. Lets you concentrate effort on the vendors whose failure would actually hurt.
MS EXCELDownload Now ↓
9. Audit Schedule with Findings and Follow-Up
Carries the plan and the outcome on one sheet: findings raised, corrective action owner, due date and closure status. An audit programme with no follow-up column is where most non-conformities quietly go to die. Record the closing meeting with meeting minutes so the agreed actions are documented too.
MS EXCELDownload Now ↓
10. Blank Audit Schedule Template
Column headings and formatting with no preset audit types, so you can build a programme around whatever your organisation actually audits. The right starting point if none of the nine above matches your structure.
MS EXCELDownload Now ↓
What Belongs on an Audit Schedule
An audit schedule that cannot answer these seven questions will not satisfy an external reviewer, however neat it looks.
- Audit area or process — what is being examined, named specifically rather than as “Finance”.
- Scope and criteria — which standard, policy or clause the area is being audited against.
- Planned date — and a separate column for the date it actually happened.
- Auditor — named, and independent of the area being audited.
- Frequency — how often this area recurs, driven by risk rather than by convenience.
- Status — planned, in progress, complete or deferred, with a reason for any deferral.
- Findings and closure — what was raised, who owns the fix, and when it was signed off.
How to Build an Annual Audit Schedule
- List every area in scope. Work from your process map or org chart so nothing is left out by omission rather than decision.
- Rate each area by risk. Consider financial exposure, regulatory consequence and how recently it last had problems. High-risk areas get audited more often; low-risk ones may only need an annual look.
- Set frequencies from the risk rating, not from habit. Auditing everything quarterly spreads your resource too thin to find anything.
- Spread the work across the year. Check the dates against month-end closes, stocktakes and peak trading, since an audit landing in the busiest week gets deferred.
- Assign independent auditors. Nobody audits their own work — this is the first thing an external assessor checks, and the easiest finding to avoid.
- Leave contingency. Keep a month or two lightly loaded for follow-up audits on areas that fail, because some will.
- Review it quarterly against what has actually been completed. A schedule showing six overdue audits is more useful than one quietly rewritten to hide them.
Why a Documented Audit Schedule Matters
It Demonstrates a Systematic Programme
Certification bodies and regulators look for evidence that audits follow a plan rather than happening when someone remembers. The schedule itself, with completed dates filled in, is usually the cleanest proof of that.
It Directs Effort Toward Real Risk
Without a risk-rated plan, audit attention drifts to whichever area is easiest to examine. A schedule forces the uncomfortable judgement about where problems are most likely and most costly.
It Prevents Areas Being Quietly Skipped
A process with no owner tends to go unaudited for years, and that is frequently where problems accumulate. A written programme makes the gap visible.
It Makes the Year Predictable for Everyone
Departments can prepare properly when they know an audit is coming in March. Posting the dates alongside your monthly schedule means fewer last-minute clashes and fewer deferrals.
Frequently Asked Questions
What is the difference between an audit schedule and an audit plan?
The schedule is the calendar — which areas are audited, when, and by whom across the year. An audit plan is the detail for one specific audit: its objectives, scope, criteria and the tests to be performed. The schedule says that Payroll is audited in May; the plan says what the May audit will examine.
How often should internal audits be carried out?
It depends on risk rather than on a fixed rule. High-risk areas are commonly audited quarterly or half-yearly, lower-risk ones annually. Where you work to a certification standard, the requirement is usually that all areas are covered within a defined cycle — check the wording of your own standard.
Can someone audit their own department?
No. Auditor independence from the area being examined is a basic requirement of practically every audit standard, and a finding against it undermines the whole programme. In small organisations, people from a different function or an external contractor usually fill the gap.
What happens if a scheduled audit is missed?
Record the deferral and the reason on the schedule, then reschedule it. Deleting a missed audit from the plan is far worse than showing it as overdue, because it leaves no record that the gap existed.
Can I open these templates in Google Sheets?
Yes. Upload the .xlsx file to Google Drive, right-click it and choose Open with → Google Sheets. Formulas and conditional formatting carry across in most cases.
Are these templates free for commercial use?
Yes. Use them in any organisation at no charge and adapt them to your own standards and branding. You cannot resell the template files themselves.
