Internal Audit Schedule & Register

GeNext MedEd Foundation — Internal Audit Schedule & Register

Document code: GMEF-QA-002
Version: 1.0
Status: Controlled working register

| Audit ID | Domain / programme | Scope | Risk basis | Planned date | Reviewer | Evidence sampled | Findings | CAPA reference | Closure status |
|---|---|---|---|---|---|---|---|---|---|
| | | | Routine / Elevated / Triggered | | | | | | Planned / Open / Verified closed |

Minimum audit cycle
At least annual review of core institutional domains, with more frequent review for active high-volume programmes, newly launched systems or elevated-risk areas.

Triggered audit examples
Certificate discrepancy; serious participant complaint; privacy/data incident; research-governance concern; repeated assessment variance; host-centre change; material partner-role misrepresentation; resource-rights complaint; unresolved corrective action.

Independence
Where practical, the reviewer should not be the sole owner of the process being audited. Conflicts are disclosed and recorded.

Sampling
Audit may sample approvals, attendance, assessments, certificates, faculty records, site evidence, research records, library permissions, version history and archive bundles. Sampling does not replace mandatory review of a known serious concern.