Client engagement quality review
Engagement-level quality review covering acceptance, independence, scoping, documentation and deliverable review.
ISO 9001
18 questions~45 minquarterly
Typically run by Quality Partner / Engagement Reviewer
Loading AuditFlow…
Prof. Services
Consultancies, law firms, accounting practices, agencies and BPO providers.
The job you're hiring this for
Satisfying client security questionnaires and ISO 27001 surveillance audits without a dedicated compliance headcount.
Every one carries weighted questions, auditor guidance and clause references — ready to run, or to edit into your own house standard.
Engagement-level quality review covering acceptance, independence, scoping, documentation and deliverable review.
Typically run by Quality Partner / Engagement Reviewer
Physical and digital confidentiality controls in a professional office — the failure mode behind most client data incidents.
Typically run by Information Security / Office Manager
Reviews whether the continuity plan was actually exercised and whether recovery objectives were met in practice.
Typically run by BCM Coordinator
Traces recorded time through to the client invoice — rate application, write-offs, disbursements, unbilled work in progress and client money.
Typically run by Finance Manager / Internal Audit
Whether client and personal records are kept only as long as needed and provably destroyed after — across paper, email, file shares, cloud and backups.
Typically run by Information Governance Lead
Due diligence, contracting, access control and quality oversight of the associates and subcontractors doing work in the firm's name.
Typically run by Operations / Quality Manager
Checks that every practitioner is licensed for the work being sold, that CPD is current, and that the indemnity policy actually covers the services delivered.
Typically run by Practice Manager / Compliance Officer
Security of client data when the work happens on home networks, personal devices and in public spaces.
Typically run by Information Security Manager
Identity, beneficial ownership, sanctions and source-of-funds checks on a sample of newly onboarded clients, plus how that identity data is held.
Typically run by MLRO / Compliance Officer
Traces a sample of new starters, internal moves and leavers to prove access was granted on approval and removed on time across every system.
Typically run by HR Manager / IT Security
Whether scope, schedule, risk and change on a client project are managed on evidence rather than in the delivery lead's head.
Typically run by Delivery Director / PMO
Each of these has a real control library in the product — questions map to specific clauses, so gap analysis shows you what is genuinely unevidenced.
The international standard for information security management systems.
23 controls mapped
The world's most widely adopted quality management system standard.
21 controls mapped
Business continuity management — impact analysis, strategies and tested plans.
12 controls mapped
EU privacy regulation applying to any organisation processing EU residents' data.
16 controls mapped
India's personal data protection law, with consent and breach-notice obligations.
19 controls mapped
AICPA trust services criteria attestation, expected by US enterprise buyers.
16 controls mapped
Not hypotheticals. These are the findings that recur in professional services, and every one of them is a question in at least one of the 11 templates above.
Templates, findings and AI prompts use your sector's terms, not generic audit language.
Pick one of the 11 templates above, walk the site with your phone, and see the finished report before you get back to your desk.