Ideagen Internal Audit vs OpenWorkpaper

Ideagen Internal Audit is a paid SaaS product for connecting risk-based audit planning, control testing, documentation, and board reporting. It serves internal-audit functions from small teams to enterprises managing audits across countries, with web access and hybrid deployment. The lifecycle covers planning, audit programs, workpapers, evidence, resource management, stakeholder reporting, and enterprise-risk integration. Configurable prompts standardize financial, operational, and compliance audits, while activities can map to SOX, ESG, ISO frameworks, and sector regulations. The product is described as aligned with the IIA Global Internal Audit Standards and supports agile, risk-based methods with audit trails. Control tests can be scheduled, evidence collected, effectiveness tracked, and threshold failures displayed on dashboards. Findings can enter a risk register, trigger policy remediation, and map to regulations. Real-time dashboards, automatic executive summaries, and board presentations support reporting. Ideagen describes a two-way API, enterprise-risk integration, Power BI, and ActiveData for Excel. It reports no audit limits or hidden module fees, offers templates, approval workflows, document control, corrective actions, nonconformance tracking, and compliance records. Pricing is on request; Ideagen offers demos, walkthroughs, and specialist support.

OpenWorkpaper is an open-source web application for documenting audits from planning through fieldwork and reporting. Its task dashboard lists active audits, assigned procedures, and pending reviews. A centralized request area handles client information requests and master PBC spreadsheet uploads and downloads. Procedures can record purpose, source, scope, methodology, results, conclusions, and reviewer comments, with PDF, Word, Excel, and PowerPoint attachments. Audit programs export to Word, and automatic numbering organizes groups, procedures, and attachments hierarchically. Collaboration includes assignments, team management, discussions, and preparer and reviewer sign-offs. Role-based access combines system roles with audit-specific teams. OpenID Connect works with Microsoft Entra ID, Okta, and Keycloak. The project documents HTTPS through Nginx and SSL/TLS certificates and records sensitive actions in audit logs. It supports local, private-network, and cloud deployment with a portable SQLite database. The free open-source plan is free.