What this resource gives you
- Clear readiness criteria trustees should be able to evidence quickly.
- Structured prompts for evidence, ownership and next actions.
- Guidance sources checked on 23 March 2026.
A practical academy trust checklist for audit and risk committees, accounting officers, CFOs and governance leaders who need a stronger internal scrutiny cycle before the next review window.
Usage
Use the checklist to pressure-test whether your trust can evidence a risk-led, independent and governance-ready internal scrutiny cycle before the next review window.
Core test
These criteria form the front-end test for whether the current programme is ready for meaningful committee oversight.
Trustees can point to explicit scrutiny objectives for the year, not just a list of review topics.
Evidence: Board or audit and risk committee approval minute referencing the internal scrutiny plan and intended assurance outcomes.
Review topics are traceable to the live trust risk register, key control weaknesses or material change pressures.
Evidence: Cross-reference between risk register entries, control objectives and planned scrutiny activity.
Trustees can explain why the chosen scrutiny model is appropriately independent for the work being undertaken.
Evidence: Documented delivery model, conflicts check and rationale for reviewer selection.
Committee papers arrive with enough structure and frequency for trustees to challenge recurring issues and overdue actions.
Evidence: Termly committee calendar, report template and escalation protocol for critical or overdue findings.
High-risk actions are not closed on narrative updates alone; they are evidenced and, where needed, re-tested.
Evidence: Action tracker with closure evidence, re-test notes and decision trail for any accepted residual risk.
The trust can compile its annual summary report and supporting pack without reconstructing evidence late in the cycle.
Evidence: Live assurance file covering approved plan, reports, actions, minutes and draft year-end narrative.
Preview
The PDF expands each section into checklist prompts with evidence, owner and next-action fields so the resource can be used in meetings or working sessions.
Confirm that annual design decisions are made early and evidenced clearly enough for governance challenge.
9 checklist prompts in the full PDF
Show why topics were selected and which significant risks still sit outside formal testing this year.
5 checklist prompts in the full PDF
Reduce variation between reviewers, academies and review cycles so committees can rely on the findings.
5 checklist prompts in the full PDF
Create a reporting rhythm that helps trustees see unresolved high-risk issues quickly and challenge management response quality.
8 checklist prompts in the full PDF
Assemble the annual summary from a maintained live file rather than from late reconstruction.
7 checklist prompts in the full PDF
Pressure-test the areas where DfE assurance work and governance reviews keep finding avoidable weaknesses.
6 checklist prompts in the full PDF
Current sources
This version was checked on 23 March 2026 and is anchored to current official guidance rather than a stale static checklist.
Watchpoints
The final section of the resource turns recurring DfE assurance findings into practical watchpoints for your next planning discussion.
A nominal programme with no substantive reviews still leaves the board without the assurance expected by the handbook.
A weak annual summary undermines trustees' ability to assess year-on-year progress.
DfE assurance work continues to highlight issues with management accounts, reporting completeness and control framework strength.
Prior approvals, declarations and conflict handling remain a recurring source of regulatory concern.
Boards often keep a register but do not use it well enough to drive scrutiny or challenge control strength.
Cyber, safeguarding, estates, procurement and publication controls should not be left outside formal assurance simply because they are operational.
Use the checklist to surface gaps, then sign up to translate those gaps into a risk-led scope and reporting cycle.