Internal scrutiny readiness checklist

A practical academy trust checklist for audit and risk committees, accounting officers, CFOs and governance leaders who need a stronger internal scrutiny cycle before the next review window.

  • Checked on 23 March 2026Current official baseline verified against DfE and GOV.UK guidance.
  • PDF checklistIncludes evidence prompts, ownership prompts and source notes for practical use.
  • 7 official sourcesCore DfE/GOV.UK baseline plus closely related official guidance where needed.

Usage

How to use this checklist

Use the checklist to pressure-test whether your trust can evidence a risk-led, independent and governance-ready internal scrutiny cycle before the next review window.

What this resource gives you

  • Clear readiness criteria trustees should be able to evidence quickly.
  • Structured prompts for evidence, ownership and next actions.
  • Guidance sources checked on 23 March 2026.

Recommended usage notes

  • Use this checklist before agreeing the annual internal scrutiny plan or before the next audit and risk committee review of coverage and independence.
  • Treat it as a readiness and evidence tool, not only as a compliance tick sheet. The objective is governance confidence, faster challenge, and fewer year-end surprises.
  • Where a check is not yet met, record the owner, interim control, target date and committee route for follow-up rather than marking the item complete too early.

Core test

Six readiness criteria trustees should be able to evidence

These criteria form the front-end test for whether the current programme is ready for meaningful committee oversight.

Annual objectives are governance-approved

Trustees can point to explicit scrutiny objectives for the year, not just a list of review topics.

Evidence: Board or audit and risk committee approval minute referencing the internal scrutiny plan and intended assurance outcomes.

Scope is demonstrably risk-led

Review topics are traceable to the live trust risk register, key control weaknesses or material change pressures.

Evidence: Cross-reference between risk register entries, control objectives and planned scrutiny activity.

Independence is clear and defensible

Trustees can explain why the chosen scrutiny model is appropriately independent for the work being undertaken.

Evidence: Documented delivery model, conflicts check and rationale for reviewer selection.

Reporting cadence supports challenge

Committee papers arrive with enough structure and frequency for trustees to challenge recurring issues and overdue actions.

Evidence: Termly committee calendar, report template and escalation protocol for critical or overdue findings.

Follow-up proves closure quality

High-risk actions are not closed on narrative updates alone; they are evidenced and, where needed, re-tested.

Evidence: Action tracker with closure evidence, re-test notes and decision trail for any accepted residual risk.

Year-end assurance can be assembled without panic

The trust can compile its annual summary report and supporting pack without reconstructing evidence late in the cycle.

Evidence: Live assurance file covering approved plan, reports, actions, minutes and draft year-end narrative.

Preview

Preview the full checklist structure

The PDF expands each section into checklist prompts with evidence, owner and next-action fields so the resource can be used in meetings or working sessions.

Planning and mobilisation

Confirm that annual design decisions are made early and evidenced clearly enough for governance challenge.

  • Annual internal scrutiny plan is formally approved
  • Plan references top trust risks and control objectives
  • Coverage spans financial and non-financial control areas

9 checklist prompts in the full PDF

Risk coverage matrix

Show why topics were selected and which significant risks still sit outside formal testing this year.

  • Risk register reference is captured
  • Control objective is stated explicitly
  • Planned review activity is defined

5 checklist prompts in the full PDF

Testing standards

Reduce variation between reviewers, academies and review cycles so committees can rely on the findings.

  • Control objective is defined before testing starts
  • Sample sizes are proportionate to risk
  • Evidence source, date and owner are recorded for each test

5 checklist prompts in the full PDF

Reporting cadence and committee challenge

Create a reporting rhythm that helps trustees see unresolved high-risk issues quickly and challenge management response quality.

  • Reports issue within an agreed timeframe after fieldwork
  • Committee receives a termly summary of delivered work and major findings
  • High-risk actions are monitored between committee meetings

8 checklist prompts in the full PDF

Year-end assurance pack

Assemble the annual summary from a maintained live file rather than from late reconstruction.

  • Approved plan and in-year changes are retained together
  • Final reports for completed work are assembled
  • Consolidated findings table is maintained by risk theme

7 checklist prompts in the full PDF

Common DfE issues and watchpoints

Pressure-test the areas where DfE assurance work and governance reviews keep finding avoidable weaknesses.

  • No internal scrutiny has taken place or it is too limited
  • Annual summary report quality is inconsistent
  • Financial management and reporting remain a live risk

6 checklist prompts in the full PDF

Current sources

Official guidance baseline used for this version

This version was checked on 23 March 2026 and is anchored to current official guidance rather than a stale static checklist.

Watchpoints

Common DfE issues to pressure-test now

The final section of the resource turns recurring DfE assurance findings into practical watchpoints for your next planning discussion.

No internal scrutiny has taken place or it is too limited

A nominal programme with no substantive reviews still leaves the board without the assurance expected by the handbook.

Annual summary report quality is inconsistent

A weak annual summary undermines trustees' ability to assess year-on-year progress.

Financial management and reporting remain a live risk

DfE assurance work continues to highlight issues with management accounts, reporting completeness and control framework strength.

Related party controls and interests require active attention

Prior approvals, declarations and conflict handling remain a recurring source of regulatory concern.

Risk register oversight can drift into routine compliance

Boards often keep a register but do not use it well enough to drive scrutiny or challenge control strength.

Non-financial controls need the same assurance discipline

Cyber, safeguarding, estates, procurement and publication controls should not be left outside formal assurance simply because they are operational.

Turn checklist findings into a tailored scrutiny plan

Use the checklist to surface gaps, then sign up to translate those gaps into a risk-led scope and reporting cycle.