Would anyone be willing to share your list of internal/external audits? We are $250M and I am new. We are auditing wires and RDC annually. At my last shop, we didn't audit our wires... we could have been wrong but I am curious about what other's are doing?
How are you auditing your deposit compliance?
What about internal controls? It seems to me that the branch audits would cover this...
We are also 'auditing' social media quarterly... what are you doing here?
I am used to regular reviews rather than a large annual audit. For example, new account audits. I would review them regularly (quarterly-puling accounts at random) and that was that. The examiner would come and do their thing and we were good.

Thank!

Since all banks are different, I would suggest that you start with a risk assessment and work from there as to what and at what level areas of the bank will require audits.

Thanks, good point.

Any audit cycle I've been a part of starts with an audit risk assessment of the auditable BUs. This determines the schedule, auditable hours, BU risk rating, etc.

Besides the regulations, in the assessment, make sure prior issues, examiner, audit, legal, are considered, and keep the audit committee involved for direction.

In response to your question about "how" are you doing your audits. Consider using your primary regulator's exam manual.

Identify all of the regulations that apply to your bank and then risk rate them. Frequency of the audit/review should be based on risk. For example, high risk every 12 months, medium every 18 and low every 24 months.

Read your primary regulator's or the CFPBs examination manuals. They are a great resource.

Sorry another vote for Risk Assessment