Internal Audit Methodologies: Episode 06, Matrix of Assertions & Internal Controls, Example: HR, Recruitment and Staffing

Recruitment and staffing are critical HR functions that impact organizational effectiveness, compliance, and workforce integrity. Internal auditors apply a matrix of assertions and internal controls to ensure that hiring processes are properly documented, authorized, and aligned with organizational policies. This method helps detect potential inefficiencies, fraud risks, or compliance violations.

Recruitment and Staffing Process

  • Job Analysis and Design – Define roles, responsibilities, and qualifications.

  • Sourcing Candidates – Post job openings and attract applicants.

  • Screening and Interviewing – Evaluate and select candidates.

  • Hiring and Onboarding – Finalize offers, conduct background checks, and complete employment documentation.


Assertions and Internal Controls Matrix – HR Recruitment Example

Assertion Potential Misstatement Example of Internal Control Relevant Questions / Audit Tests
Occurrence Hiring unqualified or fictitious candidates Background checks and verification of credentials Were identity, qualifications, and references verified?
Completeness Failure to record all recruitment activity Use of centralized applicant tracking system (ATS) Are all job applications tracked and stored in the ATS?
Authorization Unauthorized hires or bypassed approval steps HR and management sign-off required before extending offers Was the final hiring decision approved by the proper authority?
Accuracy Incorrect or outdated job descriptions Regular HR reviews of job role documentation Do current job postings reflect actual responsibilities and requirements?
Cutoff Hiring reported in the wrong reporting period Hiring dates linked to signed offer letters and onboarding completion Are employment start dates correctly recorded in HR systems?
Classification Misassignment of new employees to wrong departments or roles System-based assignment of department codes and job grades Are new hires properly classified by department and position?

Practical Example:

During an audit of a government agency’s recruitment process, an auditor discovered that certain job roles were filled without documentation of interviews. This violated occurrence and authorization assertions. Controls were bypassed due to staffing pressure. The auditor recommended mandatory ATS documentation and escalated approval for expedited hires.

By using an assertion-based matrix, internal auditors ensure HR recruitment processes are reliable, authorized, and aligned with organizational policies and legal requirements.