Internal Audit Methodologies: Episode 09, Matrix of Assertions & Internal Controls, Example: HR, Employee Relations

Employee relations encompass the practices and policies that govern how organizations manage interpersonal dynamics, workplace concerns, and overall morale. Auditing employee relations is essential for minimizing legal risks, fostering ethical practices, and ensuring a healthy work environment. Auditors use the matrix of assertions and internal controls to examine how effectively organizations address issues like conflict resolution, grievances, and engagement.

Elements of Employee Relations

  • Conflict Resolution – Handling disputes fairly and promptly.

  • Employee Engagement Initiatives – Programs to improve morale and satisfaction.

  • Grievance Handling – Formal processes for employee complaints.

  • Workplace Culture and Morale – Maintaining an inclusive and respectful environment.


Assertions and Internal Controls Matrix – Employee Relations Example

Assertion Potential Misstatement Example of Internal Control Relevant Questions / Audit Tests
Occurrence Unsubstantiated reporting of resolved conflicts Case documentation and approval by HR Are conflict resolution cases documented and signed by involved parties?
Completeness Unreported or undocumented grievances Anonymous reporting channels and issue tracking system Are all grievances tracked from receipt to resolution?
Authorization Resolutions made without appropriate HR or legal review Escalation protocols and multi-tiered review procedures Were actions taken reviewed and approved by HR/legal teams?
Accuracy Inaccurate representation of employee engagement data Periodic surveys with data validation processes Do survey results accurately reflect employee feedback?
Cutoff Delayed handling of grievances Timelines defined by policy with automated alerts Are grievances resolved within policy-mandated timeframes?
Classification Misclassification of grievance types or resolution outcomes Standardized issue codes in HR case management systems Are cases properly categorized for future analysis and reporting?

Practical Example:

In a tech company audit, the internal auditor found that several grievances were resolved informally and never logged into the system, violating the completeness and occurrence assertions. The lack of documentation prevented trend analysis and risk mitigation. Auditors recommended mandatory logging and regular audits of employee relations records.

By auditing employee relations through an assertion-control matrix, internal auditors ensure that employee concerns are handled with transparency, consistency, and accountability—reinforcing a healthy organizational culture.