Audit & Internal Controls Dashboard in Google Sheets

The Audit & Internal Controls Dashboard in Google Sheets turns a flat audit log into a six-page assurance workspace. The sample build ships with 500 audit engagements, 1,777 findings, 27,805 audit hours and $12,949,240 of recorded exposure value spread across 8 business units, 9 audit types and 8 control categories – so every chart, pivot and slicer is proven against realistic volume before you paste a single row of your own. It is built on native Google Sheets pivot tables and slicers rather than nested helper formulas, which is why it stays responsive as the log grows. Built by a team whose channels reach 300K+ subscribers. One payment, lifetime access, no subscription – and the PDF in your download carries the Make a Copy link, so an editable copy lands in your own Drive in about a minute.

Please read: this is a tracking and reporting template. It records and visualises the audit activity you enter. It does not certify, test or guarantee compliance with SOX, COSO, ISO 27001, PCI-DSS, GDPR or any other framework, and nothing in it is audit, legal or assurance advice. Framework names appear only as labels you tag your own engagements with.

Key Features of the Audit & Internal Controls Dashboard in Google Sheets

• Four slicers on every analysis page. Overview filters by Month, Business Unit, Audit Type and Status; Audits by Business Unit, Control Category, Month and Risk Rating; Controls by Control Category, Audit Type, Lead Auditor and Framework; Risk by Risk Rating, Framework, Detection Source and Month. One click re-filters all four charts and the sidebar together.
• Pivot tables you can actually inspect. Each chart reads a real pivot table parked to the right of the page – scroll past the spacer column to see the numbers behind any visual.
• 16 KPI cards across four pages, including Total Exposure, Audit Engagements, Total Findings, Avg Exposure/Audit, Closed Audits, Audit Hours, Critical Exposure, High Risk Audits and Overdue Rate.
• A Top 5 panel on every page – business units, audit types, lead auditors and risk ratings, each ranked by exposure value.
• Share-of-total bars for finding status, unit exposure, control exposure and risk exposure, so you see concentration at a glance.
• Single-engagement lookup. The Search page pulls all 16 fields for any Audit ID – date, business unit, audit type, control category, process owner, risk rating, exposure value, findings, hours, lead auditor, detection source, status, framework, month and quarter.
• Auto-expand to 1,000 rows. Pivots, slicers and formulas already cover row 1001; raise the DATA_ROWS constant in the bundled Apps Script if you need more.
• One-line rebrand. Edit the colour palette at the top of the script – the shipped theme pairs ink #5A1030 with accent #F5A524 and a #9AD1D4 second series.

What’s Inside the Audit & Internal Controls Dashboard in Google Sheets

Overview – enterprise-wide assurance

The landing page answers “how much are we carrying and how much have we closed?” Four KPI cards head the page, a Monthly Exposure Trend column chart and an Exposure by Audit Type bar chart sit beneath them, and an Exposure by Risk Rating donut plus a Unit Exposure vs Audits combo chart close it out. The sidebar carries the Assurance Snapshot (closure rate 47.4%, avg findings 3.6, 27,805 audit hours), the Top 5 Business Units by Exposure and a Finding Status Mix showing Closed, In Remediation, Open and Overdue side by side.

Audits – coverage by business unit

This page is about where the work went. Exposure vs Findings plots value against finding count per unit; Exposure by Unit & Control stacks all eight control categories inside each business unit; Monthly Findings runs as an area chart; and Audits by Status breaks the portfolio into Closed, In Remediation, Open, Overdue and Verified. The snapshot converts effort into rates – 56 hours per audit, $466 of exposure per hour, a 7.8% overdue rate.

Controls – control category, framework and auditor performance

Exposure by Control Category ranks all eight categories from Change Management at $562,849 up to Regulatory Compliance at $3,356,061. Audit Type Exposure vs Volume shows which engagement types cost the most per run, Exposure by Lead Auditor lists all ten auditors, and Findings by Framework splits the finding count across COSO, GDPR, ISO 27001, PCI-DSS and SOX.

Risk – ratings, frameworks and detection sources

Audits by Risk Rating counts engagements at each level (38 Critical, 108 High, 190 Medium). Framework Exposure vs Findings pairs value with volume per framework. Exposure by Detection Source shows how issues surface – automated monitoring, control testing, data analytics, management self-report, scheduled audit and the whistleblower hotline – and Monthly Audit Volume tracks throughput month by month.

Search – one engagement at a time

Pick an Audit ID from the dropdown and the detail card fills with all 16 fields for that engagement. This is the page you screen-share when someone asks about a specific finding.

Instructions – a ten-step user guide

A built-in guide covering how the slicers work, why the KPI cards stay unfiltered by design, how to swap in your own data, and how to raise the row limit.

Google Sheets vs. Excel vs. Paid GRC Software – Where This Fits

Who This Template Is For – and Who It’s Not For

A good fit if you run a small internal audit function and currently report from a spreadsheet, if you are a finance or risk manager who needs a monthly exposure and findings view for a management meeting, if you are a consultant reporting audit progress to a client, or if you are a controller who wants one place to see overdue findings by business unit.

Not a good fit if you need evidence storage, workflow approvals and electronic sign-off – that is a GRC platform, not a spreadsheet. It is also the wrong tool if you need automated control testing, if your audit log runs to tens of thousands of rows, or if you are looking for something that will tell you whether you are compliant. This dashboard reports what you enter; the judgement stays with your audit team.

How to Use the Audit & Internal Controls Dashboard in Google Sheets

1. Open the PDF in your download and click the Make a Copy link. The workbook lands in your own Google Drive.
2. Open the Data sheet. Keep the column headers exactly as they are – the pivots, slicers and formulas are bound to them.
3. Delete the 500 sample rows and paste your own audit log in their place, anywhere up to row 1001.
4. Adjust the list values you use – business units, audit types, control categories, frameworks, detection sources and risk ratings are just text in the data, so they can be whatever your function uses.
5. Go to the Overview page and click a slicer. All four charts, the pivots and the Top 5 panel re-filter together. To clear a slicer, open it and choose Select all.
6. Remember the KPI cards and the At a Glance list use SUMIFS and COUNTIFS against the whole Data sheet, so they intentionally show unfiltered totals. The charts and Top 5 panel are the slicer-aware part.
7. Use the Search page for individual engagements, and the Instructions page whenever a colleague asks how something works.
8. Need more than 1,000 rows? Open the bundled Apps Script, raise DATA_ROWS and re-run main().

Real-World Use Cases

Priya, internal audit manager at a mid-size manufacturer. Her team closes roughly 40 engagements a quarter across eight plants. She used to rebuild a status deck by hand every month. Now she pastes the quarter’s log in, filters the Audits page by business unit, and screenshots the Exposure vs Findings chart straight into the audit committee pack.

Daniel, financial controller at a 60-person software company. He has no audit department – he runs a handful of control reviews a year himself. He uses the Controls page to see which of the eight control categories he keeps finding issues in, and the Risk page’s Detection Source donut to check whether problems are being caught by testing or only reported after the fact.

Amara, risk consultant. She keeps one copy per client. Because sharing is a link rather than an attachment, the client’s finance lead can open the Search page and read any engagement record without her exporting anything.Audit & Internal Controls Dashboard in Google Sheets

Frequently Asked Questions

Does this template make my organisation compliant with SOX or ISO 27001?

No. It is a tracking and reporting tool. It shows you the audit activity you record, including whichever framework label you attach to each engagement. It performs no testing, offers no assurance and makes no compliance determination – those remain the responsibility of your audit and legal teams.Audit & Internal Controls Dashboard in Google Sheets

Do I need Google Sheets experience to use it?

No. If you can paste rows into a spreadsheet and click a filter button you can run it. The Instructions page inside the workbook covers everything else in ten short steps.

How many audit records can it hold?

1,000 out of the box, and the pivots, slicers and formulas already reach that far so nothing needs re-pointing. Beyond that, raise the DATA_ROWS constant in the Apps Script and re-run main().

Why don’t the KPI cards change when I click a slicer?

That is deliberate. The KPI cards and the At a Glance list are SUMIFS and COUNTIFS totals for the whole data set, so you always keep the enterprise number visible while the charts below show the filtered slice.

Can I change the colours or add my own logo?

Yes. The palette is a single block at the top of the bundled Apps Script; edit it and re-run to recolour every page. You can also format cells directly in Sheets like any other workbook.

Can I add my own columns to the audit log?

You can add extra columns to the right of the existing ones without breaking anything. Do not rename or reorder the shipped headers – the pivots and slicers reference them by position.Audit & Internal Controls Dashboard in Google Sheets

Is this a one-time payment?

Yes. One payment, lifetime access to your copy, no subscription and no per-user fee.Audit & Internal Controls Dashboard in Google Sheets

About the Author

Built by PK – Microsoft Certified Professional with 15+ years of Excel, Google Sheets, and Power BI experience. Founder of NextGenTemplates, reaching 300K+ subscribers across YouTube channels. Every template is hand-built and tested before release.Audit & Internal Controls Dashboard in Google Sheets

Explore Related Templates

• Audit & Internal Controls Dashboard in Excel – the same six-page structure for desktop Excel.
• Audit & Internal Controls Dashboard in Power BI – for teams already reporting in Power BI Desktop.
• Sustainability and ESG Dashboard in Google Sheets – the governance-side companion.
• Cybersecurity Dashboard in Google Sheets – pairs well with the IT General Controls side of your audit plan.
• Investor Relations Dashboard in Google Sheets – for the reporting layer above assurance.
• Browse the full Google Sheets Dashboard category or every Google Sheets template.

Read the full walkthrough on the blog: Audit & Internal Controls Dashboard in Google Sheets.Audit & Internal Controls Dashboard in Google Sheets

Add it to your cart and get an editable copy in your own Google Drive today – $9.99 once, lifetime access, no subscription.Audit & Internal Controls Dashboard in Google Sheets

Watch the step-by-step video Demo:

Last updated: 14 August 2026.