AR 11-7 governs policies, roles, responsibilities, and standards for the Army Internal Review Program within the Department of the Army.
View AR 11-7 on armypubs.army.mil
It covers internal review planning, assurance services, organizational alignment, quality management, peer review, and internal control evaluation. It requires annual or biennial planning, risk assessment files, independent reporting relationships, and quality management systems.
Applies to: This regulation prescribes policies, roles, responsibilities, and standards for the Army Internal Review (IR) Program within the Department of the Army (DA).
The objective of the Army IR Program is to provide commanders and their staffs with a full range of timely, professional assurance services which support local decision makers and help to ensure effective stewardship of resources. (paragraph 2-1)
All IR offices will prepare an IR annual or biennial plan identifying audits, attestations, and nonaudit services the IR office anticipates conducting within the upcoming one to 2 years based on command staff input and an assessment of the risks which are most relevant to the command. (paragraph 3-1)
All IR offices will establish and maintain a risk assessment file to use as a basis for determining which functions and business processes exist within the command and are therefore subject to audit/examination in addition to the risk levels associated with these functions and business processes. (paragraph 3-1)
IR offices will be organizationally aligned as independent activities which report directly to the commander, principal deputy commander, or chief of staff of their respective command, installation/garrison, division, district, or activity. As an independent office, the IR office will not be aligned under another functional directorate or staff section within the command. (paragraph 2-2)
Ensure IR auditors are granted timely, full, and unrestricted access to all personnel, facilities, records, reports, information systems/databases (read-only), documents, and other information/materials (subject to security clearance requirements) needed in connection with an audit, attestation, investigation, inquiry, or other IR service. (paragraph 1-10)