Has anyone undertaken an audit of the Coronavirus Job Retention Scheme yet? If so, does anyone have a Risk and Control Matrix that they'd be willing to share so we can get an idea of the types of things you've identified please? We were thinking along the lines of looking at whether furloughed staff undertook fundraising activities for the organisation - has anyone else gone down that route at all?

The CIIA has given us some good guidance for looking at business processes in a Covid19 world in Appendix 1 of this document - of course, we need to amend it to make it fit for purpose for charities (include fundraising etc), but it's a good starting point. My question is - how are you all planning on testing your controls right now? I attended a webinar recently where Liz Sandwith spoke about conducting 5-day audits - 4 days of fieldwork, write it up on the 5th day, send the report before you clock off for the weekend. Does anyone have any experience of conducting this type of audit? Any tips would be much appreciated - I like the sound of it, and it would be good to know how it works in practice.