Policy files and audit documentation
ENGAGEMENT CATALOGUE

Three Engagements, Each Scoped With Care

Kasturi offers three distinct engagement types. Each is fixed-fee, produces a written deliverable, and requires no software commitment from you.

Back to Home
OUR METHODOLOGY

How We Work

Each Kasturi engagement begins with reading — actual documents from your audit environment, not a questionnaire. We look at work-paper templates, policy references, and the document types your team reads most heavily. That reading informs a structured conversation with your audit leadership before we write anything.

Our written deliverables are built around your specific regulatory context: IIA International Professional Practices Framework, Bursa Malaysia Listing Requirements, and PDPA. We do not adapt global templates. We write for your situation.

1

Data Protocol Agreement

Before any document is shared, we agree in writing how it will be handled, stored, and deleted under PDPA.

2

Document Sample Review

We read a representative sample of your work-paper templates and relevant policy documents.

3

Structured Advisory Session

A focused conversation with your audit leadership to validate our reading and understand team-specific considerations.

4

Written Brief Delivery

A brief structured for your audit committee, referencing IIA standards and your specific regulatory context.

ENG-001

Audit Workflow Review

A focused engagement where we read a sample of your audit work-paper templates and policy library, sit with your head of internal audit and one senior auditor, and write a brief on where AI summarisation could carefully ease reading load. The work is IIA-aligned and Bursa Listing Requirements-aware.

  • Suitable for teams at the early consideration stage
  • No software commitment or installation required
  • Delivered within two to three working weeks
  • Written brief suitable for audit committee tabling
  • Pre-engagement PDPA data protocol included

PROCESS STEPS

Step 1: Data protocol agreement signed by both parties.

Step 2: Document sample (10–20 work-paper templates, relevant policy excerpts) shared securely.

Step 3: Two-hour advisory session with head of internal audit and one senior auditor.

Step 4: Written brief delivered within five working days of session.

RM 1,250

Enquire Now
Audit work-paper review
ENG-002

Evidence Reading & Drafting Pilot

A measured pilot of an AI assist that reads evidence files and policies, drafts first-pass observations, and surfaces possible cross-references for auditors to consider. Integration is read-only and within a contained environment; auditors confirm every conclusion. Includes a six-week supervised period, training for two auditors, and a usage policy aligned with IIA standards.

  • Read-only, contained environment — no live system connections
  • Six-week supervised pilot period with oversight checkpoints
  • Training for two auditors on output evaluation and boundaries
  • Written IIA-aligned usage policy produced and included
  • End-of-pilot written brief for audit committee

PROCESS STEPS

Step 1: Data protocol and environment specification agreed in writing.

Step 2: Contained environment configured; tool selected from vendor-neutral evaluation.

Step 3: Auditor training sessions (two half-day sessions).

Step 4: Six-week supervised pilot with bi-weekly oversight check-ins.

Step 5: End-of-pilot written brief and usage policy delivered.

RM 5,090

Enquire Now
Evidence file reading pilot
ENG-003

Quarterly Stewardship

A monthly advisory engagement for audit leaders whose teams already use AI reading assists. Each quarter we sample outputs, audit boundaries, and write a brief for your audit committee. Includes alignment with IIA, Bursa Listing Requirements, and PDPA, plus a yearly written summary suitable for your audit committee.

  • Quarterly output sampling and boundary review
  • Written quarterly brief for audit committee
  • IIA, Bursa Listing Requirements, and PDPA alignment check each quarter
  • Yearly summary structured for board-level reporting
  • Flag of emerging IIA or Bursa guidance that affects your AI use

QUARTERLY CYCLE

Month 1: Output sample selection and review against usage policy boundaries.

Month 2: Regulatory alignment check — IIA, Bursa, PDPA developments reviewed.

Month 3: Written brief delivered; scheduling of next quarter's sampling criteria agreed.

Year End: Yearly summary brief produced for audit committee annual reporting.

RM 4,820 / quarter

Enquire Now
Audit committee stewardship
DECISION GUIDANCE

Which Engagement Fits Your Situation?

The right starting point depends on where your team is in the AI consideration process. Most clients begin with the Audit Workflow Review.

Feature Workflow Review
RM 1,250
Evidence Pilot
RM 5,090
Quarterly Stewardship
RM 4,820/qtr
Best for teams at early consideration stage If ready to pilot
Best for teams ready to run a live pilot
Best for teams already using AI tools
Written deliverable for audit committee
No software purchase required
Ongoing quarterly oversight

NOT SURE WHERE TO START?

Most clients begin with the Audit Workflow Review. It is the lowest-risk entry point: no software, no ongoing commitment, and a written output that clarifies whether further investment is worthwhile. We are also glad to talk through your specific situation before you commit to any engagement.

Talk to Us First
STANDARDS APPLIED ACROSS ALL ENGAGEMENTS

What Every Engagement Is Held Against

IIA International Standards

All advisory outputs tested against the IIA's International Professional Practices Framework, including updated Global Internal Audit Standards.

Bursa Listing Requirements

Outputs reviewed against Bursa Malaysia Listing Requirements relevant to audit committee obligations and internal audit function independence for listed entities.

PDPA 2010

All document handling aligned with Malaysia's Personal Data Protection Act 2010, including written protocols for data sharing, storage, and deletion.

Contained Environment Standard

AI tools used in pilots operate in read-only, contained environments. No connections to live audit management systems without a documented supervised evaluation.

Written Deliverable Standard

Every engagement produces a written brief. No verbal-only advisory outcomes. All written outputs structured for audit committee review without further editing.

Vendor Independence

Kasturi does not receive fees from any AI software provider. Tool recommendations are based solely on fit for purpose and regulatory appropriateness.

PRICING

Transparent, Fixed-Fee Pricing

All fees are fixed and inclusive of the deliverables described. No additional charges for standard written outputs.

ENG-001

Audit Workflow Review

RM 1,250

One-time engagement

  • Document sample review
  • Two-hour advisory session
  • Written brief for audit committee
  • PDPA data protocol included
Enquire
ENG-002

Evidence Reading Pilot

POPULAR

RM 5,090

Six-week pilot engagement

  • Contained, read-only environment setup
  • Training for two auditors
  • Six-week supervised period
  • IIA-aligned usage policy
  • End-of-pilot written brief
Enquire
ENG-003

Quarterly Stewardship

RM 4,820

Per quarter (ongoing)

  • Quarterly output sampling
  • Written quarterly brief
  • Regulatory alignment review
  • Yearly committee-ready summary
Enquire
NEXT STEP

Not certain which engagement fits? Let's talk it through.

A short call or email exchange is usually enough to clarify the right starting point. We do not push people toward larger engagements; we start where your team is.

Book Now