Operational Audit Checklist Template: 90-Day Plan

Key takeaways

• An operational audit checklist covers seven functions: sales, delivery, people, finance, documentation, technology, and governance.
• Score each finding 1-5 on impact, frequency, and effort (inverted), then multiply for a 1-125 weighted score.
• Set a cut-off of 40 and carry only three to five findings into your 90-day plan.
• Audit one function per week, run monthly spot checks on your weakest functions, and re-audit on trigger events like a lost anchor client.
• Every acted-on finding should end with a written SOP owned by one person, not a fix that lives in your head.

An operational audit checklist template is a fill-in worksheet organized by business function, paired with a scoring method that ranks each gap by impact, frequency, and effort so you fix what matters first. This one gives you the checklist per function, a weighted rubric with worked examples, and a path from top findings to a 90-day action plan you can run yourself instead of paying a boutique consultant.

What should an operational audit checklist include?

An operational audit checklist for a 5-50 person service business covers seven functions: sales and pipeline, service delivery, people and capacity, finance and pricing, process documentation, technology and data, and governance (approvals, board or ownership reporting). The Institute of Internal Auditors defines operational auditing as an evaluation of whether processes are efficient and effective, distinct from a financial audit's focus on statements and compliance (IIA), which is why your checklist items should describe how work actually gets done, not just whether money reconciles.

The seven functions to cover

Function	Sample audit item	What "gap" looks like
Sales & pipeline	One documented ICP and one primary channel	Leads come from anywhere, nothing compounds
Service delivery	Written scope and handoff per service type	Scope creep, founder fixes delivery personally
People & capacity	Utilization tracked per person	Too many priorities, no clear roadmap
Finance & pricing	Margin reviewed per service	Underpriced work hides until year-end
Process documentation	SOPs exist for the top 5 recurring tasks	Undocumented processes live in your head
Technology & data	One source of truth for clients and jobs	Duplicate spreadsheets, weak KPIs
Governance	Decision rights written down	Approvals stall when a board is involved

What a good checklist item looks like

Write items as observable facts, not vibes. "We have an SOP" is a vibe; "the top five recurring tasks each have a written SOP updated in the last 90 days" is checkable. Each item should be answerable yes, no, or partial in under a minute, and each "no" should name the function it belongs to so scoring stays honest. If you want the checklist scored against your actual business context rather than a generic template, the company profile step in OGPP Strategy Advisor asks for your size, sector, and constraints first, which is the same discipline: constraints before output.

Which business functions should you audit first?

Start where money leaks or risk concentrates

If you carry strategy, ops and delivery personally, audit in this order: sales and client commitments, delivery or service quality, then cash and invoicing. Those three carry the revenue. Everything else, including documentation and SOPs, waits until you have scored the first pass.

The point of sequencing is to force constraints, not to cover every function thinly. Audit two functions properly and you get findings you can rank with the impact x frequency x effort method in the next section. Audit eight functions in one afternoon and you get a list you cherry-pick from, which is how nothing compounds.

Budget one function per week for a 5-50 person service business. That keeps the audit from becoming a 30-day research project you use to procrastinate.

Function-first order for multi-site and non-profit operators

Care and property operators should start with compliance and safety, then staffing and scheduling, then vendor and maintenance spend. A compliance miss costs more than a marketing gap.

Non-profit EDs should start with funder reporting and program delivery, then board governance documentation, then admin overhead. Your funding depends on the first two.

Once you have ranked findings, the natural next step is turning the top items into a 90-day roadmap rather than a task dump: see our guide at https://strategyadvisor.ogprojectpartners.ca/guides/ninety-day-roadmap-guide.

How do you score and prioritize audit findings?

Raw checklist findings are not a plan. You need a ranking method that forces tradeoffs, otherwise you cherry-pick the tasks that feel easy and nothing compounds. The weighted score below does that in about ten minutes per finding.

The 1-5 scoring rubric for each dimension

Score every finding on three dimensions, 1 to 5 each:

• Impact: 5 = the gap costs revenue, breaches a compliance duty, or blocks delivery weekly. 1 = cosmetic.
• Frequency: 5 = the problem shows up daily or in every client/site interaction. 1 = once a quarter.
• Effort (inverted): 5 = fixable in under a day with existing staff. 1 = needs a project, budget, or outside help.

Impact and frequency measure pain; effort measures how cheap the fix is. Scoring effort inverted means a low-effort fix raises the score, so quick wins surface naturally instead of hiding behind big projects.

Worked example: scoring three findings from a care operator audit

A multi-site care operator audits three functions and scores the findings:

• No documented medication-logging SOP at one site: Impact 5, Frequency 5, Effort 3 (two days to write and train). Score 75.
• Weak KPIs for cleaning rounds: Impact 3, Frequency 4, Effort 4 (define three metrics, add to a sheet). Score 48.
• Founder-dependent scheduling: Impact 4, Frequency 3, Effort 1 (needs a scheduling tool plus hiring support). Score 12.

The ranking is blunt and useful: the SOP gap outranks the KPI gap, and the scheduling problem is real but goes to the backlog, not this quarter. Internal controls basics for small entities, including documented procedures and segregation of duties, are covered by CPA Canada's SME resources, which is the standard to hold the SOP fix against.

Weighted score formula and cut-off rules

Multiply the three scores: (Impact x Frequency) x Effort, giving a range of 1 to 125. If you want to weight impact more heavily, use Impact x 2, which is what we do in the scoring sheet built into the OGPP Strategy Advisor care and property workflow, and it is honest about its limits: the tool ranks the draft, but a human pass on budget and team capacity still decides what ships. Set a cut-off of 40 for the 90-day plan, anything below waits. Three to five findings above the line is the target; if you have ten, your audit was a wish list, and you scored too generously on effort.

How do you turn checklist results into an action plan?

Take your top-scoring findings and write each one as a single sentence: what is broken, who owns it, and what "done" looks like. If a finding needs three owners, split it. A 5-50 person business can usually carry three to five active findings at once; more than that and nothing compounds, which is exactly the cherry-picking problem the scoring step was meant to prevent.

One finding, one owner, one SOP

Every finding you act on should end with a written SOP, not just a completed task. If the fix lives only in the owner's head, the audit has not reduced founder-dependent work; it has just moved it. Draft the SOP while doing the work the first time, then hand it to someone else to run once as a test.

From scored findings to a 90-day roadmap

Sort findings by score and slot them into a 30-, 60- and 90-day plan: quick fixes first, structural changes later. Assign each item a review date and a KPI so progress is measurable rather than felt. Tools like the OGPP Strategy Advisor's strategy check can generate this starting draft, but treat the output as a draft: you still need a human pass to fit it to your budget, team capacity and real distribution.

How often should you run an operational audit?

Quarterly full pass vs monthly spot checks

For a 5-50 person service business, one full functional audit per quarter is usually enough. Between full passes, run monthly spot checks on the two or three functions you flagged as weakest, so the 90-day action plan gets corrected mid-flight instead of re-scored after it has already drifted. Quality management practice treats internal audits as a recurring scheduled activity, not a one-off project, which is why ISO 9001 requires planned intervals (https://www.iso.org/standard/70397.html). Monthly spot checks take an hour; a quarterly pass takes half a day.

Trigger events that force an off-cycle audit

Audit outside the calendar when something breaks the assumptions behind your last plan: a key staff departure, a new service line, a lost anchor client, a second location, or a funding change for non-profits. Each of these shifts impact scores on your checklist, so re-rank before committing the next quarter. If a trigger leaves you stuck on sequencing rather than findings, a structured sprint like the OGPP Strategy Sprint is built for that decision point.

What mistakes do teams make when using audit checklists?

Cherry-picking tasks so nothing compounds

The most common failure is treating the checklist as a menu. Owners pick the tasks that feel easy, skip the uncomfortable ones, and three months later nothing has changed. A checklist only compounds when the top-ranked findings feed a 90-day roadmap and everything below the cut is explicitly marked "not now."

Skipping the scoring step

Without a weighted score, every gap looks equally urgent, which is the same as no ranking at all. Score each finding on impact, frequency, and effort before you discuss fixes. If you skip this, the loudest problem in the room wins, and it is rarely the one costing you the most.

Using raw AI output without a human pass

An AI draft is a starting draft, not the plan. Raw output from tools like ChatGPT does not know your budget, team capacity, or board dynamics, so it will happily propose fixes you cannot staff. The fix is a human pass where you edit for constraints, approvals, and tone, then assign each item an owner and a date. Unowned items die quietly.

Should you use a template, raw ChatGPT, or a paid tool?

Comparison criteria: constraints, scoring, execution tracking

A manual template like the checklist and weighted scoring method above costs nothing and forces you to do the thinking. ChatGPT can draft audit questions fast, but it will not enforce constraints unless you prompt hard for them. One owner put it plainly: without forced tradeoffs like one ICP, one main channel, one core offer, people cherry-pick random tasks and nothing compounds. Paid strategy tools vary: Cascade and ClearPoint Strategy focus on execution tracking and KPIs, Upmetrics on business planning, LucidFlow on workflow automation. None of them runs your operational audit for you.

OGPP Strategy Advisor sits between raw ChatGPT and a boutique consultant. It structures the audit, applies the impact x frequency x effort scoring, and pushes findings into a 30-, 60- or 90-day plan, with advisor review at $149 when a decision needs human judgement. Membership is CAD $19/month, sprints from $2,500.

Where OGPP Strategy Advisor falls short

It does not track execution day to day the way ClearPoint Strategy does, and it will not replace a board-facing strategy deck. If you want ongoing KPI dashboards, look elsewhere. If you want a starting draft that forces constraints, then a human pass on budget and team capacity, it fits.

FAQ

Can I do an operational audit myself or do I need a consultant?

Yes, you can run it yourself. A 5-50 person service business can audit one function per week using the checklist and weighted scoring method, no consultant required. A paid advisor earns their fee when a decision needs outside judgement, such as sequencing a restructuring or a board conflict, not for the routine scoring pass.

What is a weighted scoring model for audit findings and how do I set the weights?

Score each finding 1-5 on impact, frequency, and effort (inverted, so easy fixes score high), then multiply: (Impact x Frequency) x Effort, giving a range of 1-125. Set a cut-off of 40 for your 90-day plan. If impact matters more in your context, double the impact score before multiplying.

How long does a full operational audit take for a small team?

Budget one function per week, so a full pass across your priority functions takes roughly a month of part-time effort. Scoring each finding takes about ten minutes. Between full passes, monthly spot checks on your two or three weakest functions take an hour each.

What's the difference between an operational audit and a financial audit?

A financial audit checks whether statements and compliance are correct. An operational audit evaluates whether your processes are efficient and effective, per the Institute of Internal Auditors' definition. In practice: a financial audit asks if the money reconciles; an operational audit asks how work actually gets done and where it leaks.