What a Shari'ah audit should actually test

A Shari'ah audit that only checks whether a fatwa exists has tested nothing. Here is the scope that gives a board real assurance.

Most institutions treat the Shari'ah audit as a documentation exercise: confirm the product had a ruling, file the ruling, close the finding. That satisfies a checklist. It does not tell the board whether the institution is doing what its scholars approved.

Test the transaction, not the paperwork

A meaningful audit samples live transactions and traces each one back to the approved structure. Was the asset actually owned by the bank before it was sold on? Was the sequence of contracts executed in the order the ruling required, or were the documents signed together at the end of the month? These are the questions that separate compliance in form from compliance in substance.

Test the profit calculation

In a Mudarabah or Musharakah arrangement, the profit-sharing ratio is the contract. If the system calculates a return that behaves like interest regardless of underlying performance, the structure has failed no matter what the documentation says.

Test the segregation

For an Islamic window inside a conventional bank, the audit has to follow the money: are the funds genuinely segregated, is the accounting ring-fenced, and could the institution demonstrate that separation to a regulator on request?

An audit finding that cannot be traced to a transaction is an opinion. An audit finding that can is a control.

Report in a way the board can act on

Findings should be ranked by the exposure they create, with an owner and a date against each one. A report that lists twenty observations of equal weight will produce no change at all.