Internal Control Plan & Risk Register – Non-Profit Organization | Word/PDF/Excel

Internal control plan and risk register for non-profit organizations – a comprehensive document package for Swedish non-profit boards that want to plan, document, and monitor internal controls of the organization's finances, authorizations, grant conditions, documents, and operational risks. Editable Word templates, searchable printable PDFs, and an Excel workbook with nine tabs.

Important: This is administrative documentation support, not an audit report or government certification. There is no general legal requirement for this specific internal control plan for all non-profit organizations. Applicable obligations are determined by the organization, the organization's bylaws, law, and, for example, the conditions of the grant provider.

This is included in the document package

The Excel register: nine tabs and tested calculations

Start, Processes, Risks, Controls, Control Log, Non-conformities, Year Wheel, Overview, and Las_mig. The register tabs help the board monitor risks and control points. For valid integers 1–5, Excel calculates a risk score by multiplying probability by consequence, and displays an internally defined priority level. Missing or invalid values result in no risk score. The overview counts, among other things, registered control points and manually marked completed controls. No macros or test users are included.

Note: The risk scores and the low, medium, and high levels are an editorial prioritization model, not statutory values. Excel does not perform any external verification and cannot independently assess compliance with GDPR, the Accounting Act, bylaws, or grant conditions.

How the organization uses the templates

1. Check governance: Read the organization's current bylaws and identify relevant rules and external contractual terms.
2. Determine control responsibility: Document who performs, reviews, and reports the controls; use double checks when necessary and possible.
3. Assess risks: Register processes and risks, establish actions, and follow up on decisions.
4. Perform controls: Note the actual sample, controlled documentation, and discovered non-conformities.
5. Report to the board: Compile completed and missed controls, open non-conformities, and proposals requiring decisions.

Legal limitations and sources

A non-profit organization may be subject to accounting requirements, for example, when it conducts commercial activities, is the parent company in a group, or has assets exceeding 1.5 million kronor. See Swedish Tax Agency's rules for organizations' accounting. If accounting requirements apply, the organization must follow the applicable regulations of the Swedish Accounting Standards Board; the template package is not accounting software or an annual report.

Authorization and responsibility are assessed based on current bylaws and actual decisions; see Swedish Tax Agency's guidance on the administration of non-profit organizations. When personal data is processed, the organization must follow data protection rules; see IMY's guidance for organizations and GDPR, Regulation (EU) 2016/679. Sensitive matters may also be subject to special notification and security requirements outside this package.

Related document templates

For internal decision-making authority: Delegation Order & Decision Mandate. For finances: Organization Budget & Liquidity Plan. For archiving and access: Document Management Plan & Archive Register. For the organization's actual audit: Audit Report & Audit Documentation.

Frequently asked questions

Must all non-profit organizations have an internal control plan?

No, there is no general legal requirement for such a standard template. Needs and other obligations arise, among other things, from the organization's activities, bylaws, specific laws, and grant conditions.

Does Excel automatically calculate the organization's risks?

Excel calculates a simple internal priority value from the user's manually entered probability and consequence. It is not a legal or professional risk assessment.

Can the material replace an audit or annual report?

No. It is a basis for internal planning and follow-up, not an external audit report, accounting, or annual report.

Are the PDF files interactive?

No, the PDF files are searchable and printable. Fill out and customize the Word documents.

Are templates in English included?

No, the five working templates are in Swedish. A separate English User Guide explains the use of the Swedish documents.

Has the product been reviewed by a lawyer or auditors?

No, no external professional review has been performed. Documents and source references have undergone internal AI-assisted review and technical quality testing.

Version 1.0 · October 24, 2026. Manufacturer: Svenska Dokumentmallar / Mallbutiken. The package has not been approved by government agencies or external experts.