After 28 years as a CAE for Fortune 500 companies, I just this week began working for a law firm as their CAE. It appears there are few resources available for audit programs, internal controls questionaires or audit plans for law firms. Although not public and under SOX guidelienes, I was hoping for help in obtaining programs, annual audit plans and risk assessments. Also, I was hoping there may be a group of Internal Auditors in this field that could provide "best practices".