Platform capability
Control Library
A reusable catalogue of control objectives, activities, evidence requirements, and test procedures — the same library the finance audit checklist is built from.
The business problem
- Control documentation is scattered across audit working papers and not reusable across cycles.
- There is no consistent way to test whether a control is actually operating.
Key capabilities
- Control objective, activity, and required-evidence fields per control
- Mappings from controls to risks, policies, and regulatory references
- Control test procedures and effectiveness status
Example workflow
- 1A control requires a documented board resolution before an accounting-policy change.
- 2The audit test checks the resolution date against the change date and records a pass/fail.
Who uses this
Risk/Control OwnerAudit Reviewer
Security and audit considerations
Every action within this capability writes to the platform's append-only audit log — actor, action type, timestamp, and before/after state — independent of the business record. See Security & Trust for the full model.