Methodology
Model across the monitoring approach, control testing, sampling, deficiency evaluation and reporting, consistent with COSO monitoring and IIA standards.
Components
Second line monitors; internal audit tests and assures; audit committee oversees.
Governance
Monitoring & testing buildControl-testing programmeDeficiency-tracking build
Maturity levels
L1
Foundational (0–40) — Ad-hoc, undocumented, reactive.
L2
Developing (41–60) — Framework emerging; pockets of practice.
L3
Established (61–80) — Documented, standardised, governed.
L4
Strategic (81–100) — Board-grade competitive differentiator.
Across the Internal Control ecosystem
Knowledge graph · 6 relations
