Audit Management
Plan, execute and close audits on a single evidence ledger.
Run internal audit, IT general controls (ITGC), SOX, SOC 2, ISO 27001 and AI-usage audits on one platform. Evidence is auto-harvested from Nexus, One, Connect and Link — no shared drives, no ticketing chaos.
What Audit does
Annual audit universe and risk-based planning
Walkthrough, test of design (ToD) and test of effectiveness (ToE) workpapers
Sampling engine with statistical and judgemental selection
Issue management with severity, owner, due date and SLA timers
Continuous controls monitoring (CCM) — exceptions surface in real time
Audit report builder with electronic sign-off and immutable archive
The Audit state machine
Audit enforces a controlled state machine — every transition is evidenced and audit-traceable.
Plan
Risk-rank the universe, allocate hours, lock the annual plan.
Scope
Define controls, owners, period and sampling approach.
Field
Harvest evidence via Link, perform walkthroughs and tests.
Report
Draft findings, route for management response, finalise.
Track
Push remediation to Issue Management; close on validated retest.
Evidence in, outputs out
Audit reads live signals from the operating estate and emits regulator-ready outputs — no shared drives, no spreadsheets.
Evidence sources (in)
- Nexus tickets, change records and CMDB
- One general ledger, AP/AR, fixed assets and payroll runs
- Connect customer interactions and consent records
- Link policy decisions, agent runs and per-tenant audit streams
Outputs (out)
- Audit committee pack (PDF + machine-readable)
- Findings register synced to Issue & Remediation Management
- Control evidence ledger (WORM, tamper-evident)
Crosswalked to what regulators ask for
Used in these business solutions
Audit Management is composed into outcome-led iShield solutions.
Run Audit on iShieldGRC.
Stop running audit in spreadsheets and email threads. See it on a live evidence ledger.