Point your audit plan at what is really failing.
Failed controls and open incidents, step by step through the business. Your judgement stays your own.
Where are controls failing?
- 26Of 158 controls not fully effective
- 29Tests overdue
- DA oversight3 incidents1 failed
- Reserving2 incidents1 failed
Internal audit answers for the whole function.
Our reading: testing outcomes, not just design, needs the same record the first and second lines work from.
- Apr 2026 · PRASMF5 is "accountable for all aspects relating to the management of the firm's internal audit function, including reporting to the board and/or Audit Committee".Source: PRA SS35/15, para 2.36 (opens in a new tab)
- Sept 2024 · Chartered IIAInternal audit "should always consider the actual outcomes" of controls, not only their design. This is an industry code, not a regulator rule.Source: Chartered IIA, Internal Audit Code of Practice, 2024, principle 8(l) (opens in a new tab)
- Apr 2026 · PRAThe PRA reads "the outcome of relevant Internal Audit reviews" when it judges a firm's statements of responsibilities and responsibilities maps.Source: PRA SS35/15, para 2.64 (opens in a new tab)
What you get
-
Start fieldwork from recorded history, not spreadsheets.
Every control shows its owner, last test and result, recorded by the first line as they work.
- Today
- Spreadsheets across teams
- With CoVi Analytics
- One history per control
Control historyC-137 Coverholder auditsIneffective- Owner named
- Last test on record
- Results over time
- Linked incidents
-
Plan on what is failing, across all 158 controls.
Failed controls and incidents show on the step where they happen, so your plan follows the evidence.
- Today
- Ranked by size, not by evidence
- With CoVi Analytics
- Ranked by failed controls and incidents
Audit universe, by evidenceHalden · weakest first26 of 158- DA oversightAnnual coverholder audit1 failed
- ReservingClaims authority agreement1 failed
- Bordereaux validationC-138Partial
-
Take root cause to the audit committee already traced, not rebuilt.
Each incident links to the step, the control and the action, even where the control tests effective.
- Today
- Rebuilt by hand for each committee
- With CoVi Analytics
- One trail, already linked
IncidentINC-033 · late bordereauxStepReceive and validate bordereauxControlC-015 · rated effectiveActionOwner named, date set
Be the assurance the audit committee relies on.
Your audit plan follows the control evidence, so your work goes where controls are failing.
See your audit plan follow the evidence.
Tell us how you rank the audit universe today, and leave knowing where to start.
We'll walk you through how it all comes together with Halden.