Skip to main content

Audit Universe

The Audit Universe is a complete inventory of everything your organization can audit — business units, processes, systems, and functions. It drives your strategic and annual audit planning.

What's in the universe​

Each entry (called an auditable entity or unit) represents something that can be audited:

  • Business units or departments
  • Processes (e.g., procurement, payroll, lending)
  • Systems (e.g., core banking, ERP)
  • Compliance areas (e.g., AML, data protection)

Entity details​

Each entity includes:

  • Name and description
  • Risk score — High, Moderate, or Low (based on risk factor assessment)
  • Last audit date — When it was last audited
  • Audit cycle — How often it should be audited (derived from risk level)
  • Responsible person — Who owns this area

Risk heatmap​

The Audit Universe includes a visual risk heatmap that plots entities by their risk scores. This helps you identify high-risk areas that need attention and low-risk areas that can be deferred.

Access the Audit Universe from the sidebar under Plan:

  • Audit Universe — Browse and manage entities
  • Strategic Plan — Multi-year planning view
  • Annual Plan — This year's audit schedule
  • Resources — Team capacity management

What's next​