Protect arc · Detect to Correct

IDRIS

Issue Detection, Risk & Integrity Sentinel

To test the full population rather than the sample your team has time to reach.

Book a meeting Back to Agent Marketplace
Employee IDPXN-D2C-003

IDRIS

Issue Detection, Risk & Integrity Sentinel

Position
Controls Testing
Value chain
Detect to Correct
Reports to
Audit Committee · Chief Risk Officer
Measured on
Population coverage versus sample
Authorised · Logged · ReversibleRuns in Service and Risk and HR

What did your last control test actually cover?

The question IDRIS is hired to answer. The chart shows who holds the position and where the decision goes when it is not IDRIS's to make.

Work chart

  1. AccountableAudit Committee · Chief Risk Officer
  2. Position held byIDRIS
  3. Escalates toHead of internal audit · External auditors · Legal · Audit committee

With IDRIS in the roleThe full population was tested, these 23 exceptions raised themselves, here is the pattern across them, and it did not appear in the prior-period sample.

IDRIS tests the population, identifies exceptions, ranks and patterns them, assembles finding packs, tracks remediation, re-tests. Nothing about a person, only about a control and its exception population.

The number IDRIS is measured on

Every digital coworker is hired against one primary measure, agreed and baselined before build. The others are read alongside it so the primary cannot be moved at their expense.

Primary measure

Population coverage versus sample

  • Exception identification rate and false-positive rate
  • Time from exception identification to owner remediation
  • Re-test pass rate
  1. 01

    Full-population testing replacing sampling where data access exists

  2. 02

    A control that passes the sample and fails broadly is now findable

  3. 03

    Exceptions ranked by materiality and pattern, so the audit team starts with the most significant

  4. 04

    Prior-period comparison built into every finding, because a pattern that spans periods is a more significant finding than one that does not

  5. 05

    Remediation tracked to completion and re-tested, which is what closes a finding rather than recording it

What IDRIS does alone, and what stays with your team

IDRIS reports to the Audit Committee · Chief Risk Officer. Anything outside the written boundary goes to head of internal audit, external auditors, legal or audit committee, with the evidence attached.

“Authorised. Logged. Reversible.”

Authority, and yoursPXN-D2C-003
Does this aloneTests the population · identifies exceptions · ranks and patterns them · assembles finding packs · tracks remediation · re-tests
RecommendsNothing about a person, only about a control and its exception population
EscalatesMaterial exceptions, regulatory breaches and systemic control failures → head of internal audit and external auditors · Patterns indicating potential misconduct → legal and the defined governance channel · Findings requiring immediate containment → the control owner and risk leadership, with the exposure quantified
Audit Committee · Chief Risk Officer
ProxyN outcome lead

IDRIS's skills, and the workday

IDRIS retrieves and validates the governed data population, applies approved test logic, identifies and classifies exceptions, ranks by severity and pattern, compares to prior period, assembles finding packs, routes to the assessment owner, tracks control owner remediation, re-tests and reports outcome.

  • Applies approved test logic across the full population
  • Ranks exceptions by materiality, frequency and pattern
  • Identifies control-design versus control-operating failures
  • Compares exception patterns against prior periods
  • Assembles finding packs with the exception list, pattern and recommendation
  • Tracks remediation and re-tests at the agreed interval

  1. Reads from Service and Risk and HR

  2. Retrieves and validates the governed data population

  3. Applies approved test logic

  4. Identifies and classifies exceptions

  5. Ranks by severity and pattern

  6. Compares to prior period

  7. Assembles finding packs

  8. Routes to the assessment owner

  9. Tracks control owner remediation

  10. Re-tests and reports outcome

  11. Your team decides

The other digital coworkers in Detect to Correct

Each role understands the work either side of it. See how Detect to Correct runs end to end.

Get started

Stop Buying Platforms. Start Hiring Outcomes.

Bring one workflow and the person accountable for it. In the first session we map the process, establish the baseline logic and tell you whether there is a number worth signing. If there is not, we will say so.

Book a meeting Visit Agent Marketplace