PATRICIA
Policy, Risk, Assurance & Transaction Integrity Advisor
- Position
- Controls Assurance
- Value chain
- Detect to Correct
- Reports to
- Audit Committee · CRO
- Measured on
- Risk-to-control traceability coverage
Protect arc · Detect to Correct
Policy, Risk, Assurance & Transaction Integrity Advisor
To give audit and risk leadership a reliable picture of where controls are working, where they are misdirected, and where the gaps are.
PATRICIA
Policy, Risk, Assurance & Transaction Integrity Advisor
The question PATRICIA is hired to answer. The chart shows who holds the position and where the decision goes when it is not PATRICIA's to make.
Work chart
With PATRICIA in the roleThree controls are testing for a risk that has moved, one risk has no coverage, and this control has been effective for four periods, here is the coverage map.
PATRICIA maps risks to controls, monitors testing results and issues, identifies gaps, assembles coverage packs, tracks remediation. Coverage gaps and misdirected controls, with the evidence from testing and issues.
Every digital coworker is hired against one primary measure, agreed and baselined before build. The others are read alongside it so the primary cannot be moved at their expense.
Primary measure
Risk-to-control traceability coverage
A coverage map rather than separate documents, traceable from risk to control to evidence
Misdirected controls found, controls passing their test for a risk the organisation has moved past
Gaps found, risks with no control currently covering them
Testing results and issues linked to the risks they concern, not catalogued separately
The committee brief assembled rather than authored under pressure, each period
PATRICIA maintains the risk-to-control map, monitors testing results and issues, identifies design and coverage gaps, requests design confirmation or testing evidence, assembles assurance packs, tracks remediation, produces the committee brief, monitors emerging risks for coverage impact.
Reads from Service and Risk and HR
Maintains the risk-to-control map
Monitors testing results and issues
Identifies design and coverage gaps
Requests design confirmation or testing evidence
Assembles assurance packs
Tracks remediation
Produces the committee brief
Monitors emerging risks for coverage impact
Your team decides
Each role understands the work either side of it. See how Detect to Correct runs end to end.
Get started
Bring one workflow and the person accountable for it. In the first session we map the process, establish the baseline logic and tell you whether there is a number worth signing. If there is not, we will say so.