Planning
Audit universe and coverage
The universe is built from the org structure, processes, systems and projects in the core. Each domain has a score from 0 to 100 recorded by the audit team and an inherent-risk level, and the GRC codes cited are matched against the risk register. Sort by score, last coverage or scheduled audit cycle. GRC-REQ-011
| Domain | Scope | Audit universe score (0–100) | Inherent risk · control strength | Last coverage | Cycle | Sources | Status |
|---|
The audit-universe rating is an independent index with six weighted factors (ADR-DEC-178) · bands: 80 or more is Very high · 65 is High · 40 is Medium · below 40 is Low · and the cycle recommended for each band — 12, 24, 36 and 48 months — drives the plan (ADR-DEC-182)Build the plan from this list