Appventure

Case study

GRC Platform: internal controls, internal audit and the risk register in one place

Every control with its preparer and reviewer, every test plan with its outcome, and the risk register beside them, so a company can monitor, govern and manage its controls from one screen.

Client: our own, first designed with a global firmSector: Governance, risk and compliance

The build

What the problem was, and what we did about it.

The problem

Controls live in one spreadsheet, the internal audit plan in another, the risk register in a third, and the evidence in everybody's inbox. Nobody can say, on any given day, where the control environment stands.

What we built

A governance platform for internal controls, internal audit and the risk register: each control has a preparer and reviewers with due dates and chasing, test plans record whether a control operates and what was found, deficiencies trace to their root cause and remediation, and the dashboard shows the state of the environment by month and financial year.

Illustration: the GRC platform's home screen, its menu beside its pictureThe front door
Illustration, close up: My Controls for the month, each control with its preparer and reviewers, the overdue ones markedA working screen
A closer look

An illustration of the system, drawn for this page with demo data. Nothing shown is a client's own.

Built with

  • Power Apps
  • Power Automate
  • Dataverse
  • Power BI

Start a conversation

Yours would be the next one on this list.

Tell us the problem. We'll tell you whether we're the right people, what it would take, and what it would cost before anybody starts building.