Check every transaction, not just the sample.
Process mining shows how a process really runs, for the whole population. You find breaches that a sample misses and deliver evidence that an auditor or regulator can follow.
From sample to full population.
We began in data-driven GRC. That experience shapes how we set up controls.
100% testing
Every invoice, order or journal entry against the same rules, instead of a random sample.
Segregation of duties
See where the same person creates and approves a transaction, or where approval is missing.
Continuous monitoring
Controls run again every month, so you find deviations while they can still be corrected.
See where the process deviates from policy.
Policy describes how it should be. Process mining shows how it is, with the cases attached.
- Evidence you can share: the deviating cases, traceable to the source.
- Measurable whether a measure works, based on the situation before and after.
- Repeatable for the next audit, with the same rules and the same source data.
- Aligned with GRC: the outcomes fit your existing risk framework.
Where audit usually starts.
Payments without approval
Payments for which no approval is recorded, or where it was only given afterwards.
Changes to bank details
Suppliers whose bank account number was changed shortly before a payment.
Duplicate invoices
The same invoice, or nearly the same, booked or paid more than once.
Entries outside office hours
Manual journal entries at unusual times, or after the month-end close.
These are examples of controls. Together we decide which rules fit your risks and policies.
Continuous: controls that run every month.
For audit and compliance the Continuous package fits best: several processes, ongoing controls and action tracking.
- Up to three processes
- Continuous controls monitoring
- Extra analyst hours on demand
- Action tracking and licences included
See what your process really does.
Send us a sample extract and within a week you get three deviations back, free of charge and without obligation.