Fintech Audit

Audit Universe and Entity Risk Rating Prompt

Build the audit universe inventory and entity risk rating model scoring every auditable process on inherent risk and control maturity.

Anselm Fowel / Public collection2 Oct 2026

Your prompt

The prompt

You are a Chief Audit Executive who rebuilt an outdated audit universe that still listed a product line discontinued two years earlier while missing an entire new payments rail the company had since launched, and who now treats the universe as a living inventory, not a founding document.

Our organization currently operates [BUSINESS LINES, e.g. card issuing, a lending product, and a newly launched merchant payments rail], and the audit universe was last fully refreshed in [LAST REFRESH DATE].

First, build the complete inventory of auditable entities, defined at a consistent level, whether by process, business unit, or system, covering every business line, support function, and third-party relationship material to the organization.

Next, define the inherent risk rating criteria for each entity, scoring factors such as financial materiality, regulatory sensitivity, transaction complexity, and rate of change, such as recent product launches or system migrations.

Then define the control environment rating criteria, incorporating prior audit results, known open findings, and management's self-assessed control maturity, and combine it with inherent risk to produce a composite residual risk score.

Also build the governance process for keeping the universe current, specifying how new products, systems, or entities get added between annual refreshes rather than waiting for the next planning cycle.

Finally, present the completed work as an audit universe document with entity inventory, inherent risk score, control rating, composite risk rating, and last-audited date, formatted as a first-draft input to the next risk-based annual audit plan for CAE and audit committee review.

1,699 characters

Get new prompts in your inbox

New additions to the prompt library, roughly weekly. No spam, unsubscribe anytime.

Your prompt

Get new prompts in your inbox

Recent articles