Consultancies
Repeat the delivery checklist: interview captured, evidence gap opened, owner assigned, workbook row checked.
- OK Interview note
- OK Evidence request
- OK Workbook row
INTERVIEW TO WORKBOOK
Interviews, evidence requests, risk notes, and workbook rows usually split into different files. unrisk.ing keeps the Northstar payroll review linked from the first HR answer to the export row.
Open the sample before sign-in: interview note, evidence gap, owner, control, and export row.
WHO USES THE SAME SAMPLE FLOW
Repeat the delivery checklist: interview captured, evidence gap opened, owner assigned, workbook row checked.
Keep ownership and evidence continuity when the same control returns next month or the reviewer changes.
Review the client story as a mini case: what was said, what is missing, who owns it, and what exports.
Acme asks why the leaver row is blocked; the review shows the missing exception list before export.
SAMPLE FLOW
Follow the Northstar payroll sample from interview note to evidence gap, owner and control assignment, then workbook row and export.
REVIEW TIMELINE
NORTHSTAR REVIEW BOARD
INTERVIEW NOTE
EVIDENCE GAP
WORKBOOK ROW
PHASE 01: CAPTURE
“After HR approves a new joiner, which system creates the access request?”
“Workday creates the task. IT Security reviews joiner and leaver access daily.”
EVIDENCE REQUESTS
↥PHASE 02: REVIEW
The sample keeps the risk note, missing evidence, owner, and control row together so reviewers can see what must happen next.
Northstar’s leaver access gap asks for the exception list before the row can export.
| RISK | STEP | NEXT | STATUS |
|---|---|---|---|
| Leaver access still active | Access Revocation | Request exception list | Evidence gap |
| Vendor change lacks approval | Vendor Changes | Ask owner for support | Needs review |
| Journal review already signed | Journal Entry | Keep linked in workbook | Ready |
PHASE 03: EXPORT
| CONTROL ID | RISK ID | CONTROL ACTIVITY | TYPE | FREQ | OWNER | FRAMEWORK |
|---|---|---|---|---|---|---|
| INT-001 | RISK-011 | HR says Workday creates the joiner access task. | Interview note | Captured | HR Ops | UK-P29.1 |
| GAP-014 | RISK-011 | Monthly leaver exception list is missing from the file. | Evidence gap | Open | IT Controls | SOX 404 |
| CTRL-027 | RISK-011 | IT Controls reviews leaver access and signs the exception list. | Detective | Monthly | IT Controls | ISO:A.9.4.2 |
PRODUCT-BACKED PROOF
The Northstar sample opens so buyers can inspect the review path before creating an account.
Interview notes, evidence gaps, owners, and controls travel together into the workbook row.
Missing evidence is shown before the workbook leaves the review team.
The same row can show UK Provision 29, SOX 404, and ISO references without changing the story.
Open the sample engagement, follow the evidence gap, and check the workbook row before sign-in.