Bored Analyst

Risk & Assurance Analytics

Analytics for risk, internal audit, compliance, and assurance: controls testing, issue tracking, and risk metrics.

Key metrics

  • Control effectiveness — Pass/fail rates, coverage, exceptions
  • Issue aging — Open issues by age, severity, and owner
  • Risk scores — Aggregate risk by area, process, or entity
  • Audit coverage — % of population or spend audited
  • Remediation rate — Time to close findings

Controls analytics

  • Control testing — Sample sizes, exception rates, trends
  • Segregation of duties — Conflict detection, access overlap
  • Process compliance — Adherence to policies and procedures

Compliance analytics

  • Regulatory reporting — Metrics for SOX, GDPR, industry rules
  • Policy exceptions — Waivers, overrides, and approvals
  • Training completion — Compliance training and certifications

Common analyses

  • Control test results over time and by process
  • Issue backlog and aging by severity
  • Risk heat maps and trend analysis
  • Audit plan coverage and resource allocation

On this page