Audit universe & risk assessment
Record auditable areas, assess risk and prioritise work across the organisation.
TECHNOLOGY SOLUTIONS
Choose the right technology. Implement it properly. Obtain lasting value.
GAC helps organisations evaluate, implement, integrate, review and support enterprise systems. We work across platforms and begin with the business requirement rather than a predetermined product.
IDEAS.
PEOPLE.
SOLUTIONS.
A STRONGER AFRICA.
PEOPLE.
SOLUTIONS.
A STRONGER AFRICA.
Our multi-platform approach
The right solution depends on the organisation's requirements, users, infrastructure, security, deployment preference, integration needs, regulatory environment and budget. We help clients assess these factors and select a solution that can be implemented and sustained.
Our role may include requirements definition, vendor evaluation, implementation management, configuration support, data migration oversight, user acceptance testing, controls review, training, adoption and post-implementation support.
Our services
- Business and system requirements definition
- Solution and vendor evaluation
- Audit management systems
- Enterprise risk management systems
- Governance, risk and compliance platforms
- Fraud-risk and case-management solutions
- Data analytics and continuous-monitoring tools
- Workflow and document-management solutions
- Implementation and project assurance
- Data migration and integration oversight
- User acceptance testing
- Technology controls and security reviews
- Training, adoption and continuing support
Audit management technology
We help internal audit functions move from fragmented files and spreadsheets to structured planning, working papers, issue follow-up, reporting and knowledge management. The objective is not simply to install software; it is to improve the quality, visibility and efficiency of the audit process.
Digital assurance
GAC reviews whether systems and technology projects are properly governed, controlled and aligned with the intended business outcome. We assess risks across access, change, data, interfaces, processes, reporting, continuity and user adoption.
02 / TECHNOLOGY THAT WORKS
Expertise, built
into your systems.
Software implementation supported by people who understand audit, controls and business data.
DATA & CONTINUOUS MONITORINGGrandeAfrique
GrandeAfrique
Analytics
Connect your data. Discover the exceptions. Keep management informed.
- Read-only connections and uploaded datasets
- Analysis on a separate server in your agreed environment
- Recurring checks, email results and dashboards
- GAC-developed scripts, conversion and local support
FROM DATA TO DECISIONS
Source systems↓ Read-only extractionSeparate analytics server↓ Validated analytical testsInsights · Exceptions · Dashboards
Analysis runs on extracted data, outside the production system.INTERNAL AUDIT MANAGEMENT SYSTEM
Auditrunner
A connected audit lifecycle—from your audit universe to the closure of agreed actions.
Explore implementation with GAC →Explore Auditrunner AMS in detail →Risk assessmentAudit planningWorking papersReview & approvalsAudit reportingFindings & follow-up
Audit Management Technology
Support the complete internal audit cycle, including audit universe management, risk assessment, planning, working papers, review, findings, action follow-up, reporting and knowledge management.
Enterprise Risk Management
Create a connected view of objectives, risks, controls, appetite, treatment plans, indicators, incidents and reporting across the organisation.
Fraud Risk Management
Strengthen fraud-risk assessment, prevention, detection, allegation management, investigations, evidence, case monitoring and remediation.
Data Analytics Intelligence
Identify exceptions, anomalies, trends and control failures across financial and operational data using tests designed around the organisation's actual risks.
Continuous Auditing & Monitoring
Move selected tests from occasional review to repeatable, data-enabled oversight with appropriate ownership, investigation and reporting.
AUDITRUNNER AMS
The full internal audit lifecycle, in one system.
Auditrunner is GAC’s Internal Audit Management System offering. It supports risk-based planning, fieldwork, electronic working papers, review, reporting and follow-up, with implementation, user training and continuing support from GAC.
Bring the audit process together
Teams can work from a shared methodology instead of disconnected spreadsheets and files. Auditors retain evidence, reviewers see the basis for conclusions, and action owners have a clearer record of what must be completed.
The system supports internal audit teams, heads of audit, reviewers, management action owners and oversight users according to the agreed roles and access arrangements.
CORE MODULES
From the audit universe to closure of agreed actions.
Annual & engagement planning
Set plans, scope, teams, schedules and resource budgets for individual engagements and the audit programme.
Audit programmes & fieldwork
Reuse procedures, record tests and document findings, causes and recommendations.
Electronic working papers
Retain supporting evidence and a structured record of work performed within the audit engagement.
Review & approvals
Resolve review notes, record electronic sign-offs and retain a traceable review and approval history.
Audit reporting
Prepare structured reports and capture management responses alongside the findings.
Findings & action follow-up
Assign action owners, record due dates, send reminders and track supporting evidence through to closure.
Dashboards & management reporting
View progress, workloads, findings and overdue actions for management and audit oversight.
CONNECTED CAPABILITIES
Connect audit work to risk, compliance and data.
Enterprise Risk Management
Within the agreed scope, record risks, controls, owners, ratings and heat maps. Link priorities to the organisation’s risk picture.
Analytics and continuous monitoring
Support data testing and recurring exception checks alongside audit work. GAC helps define and validate tests around the client’s processes and available data.
Compliance and remediation
Track obligations, exceptions and corrective actions within the agreed configuration and implementation scope.
Administration and collaboration
Configure users, role-based access, organisational structures and workflows. Web-based access supports collaboration, with cloud or client-premises deployment agreed for the engagement.
IMPLEMENTATION WITH GAC
Configure the technology around your methodology.
Define the requirements
Review the audit approach, users, report needs, existing records, infrastructure and deployment preference.
Configure & migrate
Set up agreed modules, structures, workflows and templates. Migrate the records included in the implementation scope.
Test & train
Test the workflows with users, validate agreed outputs and train auditors, reviewers, action owners and administrators.
Go live & support
Support adoption, agree ongoing assistance and help teams improve how they use the system.
WHAT THE CLIENT RECEIVES
An implemented system and a team ready to use it.
- A configured system with agreed modules, roles and workflows.
- Audit programmes and report templates aligned to the agreed methodology.
- Migrated records and tested processes within the implementation scope.
- Trained users and administrators, with agreed support arrangements.
- A structured record of audit work, management responses and action status.
- Professional support for audit planning, quality improvement and ICT control reviews where included.
Can the system follow our audit methodology?+
GAC configures the system around agreed structures, procedures, workflows and templates. These requirements are reviewed during scoping.
Can existing records be migrated?+
Migration can be included. GAC agrees the sources, quality checks, records in scope and validation arrangements before implementation.
What does a demonstration cover?+
Ask for a demonstration of the audit lifecycle, working papers, review, reporting, action tracking and the modules relevant to your team.