Process
How a Digi Auto Hub engagement unfolds
A transparent sequence for policy exception tracking work—so internal audit knows when evidence is due and when the closing briefing lands.
This process underpins our flagship Policy Exception Review Engagement. Health checks and follow-up audits use a shorter path with the same evidence discipline.
Step 01
Scoping call
We confirm the policy set, register format, period under review, and whether you need sampling or full-population coverage. You leave with a written estimate and evidence request list.
Step 02
Register intake
Your team exports the exception register and related approvals. We map IDs, owners, expiry dates, and compensating-control fields before any testing begins.
Step 03
Evidence collection window
Control owners receive a structured ask with due dates. Delayed packs extend the timeline; we escalate silence to the audit lead rather than chasing indefinitely.
Step 04
Testing and write-ups
We re-perform compensating controls where claimed, note gaps, and draft findings with severity, policy reference, and suggested remediation.
Step 05
Owner responses
Findings go to named owners for factual comment. Disagreements are documented; we do not silently soften ratings.
Step 06
Closing briefing
Internal audit and selected owners receive the register pack, remediation tracker, and a short briefing timed for your committee calendar.