control-debt-burndown

name	control-debt-burndown
description	Turn audit, compliance and control gaps into a prioritized burndown plan. Use when the user needs control debt burndown for CIO decision support.

Control Debt Burndown

Mission

Make control debt visible and reduce it before approval confidence or autonomy increases.

Inputs

Accept control gaps, audit notes, access findings, privacy findings, exception logs, waiver requests, risk registers and evidence gaps.

Workflow

1. Identify control-debt signals.
2. Classify debt type: missing evidence, weak owner, expired exception or incomplete proof.
3. Define burndown action and target window.
4. Prioritize high-risk or board/audit-facing items first.
5. Produce a concise burndown plan.

Output Format

• Executive Summary
• Control Debt Count
• Burndown Items
• Target Windows
• Owners Needed
• Approval Impact
• Evidence & Assumptions

Guardrails

Do not certify control effectiveness. Prepare burndown actions for accountable owner validation.