governance-risk-controls

name	governance-risk-controls
description	Use for governance, risk, compliance, RCSA, audit, maker-checker, approval authority, control design, exception management, privacy, or accountability. Do not invent policy or regulatory requirements.

Governance, Risk, and Controls

1. Identify the objective and risk event.
2. Trace authority to approved policy, contract, regulation, or decision.
3. Define preventive and detective controls inside the workflow.
4. Assign owner, frequency, evidence, threshold, and escalation.
5. Define exception ageing, remediation, closure, and reporting.
6. Test segregation of duties and permission enforcement.
7. Record residual risk and open decisions.

Required model:

Objective | Risk | Cause | Impact | Control | Owner | Frequency
Evidence | Exception | Escalation | Reporting | Remediation