Requirements Library
Every QA test starts from a requirement. AI-extracted requirements are proposed for human approval — never activated silently.
Proposed by AI — awaiting approval
Extracted from Northbridge IA Methodology v3
| ID | Requirement | Source | Confidence | |
|---|---|---|---|---|
| PR-07 | Data analytics considered in planning Engagement planning must document whether data analytics can be applied to full populations. | Northbridge IA Methodology v3 (uploaded 09/18) · p.14 | 86% | |
| PR-08 | Scope changes approved by CAE Any reduction in engagement scope after kickoff requires written CAE approval. | Northbridge IA Methodology v3 · p.19 | 91% | |
| PR-09 | Exit meeting held within 5 days An exit meeting must be held with process owners within 5 business days of fieldwork end. | Northbridge IA Methodology v3 · p.27 | 74% |
10 requirements
| ID | Requirement | Source | Category | Severity | Tested | Fail rate | Status |
|---|---|---|---|---|---|---|---|
| QR-101 | IIA GIAS · Standard 13.6 | Planning | High | 22 | 9% | Active | |
| QR-104 | IIA GIAS · Standard 13.3 | Scope | High | 22 | 14% | Active | |
| QR-112 | IIA GIAS · Standard 14.6 | Evidence | High | 22 | 18% | Active | |
| QR-118 | Northbridge IA Methodology · IAM §5.4Custom | Supervision | Medium | 22 | 23% | Active | |
| QR-124 | Northbridge IA Methodology · IAM §7.2Custom | Risk Ratings | Medium | 18 | 11% | Active | |
| QR-131 | IIA GIAS · Standard 15.1 | Reporting | High | 20 | 10% | Active | |
| QR-137 | IIA GIAS · Standard 15.2 | Findings | Medium | 20 | 5% | Active | |
| QR-142 | Northbridge IA Methodology · IAM §8.1Custom | Reporting | High | 17 | 12% | Active | |
| QR-150 | IIA GIAS · Standard 15.2 | Follow-up | High | 14 | 21% | Active | |
| QR-160 | IIA GIAS · Standard 2.1 | Planning | Medium | 22 | 4% | Active |
Multi-framework crosswalk
One IA capability mapped across IIA, regulators, COSO, methodology, customer and best-practice criteria. AI-proposed mappings need human approval.
Confirm management has implemented recommendations or accepted the risk.
IA validates remediation of significant issues timely.
Track and validate corrective action for all findings.
Validation testing within 60 days of management's closure date.
Risk-tier validation depth; re-perform for High issues.
All five require evidence-based validation. Unique: methodology 60-day timing; OCC timeliness for significant issues only.
IV-107 validation workpaper → GIAS 15.2, OCC, Methodology 7.4
Framework versions
Changes between versions
| Framework | From → to | Changed requirements | Summary |
|---|---|---|---|
| IIA GIAS | IPPF 2017 → GIAS 2024 | 14 | New Domain III governance requirements; Standard 15.2 validation strengthened. |
| Northbridge IA Methodology | v2.3 → v3.0 | 6 | Validation timing added (7.4); QA sampling updated. |