Risk doesn't wait for its turn.
A platform with artificial intelligence that runs the entire engagement file —plan, requests, evidence, findings and reports— and, if you want it, the MAIP© methodology on top. AI prepares the work: it never signs for you.
Twelve months of activity. Each tall bar is a month with control incidents; a classic annual plan only looks in twice a year.
A platform and a way of working
MAIP© is two things, and they can be contracted together or separately. A platform that runs the complete file for internal audit, regulatory compliance and risk management —plan, requests, evidence, testing, findings, report and follow-up— with artificial intelligence supporting you throughout the process. And a methodology, the Intelligent Preventive Audit Model: adaptive supervision that decides which controls to review, when and in how much depth, based on risk and on what is really known about it. In both, artificial intelligence prepares the work; judgement and signature remain with the auditor.
Two options, depending on what you already have
The platform
For units that already have their own method and want to stop working with folders and emails.
- The entire file: plan, requests, receipt, testing, findings, report and follow-up
- Artificial intelligence supporting you throughout the process
- Requests with a name and an owner, and control of what has been received
- Full traceability: who did what, when and on what evidence
- Reports generated automatically from the file
The platform + MAIP© Methodology
For units that, in addition to the tool, want INTERAFI's preventive supervision model and its judgement in writing.
- Everything in option A, plus:
- Control catalogue by type of firm, kept up to date with applicable regulations
- Fixed and dynamic controls: testing frequency is set by risk, not by the calendar
- Six levels of testing, from the document to evidence that the control is performed
- Coverage rules written in advance, the same for every file
- Reports prepared with INTERAFI's methodology and judgement
From request to signature, in six steps
This is how a process flows through the platform. Click the steps or move forward with the button — the data is fictitious.
Simulation · no real dataDocumentation is requested
AuditorEach document is requested with a name and an owner, and each entity only sees its own.
It arrives and is checked against what was requested
ClientYou can move forward even if documentation is missing, recording the reason. Outstanding items are chased automatically.
Each test gets its verdict
MAIPMAIP checks the documentation provided against applicable regulations. What comes out of this are proposals — never conclusions.
The proposal comes with its evidence attached
MAIP proposesIn 6 of the 20 onboarding files reviewed there is no documentation evidencing the source of funds. The risk classification was correct; enhanced due diligence was not completed.
Law 10/2010, art. 11 · enhanced due diligence
Sample of 20 files (March) · Anti-Money Laundering manual, section 5.3
None of this exists for the report yet: it is a proposal waiting for an auditor.
The auditor decides — and without their signature there is no finding
AuditorTry signing without verifying: the order is not optional.
Approving requires no justification. Dismissing does require a reason, and a dismissed finding is not deleted.
The report is built from what has been signed
SignedWhat is dismissed does not disappear: it stays in the file with its reason. And what was left open goes into the next planning cycle without anyone having to remember.
Five non-negotiables
The model is governed by rules written in advance. These five take precedence over any optimisation.
Guaranteed minimum coverage
No optimisation can leave an obligation or an essential element of the control system uncovered.
Nothing goes unreviewed indefinitely
Maximum horizons and supervision debt prevent an applicable control from being lost from view.
Risk and uncertainty, separately
High risk is not the same as high uncertainty. They are measured on two different axes, because they are different.
Effectiveness over formalism
Existing in a policy is not the same as working. The depth of testing responds to the objective of the control.
Professional judgement prevails
The auditor can correct any proposal, leaving a reason and a trail. Their decision outweighs the calculation.
What is the current situation of your Internal Audit Unit?
Six questions on the governance, traceability and documented judgement of your unit.
Answer the six questions to get an indicative reading of your unit's starting point.
Would you like to discuss this result with an INTERAFI auditor?
Request a sessionWhite Paper, newsletter and demo
Choose where you want to start: the White Paper, with the whole model in writing; the newsletter, covering what is changing in supervision and how the platform reflects it; or a working session with your unit. No commitment and no access to your entity's information.
Calle Maudes 51 · 28003 Madrid
+34 91 781 54 76 · gestion@interafi.com