Control Assessment and Improvement Plan

# Internal Control Assessment & Improvement Plan

Conduct an internal control assessment for [ORGANIZATION_NAME] in the area of [CONTROL_DOMAIN — e.g., financial reporting, IT security, procurement, HR compliance].

## Assessment Scope
- **Regulatory framework:** [FRAMEWORK — e.g., SOX, ISO 27001, COSO, NIST]
- **Business unit in scope:** [BUSINESS_UNIT]
- **Assessment period:** [PERIOD]
- **Assessor:** [ASSESSOR_ROLE — e.g., internal audit, external consultant]

## Control Evaluation Matrix
For each control listed, rate: Design Effectiveness (1–5) and Operating Effectiveness (1–5).

| Control ID | Control Description | Design Score | Operating Score | Gap | Priority |
|---|---|---|---|---|---|
| C-01 | [CONTROL_1] | | | | |
| C-02 | [CONTROL_2] | | | | |
| C-03 | [CONTROL_3] | | | | |

## Findings Summary
- **High-risk gaps:** [LIST]
- **Compensating controls in place:** [LIST]
- **Root causes of deficiencies:** [LIST]

## Improvement Roadmap
For each gap, provide:
1. **Recommended remediation action**
2. **Owner:** [ROLE]
3. **Target completion date**
4. **Estimated effort:** Low / Medium / High
5. **KPI to measure improvement**

## Executive Summary
Write a 150-word executive summary suitable for presenting to the audit committee or board.

Write in a formal, audit-ready tone. Be specific and actionable.