RACI — Compliance Audit
SOC 2 style audit cycle: compliance owns the program, audit lead runs fieldwork, IT and legal support, department heads respond.
Make it your own.
title "SOC 2 Type II audit"
roles: Compliance, Audit Lead, IT, Legal, Dept Heads
Scope & timeline | A, R, C, C, I
Control mapping | A/R, C, R, C, I
Evidence collection | A, C, R, -, R
Access reviews | A, I, R, -, C
Policy updates | R, -, C, A, I
Fieldwork interviews | C, A/R, C, -, R
Findings remediation | A, C, R, C, R
Final report sign-off | R, R, I, C, A