control-testing

Validate and test security controls to ensure they are working effectively

Simulated SOX ITGC control assurance lab with evidence workflows, control testing, remediation tracking, CISA KEV enrichment, anomaly detection, NIST/ISO mapping, and Grafana dashboards.

Internal audit programs, control testing workpapers & SOC 2 evidence request lists

Simulated ITGC test pack (portfolio project, fictional client, fabricated data): 15 controls across logical access, change management and IT operations with seeded sampling, computed attribute testing, root-cause analysis and retest.

HIPAA-aligned GRC program for a healthcare system using OpenMRS.

Synthetic AML control-testing and investigation platform with deterministic scenarios, explainable evidence, and automated regression coverage.

Evidence-based GRC risk assessment and control-testing workpaper for GoLemon: risk register, evidence register, testing procedures, and audit-ready methodology.

Synthetic banking AI risk management control tower demonstrating AI inventory, risk assessment, mitigation planning, controls, evidence tracking, ownership, and framework mapping.

Interactive browser-local SOC 2 evidence review and control testing simulation

Deterministic audit evidence review pipeline for control mapping, coverage checks, and exception detection.

Connected GRC operating workspace — AI governance, third-party AI/LLM risk, audit readiness, drift/change review, continuous assurance and traceable decision exports.