Area 07 — Accountability

Risk & compliance that's
provably in place

Enterprise risk frameworks, ISO 27001 readiness, regulatory gap analysis, and forensic investigation support — every finding anchored to an immutable KERI audit trail.

Area of Focus
07 — Accountability
Typical Timeline
3–12 weeks
Services Available
5 services
Status
Live + Beta
Practice Area — Risk & Compliance

What we deliver

Every risk and compliance deliverable is KERI-anchored — not just documented but cryptographically evidenced, so auditors can verify without trust.

Live
Traditional: Risk Consulting
Enterprise Risk Framework Design
Comprehensive risk taxonomy, appetite and tolerance statements, and control mapping — built to satisfy board, audit committee, and regulator requirements simultaneously, with automated monitoring triggers.
Timeline3–5 weeks
DeliverableRisk register, control matrix, risk appetite statement, board reporting pack
OutcomeAudit-ready risk framework with continuous automated monitoring
Agent Roster
  • Risk Register Agent — automatic risk taxonomy building and scoring
  • Control Mapping Agent — maps controls to risk appetite and regulatory obligation
  • Board Reporting Agent — risk committee pack generation and distribution
Live
Traditional: Regulatory Compliance
ISO 27001 & SOC 2 Readiness
End-to-end readiness programs for ISO 27001, SOC 2 Type II, and local regulatory frameworks. Gap analysis, full 93-control policy suite, Statement of Applicability, and KERI-anchored evidence infrastructure.
Timeline6–12 weeks
DeliverableSoA (all 93 controls), full policy suite, control evidence library, audit readiness report
OutcomeCertification-ready posture with living compliance infrastructure
Agent Roster
  • SoA Generator Agent — all 93 Annex A controls mapped and documented
  • Policy Writer Agent — ISO-aligned policy suite tailored to your context
  • KERI Audit Evidence Agent — cryptographic evidence infrastructure
Live
Traditional: Regulatory Advisory
Regulatory Gap Analysis & Remediation
Multi-jurisdiction regulatory mapping with prioritised remediation roadmap, obligations register, and horizon scanning for upcoming regulatory change. Covers APRA, ASIC, AUSTRAC, OAIC, and international frameworks.
Timeline2–4 weeks
DeliverableObligations register, gap analysis, remediation roadmap with prioritisation, horizon scan
OutcomeClear regulatory obligations inventory with sequenced, costed remediation plan
Agent Roster
  • Regulatory Mapper Agent — multi-jurisdiction obligations analysis
  • Gap Scorer Agent — prioritised remediation with effort/risk scoring
  • Horizon Scanner Agent — upcoming regulatory change and impact assessment
Beta
Traditional: Forensics & Integrity
Fraud & Integrity Investigation Support
Agent-assisted investigation support for fraud, misconduct, and integrity matters — timeline reconstruction, anomaly detection, and KERI-based chain-of-custody for all evidence.
TimelineTimeline varies by matter
DeliverableInvestigation report, evidence timeline, ACDC-packaged evidence, chain-of-custody log
OutcomeTamper-proof evidentiary record with cryptographic provenance for regulators or courts
Agent Roster
  • Transaction Forensics Agent — anomaly detection & timeline reconstruction
  • ACDC Evidence Agent — tamper-proof evidence packaging with KERI anchoring
  • Witness Chain Agent — cryptographic chain of custody documentation
Live
Traditional: Internal Audit
Internal Audit Program Design
Audit universe mapping, risk-based annual audit plan, fieldwork templates, and reporting standards — with agent-assisted high-volume transaction testing to free auditors for judgment-intensive work.
Timeline3–5 weeks
DeliverableAudit universe, risk-based audit plan, fieldwork templates, reporting framework
OutcomeStructured internal audit capability with agent-accelerated execution
Agent Roster
  • Audit Universe Agent — risk-scored audit universe mapping
  • Testing Agent — high-volume transactional and control testing
  • Findings Writer Agent — structured audit findings and management response tracking
Process

How a Risk & Compliance engagement works

01
Scope & Obligations
We map your regulatory obligations, existing controls, and risk landscape to establish the engagement baseline.
02
Gap Assessment
Agents conduct a systematic gap analysis against your target framework — ISO 27001, APRA CPS, or custom.
03
Remediation Design
Conductor designs a prioritised remediation roadmap with effort estimates, timelines, and ownership allocation.
04
Evidence Build
Policy suite, control evidence, and audit documentation generated — every artifact KERI-anchored.
05
Audit-Ready Delivery
Certification-ready pack delivered. Ongoing monitoring agents keep your posture current as the environment changes.
Infrastructure

Every engagement is cryptographically evidenced

KERI Identity Stack
Every conductor and agent holds a KERI AID — no central authority, self-certifying key events.
ACDC Credentials
Agent authorities issued as scoped, time-limited ACDC credentials — chained to your engagement inception event.
Immutable Audit Trail
Every action anchored via KERI interaction events. Tamper-evident by architecture — not by policy.
Human Conductor
A named conductor holds the authority credential and is personally accountable for outcomes.