Could your audit
function evidence
every review it owes?
Answer 15 questions across four domains. Get an instant maturity score against the IIA IPPF and the review obligations SAMA and the NCA impose — including the CSCC independent review on a three-year clock that most functions are not counting.
15 questions. Instant results. No signup required to start.
Independence, planning, engagement, and the regulated reviews — all benchmarked.
IIA standards plus the SAMA and NCA reviews that carry fixed frequencies.
Leave with your top 3 gaps ranked and specific first steps.
How ready is your internal audit function?
15 questions across 4 control domains. One at a time. Keyboard-driven. You'll get an instant maturity score and a prioritised remediation roadmap in under five minutes.
What happens after you complete the assessment?
Your results are instant. You can also choose to receive a personalised report reviewed by practitioners who have run internal audit functions through SAMA and NCA examinations.
Instant maturity score
See your overall readiness percentage and where the function sits — Initial, Developing, Defined or Managed.
Domain-by-domain breakdown
Understand whether independence, planning, engagement quality or the regulated reviews is your weakest link.
Prioritised remediation plan
Walk away with your top 3 gaps ranked, including any fixed-frequency obligation that has slipped its window.
Run the audit function on connected data
Universe, annual plan, engagements, working papers, recommendations and committee reporting in one place — with the SAMA and NCA control libraries already mapped, so a compliance audit draws on evidence you have already collected.
Universe to committee pack
One connected chain — auditable unit, risk rating, plan, engagement, finding, recommendation, committee report.
Regulated review tracker
The fixed-frequency obligations held with owners and next-due dates, counted from the last completion rather than intent.
Evidence collected once
Working papers captured against control references, so an audit of SAMA CSF and one of NCA ECC share the same evidence store.
Run another readiness assessment
Score your maturity against the other Saudi frameworks — same conversational format, same instant results.
NCA ECC Readiness
The baseline NCA cybersecurity controls, including subdomain 1-8 on periodical review and audit.
NCA CSCC Readiness
Critical systems controls — the source of the annual and three-yearly review obligations.
BCM Readiness
Score your business continuity maturity against ISO 22301 and the SAMA BCM Framework.