Monitoring
A monitoring plan that runs on time.
A monitoring plan per entity and year, with every test linked to controls and requirements. Calendar, reminders, escalation and a signed period report.
What it replaces
A monitoring plan in a spreadsheet, reminders in personal calendars, and a period report assembled by hand from emails and folders.
How it works
Step 1
Build the plan
A plan belongs to an entity and a period, the calendar year by default. Each test records its objective, methodology, sample size, frequency, owner, reviewer, and the controls and requirements it checks.
Step 2
Run it on schedule
Due dates are generated from each test's frequency. Owners get reminders at the offsets you set, and overdue tests escalate to the reviewer. Each run records who performed it, when, the result, observations, evidence and any findings.
Step 3
Close the period
Kompendra generates the period report with every test, its result, its evidence hashes and any findings. It goes through your approval workflow and e-signature. Approved reports are locked.
Why it exists
Regulators expect a risk-based compliance monitoring programme that is planned, approved, carried out and reported. The hard part is not writing the plan. It is showing, months later, that each test ran when it should have, who ran it, what they found and what happened next.
In Kompendra each test result is a record with its evidence attached and hashed. Failed tests raise findings in the same system. The period report is built from those records, so it matches what happened.
Suggested tests
When you mark a requirement applicable, Kompendra can suggest monitoring tests from the requirement text and your own policies: a title, objective, methodology, sample size and frequency, citing the requirement. You accept, edit or reject each suggestion. Nothing is added without your decision, and the decision is recorded. You can switch AI suggestions off for your firm.
Calendar
The calendar shows every due test by month, filtered by owner. Each user can subscribe to their own due items from their calendar app with a personal ICS feed. Reminders go by email.