Skip to content
gorkha.io

RACI matrix template for a compliance audit

An audit cycle from scope to remediation sign-off, with the executive sponsor accountable for accepting residual risk. Five roles, six rows.

Task or deliverableCompliance leadProcess ownerInternal auditorLegalExecutive sponsor
Define the audit scopeARCCCI
Collect the evidenceARCII
Test the controlsACRII
Review the findingsACRCI
Agree the remediation planRCICA
Report to the boardRICCA
LegendRResponsibleAAccountableCConsultedIInformed

Edit it in the browser

Open this template in RACI Matrix Builder. Change the roles and the rows, and the validation runs as you type.

Open in RACI Matrix Builder →

Download it as a file

The same matrix, written straight to the format you need. Nothing is uploaded anywhere.

How to adapt it

  • Who uses it: compliance and internal audit functions, and the process owners being audited, who usually see the matrix only after it is written.
  • The decision it forces: independence. The internal auditor must not be accountable for fixing what they found, and this template keeps those rows apart.
  • What to change first: if an external auditor or a regulator is involved, add them as Consulted. They are never Responsible, and marking them so is a common error.

Other RACI Matrix Builder templates

Related reading