DoD FM

IT Application Control Catalog Harmonization Assistant

Very High priorityMedium-High riskDirect public-source process / targetTier 0 — Audit data foundationMedium complexity

Description

Map local IT controls to standardized control catalogs and identify gaps in documentation or testing coverage.

AI / analytics pattern

LLM + control ontology

Automation level / stage

assistive/analytics with human review

Expected benefit

Standardizes documentation and strengthens systems control environment.

Audit / financial statement impact

Supports IT access/control NFR remediation.

Controls / human review

Human review for exceptions and recommendations; maintain evidence packages, lineage, source citations, model cards, data-quality checks, and periodic QA sampling.

Data needed

source transactions, reference tables, audit evidence, user/action logs as applicable

Possible metrics

cycle time, match rate, exception aging, NFR closure, audit support effort, data quality score

MVP scope

Pilot with one reporting entity, one fiscal quarter, and read-only outputs before workflow integration.

Related material weakness / control objective

Directly tied to cited DoD FM/audit priority or system mission.