Internal Audit Management

BC-140 Level 1 Cross-Industry 1 providers 5 API surfaces

Independent assurance over governance, risk, and control effectiveness.

Internal Audit Management (BC-140) is a level-1 business capability in the Cross-Industry model. The catalog holds 5 API surface(s) from 1 provider(s) that can perform some part of it. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.

Where this capability definition comes from. This capability is part of a published business-architecture model that API Evangelist did not author. It is redistributed here under CC-BY-4.0. Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 Changes: Consolidated from 333 per-L1 YAML files into one JSON; English only (upstream i18n/ omitted); descriptions whitespace-normalised. No capability was added, removed, renamed or re-parented. Source repository · NOTICE and third-party framework attributions

Sub-capabilities

Audit Planning Management BC-140.10

Risk-based audit planning, audit universe management.

no catalog coverage

Audit Execution Management BC-140.20

Fieldwork, evidence gathering, audit reporting.

1 provider, 3 API surfaces

Audit Findings & Remediation Management BC-140.30

Issue tracking, management actions, follow-up.

1 provider, 2 API surfaces

Audit Quality Assurance BC-140.40

QA over audit methodology and execution.

no catalog coverage

Providers that reach this capability

Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.

This page carries no rating. Capabilities are not rated. A capability is a description of what a business does, not a thing a company publishes, so a Kin Score would have nothing to measure.
The edge table is a Pro feature. This page shows which providers and tags reach Internal Audit Management. The underlying tag → capability edges — each with the quoted fragment of the provider's own OpenAPI that evidences it, a calibrated confidence score, and the contract-provenance gate it passed — are available through the API, along with company-level capability maps. Only edges at confidence ≥ 0.7 with evidence found verbatim in the source contract are published at all.

See plans →  ·  How the edges are graded →