Testing cost, before and after
- Today USD 856,800 → after USD 514,080 (saving USD 342,720).
Global Compliance · Expanded Global Compliance
Compliance Cost Intelligence
Estimate the cost of operating compliance, remediation costs, resource commitments and potentially avoidable spend, keeping actual, calculated, estimated and unverified…
Demonstration: Brightwater Software (fictional) · Software. Fictional data and a scripted answer.
The situation
- Organisation
- Brightwater Software (fictional)
- Who is asking
- Head of governance, risk and compliance
- Industry
- Software
- What happened
- Compliance costs have grown across overlapping frameworks, and the board wants to know what consolidating controls would save.
The question asked
What does compliance cost us a year, and what could we save by testing overlapping controls once?
What it reads, and who can see the result
- Framework control mappings registerWhich controls satisfy which frameworks.
- Compliance cost ledger exportSpend by activity.
- Reads
- Control mappings and the aggregated cost of compliance activities.
- Does not read
- Individual salaries or evidence content.
- Permission
- GRC team access.
- Who sees it
- The head of GRC and the CFO.
Try it
Change the assumptions. Every result and the answer below are recomputed from them, and a warning appears when a result crosses a stated limit.
- Control tests per year today
- 1,260420 controls, tested once for each framework.
- Tests removed
- 504
- Annual saving
- USD 342,720
- Annual testing cost today
- USD 856,800
- Annual testing cost after
- USD 514,080
The answer
Simulated answer. Written for this fictional case, not produced by a live model. Only the figures in it are computed, from what you decided above.
Testing overlapping controls once saves about USD 342,720 a year, from USD 856,800 to USD 514,080.
Today 1,260 control tests are run a year because each of 3 frameworks tests its controls separately [S1]. If 40% of them are shared and tested once, 504 fewer tests are needed [S2].
The saving depends on auditors accepting one test for several frameworks, which is a conversation, not a switch. Treat the figure as the prize if that conversation goes well.
Relies on: S1 · Control mapping across frameworksS2 · Compliance cost ledger
No approval is needed for this result: it is read-only insight, and nothing consequential happens because of it.
What it produces
Limits of this example
- Only testing cost is modelled, not the cost of change.
- Assumes each test takes the same time.
- This is a scripted demonstration on fictional data. No model was called and no real organisation, person or result is shown.
More in Global Compliance
- The compliance command centreObligations, deadlines and changes are scattered across inboxes and spreadsheets, so something is eventually missed.
- Corporate and financial regulationFilings, tax obligations, licences and entity records are tracked by different people, often on different dates.
- People, sector and international dutiesEmployment, privacy, security, environmental and cross-border duties sit with different teams and are rarely seen together.
- Assurance and evidenceWhen an auditor or an inspector arrives, evidence has to be found in a hurry, and gaps appear for the first time.
- Regulatory Applicability IntelligenceWork out which obligations may apply to this business from its legal entities, activities, industry, locations, workforce and other verified facts, and show each as appl…
- Regulatory Change Impact IntelligenceWatch approved authoritative sources, detect changes that matter, identify the entities, processes, systems and controls they affect, and start a governed review and rem…
- Continuous Control MonitoringEvaluate whether each control is operating: evidence present and current, expirations, exceptions and failures, so assurance is ongoing instead of a one-time checklist.
- Contract Compliance IntelligenceRead customer-authorised contracts for obligations, service commitments, deadlines, renewals, restrictions, responsibilities and compliance risks, with citations to the…
The Global Compliance story · This capability in the full register