Helping control testers get their weeks back.
Madison runs every test. Your team makes the calls.
Test a control in front of you.
A sample control is loaded. Run it, or bring your own script and evidence.
Drop screenshots or text files here. Up to 8.
- ControlReads the script and its attributes
- TestTests each piece of evidence
- FindingLists the exceptions
- RemediationNot part of this sample
Two weeks to test one control.
Evidence arrives by email, as screenshots.
Every sample is checked by hand in Excel.
Every exception gets argued.
Six steps, every control, every quarter.
Madison takes the work out of every step. Your people keep every decision.
1Scope
Traced to clauses
Tester signs the script2Population
Reconciled
Nothing for you3Sample
Random, repeatable
Sizes it, if a finding is open4Evidence
Filed, 4 missing
Decides 4 missing wires5Test
Exceptions only
Decides 8 failures6Conclude
Signed
Head of assurance signs1Scope
Edited by hand
Your tester, by hand2Population
Waiting on IT
Your tester, by hand3Sample
Picked by hand
Your tester, by hand4Evidence
135 emails
Your tester, by hand5Test
225 checks in Excel
Your tester, by hand6Conclude
Written by hand
Your tester, by handDrag to compare. One quarter of wire testing on a synthetic bank.
- Every control, every test
- Unlimited users
- Set up in your cloud
- Your own model keys
- Full audit trail
- Examiner-ready workpapers
Air-gapped, in your data centre
Fitted to your controls and systems
Inside your environment. Read-only to your systems.
Your cloudAWS, Azure, Google Cloud or Optimus
Read-onlyNo write-back to core banking
Your keysModel and encryption keys
AuditedWho decided, and when
Your controls, your systems, your workpapers.
The six steps
Works as deliveredYour control library
Set up with youYour formats and systems
Built by our engineersQuestions testers and examiners ask.
Does Madison decide whether a control is effective?
No. It proposes a rating with the numbers behind it. Your tester decides every exception and a named person at your bank signs the conclusion.
What happens when an owner doesn't send the evidence?
Madison chases until the deadline. Anything still missing comes to your tester, who extends the deadline, escalates it or records the gap against the control. An owner can also say the evidence doesn't exist, and that answer is recorded too.
Can our examiner recheck the work?
Yes. Every figure in the workpaper links back to the extract, the sample draw and the evidence file it came from, and every decision shows who made it and why.
We already have a GRC platform. Do we replace it?
No. It stays your system of record. Madison does the testing work and feeds the results back in.
Book a free GRC audit.
We reply within one business day.