Regulatory Compliance Audit Framework for Financial Institutions
Conduct systematic compliance audits with structured procedures and evidence documentation
What You Can Do
You can execute structured compliance audits that map regulatory requirements to operational controls, test control effectiveness with documented evidence, quantify compliance risk exposure, and track remediation progress with clear accountability. The framework produces audit findings in regulatory-acceptable format, transforming ad-hoc reviews into defensible procedures that satisfy internal audit standards (IIA) and regulatory expectations.
Features
Link specific regulatory obligations to your institution's operational controls and business processes
Execute standardized test steps with documented evidence collection methods that satisfy auditor skepticism standards
Identify control weaknesses and quantify compliance risk exposure across SOX, BSA/AML, GDPR, HIPAA, and industry-specific regulations
Generate audit workpapers and control test results in formats acceptable to regulators and audit committees
Monitor remediation progress with clear accountability timelines and completion verification steps
Establish audit populations, sampling methodologies, and risk-based prioritization across business lines
Test alternative controls in legacy systems where primary controls are unavailable or ineffective
Benchmark control effectiveness across business units and regulatory domains
Example Output
Example 1: BSA/AML Control Testing
- Regulatory Requirement: Daily SAR reporting for suspicious activities over threshold
- Control Test: Sample 50 transactions exceeding threshold from Q2; verify SAR submission within 30 days
- Evidence: Transaction listing, SAR filing records, timestamps
- Result: 98% compliance; 1 SAR delayed 2 days; recommend enhanced monitoring
Example 2: GDPR Data Privacy Gap Analysis
- Tested: Data subject access request (DSAR) processing procedure
- Found: Average response time 28 days vs. 30-day requirement; missing documentation on 3 requests
- Risk Rating: Moderate — approaching deadline threshold
- Remediation: Implement DSAR tracking system; set 25-day internal deadline
Example 3: SOX IT Control Assessment
- Evaluated: Change management controls for financial reporting systems
- Tested: 12 changes from past quarter; 10 had documented approvals, 2 missing authorization
- Control Rating: Deficient
- Remediation Timeline: 60 days to implement mandatory pre-implementation approval workflow
What's Included
- SKILL.md instruction file: Complete audit framework methodology with regulatory mapping guidance
- Compliance audit checklist template: Domain-specific control testing steps for SOX, BSA/AML, GDPR, and HIPAA
- Regulatory requirements matrix: Mapped requirements to control objectives across major regulatory regimes
- Audit evidence documentation workpaper: Standardized format for control test results and remediation tracking
- Risk assessment framework: Compliance gap quantification and remediation prioritization methodology
Who It's For
- Internal auditors — Conducting periodic compliance audits and preparing audit committee reports with compliance metrics
- Compliance officers — Responding to regulatory examination findings and implementing remediation plans
- External auditors — Testing financial controls and assessing compliance across multiple regulatory domains
- Audit managers — Defining audit scope, allocating resources, and monitoring control testing across business lines
- Risk officers — Evaluating compliance maturity and quantifying regulatory risk exposure for governance reporting
Best For
- Conducting annual compliance audits across multiple regulatory regimes (SOX, BSA/AML, GDPR, HIPAA)
- Responding to regulatory examination findings with documented evidence and remediation plans
- Implementing new regulations with control mapping and baseline compliance assessments
- Testing compensating controls in legacy systems where primary controls are unavailable
- Preparing audit findings and compliance metrics for audit committee and regulatory reporting
You might also like
You can systematically process court orders, IRS levies, and child support withholdings by validating order authenticity, calculating accurate deductions accounting for state exemptions and federal limits, sequencing multiple garnishments by legal priority, and generating compliant documentation for courts and creditors. This skill handles the highest-risk payroll functions—reducing legal exposure, audit risk, and manual processing time while ensuring every deduction meets federal and state regulations.
by eryet
You receive a comprehensive framework for evaluating diversified passive income streams, assessing client risk profiles, and recommending portfolio structures that maximize income while maintaining alignment with financial objectives. The skill analyzes income sources (real estate, dividends, bonds, peer lending, digital assets), models cash flow projections, evaluates tax efficiency, and provides data-driven strategy recommendations ranked by performance potential.
by eryet
You can systematically evaluate payment timing decisions across your vendor base by modeling discount capture opportunities against working capital requirements. The skill analyzes vendor payment terms, your cash flow constraints, and strategic vendor priorities to generate prioritized payment schedules that maximize savings while maintaining adequate liquidity and protecting critical supplier relationships.
by eryet
Create comprehensive, personalized wealth strategies that align client assets, goals, and risk tolerance. You can assess complex financial situations, generate multi-faceted investment and tax strategies, and produce professional recommendations that incorporate goal timelines, asset allocation frameworks, and tax efficiency considerations. The skill helps you move beyond generic advice to deliver actionable, client-specific wealth plans backed by structured analysis.
by eryet
You can generate professionally formatted SVG color palettes by providing a theme name, source URL, or specific hex codes. Claude researches color standards, extracts values from web sources, and organizes 4-7 swatches from dark to light with an anchor brand color at center. Each swatch includes click-to-copy hex codes and hover effects for easy reference.
by eryet
You can trace financial transactions across multiple accounts and entities, document complete chain-of-custody for audit evidence, identify fraud indicators and anomaly patterns, and construct defensible audit conclusions that satisfy both forensic rigor and legal admissibility requirements. This skill provides structured protocols for adversarial skepticism, hostile cross-examination preparation, and quantification of losses or damages with transparent methodologies.
by eryet
You can systematically prepare, validate, and generate accurate 1099-NEC and 1099-MISC forms while ensuring full IRS compliance. The skill handles vendor categorization based on payment type, tracks filing thresholds automatically, identifies when CORRECTED forms are needed, and verifies Tax ID Numbers—eliminating manual errors and compressing your year-end compliance timeline by 40-60%. You'll streamline the complex distinction between form types and manage exemptions, multiple legal entities, and Form 1096 transmittal requirements effortlessly.
by eryet
You can systematically classify and track expenses against specific restricted grants and donations, reconcile fund balances with compliance verification, and generate accurate financial statements that separate restricted and unrestricted funds. This skill prevents audit failures, donor relation damage, and grant non-compliance penalties by ensuring every restricted fund expense is properly documented, allowable under grant terms, and traceable to donor/grantor requirements.
by eryet