How to use: For each ICA Layer, select the statement that best describes your current state — starting from whether the business process exists, then whether a control is designed, operating, and independently tested. Hover any card to see the regulatory reference. Residual risk updates automatically as you select each layer.
// Compliance Maturity Profile
// Assessment Summary
0
of 11 assessed
—
maturity score
0
critical gaps
0
total gaps
Level Distribution
L10
L20
L30
L40
Residual Risk by Layer
| Layer | Inherent | Level | Residual |
|---|
Residual Risk = Inherent Risk × (1 − Control Effectiveness)
L1=0% · L2=30% · L3=65% · L4=90%
L1=0% · L2=30% · L3=65% · L4=90%
Priority Gaps
Select layers to see priority gaps