Lesson 22 of 26

Ghada maps a policy for an internal audit

For: Compliance officerAbout 6 min

What you will be able to do

This lesson is for the compliance officer leading an internal audit. In Audit Hub a policy is turned into auditable points, the controls the audit tests. Ghada, the AI agent for audit, reads the policy, runs the mapping and checks it against the policy's own wording. You will ask Ghada to map the procurement and payments policy and read the mapping she prepared for your review.

Before you start

  • You are signed in as the compliance officer of Meridian Souq Trading LLC.
  • Audit Hub has the 2026 procurement and payments controls review, with the procurement and payments policy uploaded.

Steps

  1. 1

    Ask Ghada to map the policy

    In the AI team's Chat for Meridian Souq Trading LLC, type @ and pick Ghada, the audit agent, and type: I've uploaded our procurement and payments policy to the 2026 procurement and payments controls review. Please map it to auditable points so I can review the mapping.

    • Type Message to the AI team: @Gha
    • Choose GGhadaAIAudit liaison
    • Type Message to the AI team: @Ghada I've uploaded our procurement and payments policy to the 2026 p…
  2. 2

    Select Send

    Select Send. Ghada's card under your message is marked Working.

    • Select Send
  3. 3

    Follow Ghada's to-do list

    Ghada writes her to-do list: move the review to its mapping step, run the AI mapper on the policy, wait for it and read the proposed points, check them against the policy itself, and hand the mapping to you. The mapper runs in the background, so she pauses while it works.

    The screen at step 3: Follow Ghada's to-do list
  4. 4

    Read Ghada's mapping

    Ghada's green Answer says the mapping is ready for your review: the mapper proposed 12 auditable points, and she checked them against the policy, so every requirement in sections 2 to 10 has at least one point and nothing needed changing. She lists the points section by section with their risk, from approval limits to record keeping, and the gap the mapper flagged: the policy doesn't name who is responsible for it as a whole. Once you confirm the mapping, she can create the requests, pre-fill answers and set assignees and due dates.

  5. 5

    See what Ghada read

    On Ghada's card, select the line that says how long she worked. The steps include moving the review to the mapping step, running the mapper, reading the policy document itself, and waiting while the mapper ran.

    • Select Worked for 6 min · 32 step(s) · 2 change(s)
  6. 6

    Review the mapping in Audit Hub

    In the left menu, open Audit Hub. The 2026 procurement and payments controls review now shows the status In review, with its one policy document. Open it to read the proposed points and confirm the mapping.

How to check it worked

Ghada's green Answer lists the 12 proposed points by section with their risk and the gap the mapper found, and says the mapping waits for your review in Audit Hub. You confirm the mapping yourself.

Common mistakes

  • Confirming the mapping without reading it. Ghada flags points she is unsure of; check those against the policy.
  • Uploading a scanned policy no one can read. Ghada reads the document's text; a clear copy gives a better mapping.

Check your understanding

  1. 1. Who confirms the mapping of the policy?

    1. A.Ghada
    2. B.The audit lead
    3. C.The auditors
    4. D.Nobody
    Show answer

    Answer: B. The audit lead

    The agent prepares the mapping; the person leading the audit confirms it.

  2. 2. How does Ghada check the mapping?

    1. A.She doesn't
    2. B.Against the policy's own wording, which she reads
    3. C.By asking the supplier
    4. D.By guessing
    Show answer

    Answer: B. Against the policy's own wording, which she reads

    Agents can read the documents they are given and check their work against them.