Audit Analytics Workspace
Turn a workbook population into explainable audit evidence.
1. Select population
Use an Excel Table, a worksheet used range, or the current selection.
Data Profiler
Assess population structure and data-quality risks without changing source data.
Duplicate Transaction Analyzer
Detect exact/composite or proximity-based duplicate patterns with explainable grouping.
Gap & Sequence Analyzer
Identify missing, duplicate and non-integer values in a numeric document sequence.
Aging Analyzer
Bucket transactions by age against a user-defined reference date and quantify exposure.
Stratification Analyzer
Segment monetary populations into value bands and show count/value concentration.
Round Number Analyzer
Screen for transactions at specified round-number multiples. Results are anomaly indicators, not evidence of fraud.
Benford Analysis
Compare the first-digit distribution of suitable positive transaction values with Benford expectations. This is a screening test, not proof of fraud.
Threshold Avoidance Analyzer
Identify transactions concentrated immediately below an approval or control threshold.
Split Transaction Analyzer
Find groups of individually sub-threshold transactions that collectively exceed a control threshold within a defined period.
Unusual Timing Analyzer
Screen transactions for weekend, month-end, year-end, after-hours and user-defined holiday activity.
Accounts Payable Audit Pack
Map the core AP fields once, then run a controlled bundle of audit tests and produce a consolidated exception summary.
Phase 3.6 Benford screening (optional)
Off by default. Requires at least 100 eligible non-zero values. Screening results are recorded as audit context and do not automatically change exception risk scores.
Payroll Audit Pack
Map payroll fields once and run a controlled suite of payroll integrity, employee-master and payment anomaly tests.
General Ledger / Journal Entry Audit Pack
Map journal-entry fields once and run a controlled suite of posting-integrity, manual-entry, timing, approval, sensitive-account and balancing tests.
Phase 3.6 Benford screening (optional)
Off by default. Requires at least 100 eligible non-zero values. Screening results are recorded as audit context and do not automatically change exception risk scores.
Expense Claims / T&E Audit Pack
Map expense-claim fields once and run a controlled suite of duplicate, policy-limit, timing, receipt, split-claim, approval and employee-status tests.
Phase 3.6 Benford screening (optional)
Off by default. Requires at least 100 eligible non-zero values. Screening results are recorded as audit context and do not automatically change exception risk scores.
Procurement / Purchase-to-Pay Audit Pack
Map procurement fields once and run a controlled suite of PO-integrity, approval, threshold-avoidance, pricing, vendor-onboarding and invoice tests.
Phase 3.6 Benford screening (optional)
Off by default. Requires at least 100 eligible non-zero values. Screening results are recorded as audit context and do not automatically change exception risk scores.
Revenue / Accounts Receivable Audit Pack
Map revenue and receivable fields once and run a controlled suite of invoice-integrity, credit-limit, overdue, delivery, discount, credit-note and payment tests.
Phase 3.6 Benford screening (optional)
Off by default. Requires at least 100 eligible non-zero values. Screening results are recorded as audit context and do not automatically change exception risk scores.
Inventory Audit Pack
Map inventory fields once and run a controlled suite of stock-integrity, valuation, aging, expiry, costing, movement, adjustment and reference-document tests.
Risk Model Engine
Configure workbook-isolated risk thresholds and audit-test weights across all seven domain packs. Each new audit-pack run stores a frozen snapshot of the active model for reproducibility.
Model profile
Risk rating thresholds
Scores remain capped at 100. Thresholds must satisfy Medium < High < Critical.
Audit-test weights
Weights are additive for tests triggered on the same source row and are capped at 100 before the configured rating thresholds are applied.
One-click Phase 3.1 validation
Tests threshold logic, 77 pack weights, score caps, model serialization, workbook persistence, snapshot immutability and custom-weight behavior without changing the active model.
Advanced Anomaly & Outlier Engine
Apply robust statistical outlier detection to any numeric audit population using explainable global, distribution and peer-group methods. Flagged rows can flow into the Exception Manager, Dashboard and Workpaper.
Robust Z uses median and median absolute deviation (MAD), reducing distortion from extreme values. Peer analysis is applied only where the selected group has enough valid observations.
One-click Phase 3.2 validation
Runs deterministic synthetic fixtures to validate robust Z, IQR, peer-group detection, ensemble scoring, missing-value handling, score caps, risk-rating integration, reproducibility and workbook QA persistence. No audit dataset is required.
Advanced Audit Sampling Engine
Create reproducible, audit-traceable samples from any loaded population. Sampling selections are evidence items, not exceptions or findings.
Random, systematic and stratified selections use the stored seed for exact rerun reproducibility. MUS uses positive monetary values and records selection-unit hits. High-value sampling automatically includes all records meeting the configured threshold, even if that causes the final sample to exceed the target.
One-click Phase 3.3 validation
Uses deterministic synthetic fixtures to validate seeded random, systematic, stratified, high-value and MUS/PPS selection, exact sample sizing, duplicate prevention, source-row traceability, monetary eligibility and QA persistence. No audit dataset is required.
Trend & Pattern Analysis Engine
Aggregate a loaded population over time and identify unusual movements, persistent directional patterns, seasonality and category concentration shifts with explainable audit signals.
Period movement compares consecutive periods. Moving-average analysis compares each period with the prior-window average. Persistent trend identifies sustained increases/decreases. Seasonality requires monthly data spanning at least 24 periods. Concentration analysis compares category shares between consecutive periods.
One-click Phase 3.4 validation
Uses deterministic synthetic time-series fixtures to validate monthly/quarterly/weekly bucketing, aggregation, period spikes/drops, moving averages, persistent trends, seasonality, concentration shifts, score caps, risk-rating integration, source-row traceability and workbook QA persistence. No audit dataset is required.
Cross-Population / Cross-Domain Analytics Engine
Reconcile two workbook populations using one or two match keys and identify missing counterparts, value/date differences, ambiguous relationships and inconsistent mapped attributes.
Relationship mapping
Primary key is required. Secondary key is optional but must be mapped on both sources if used. Amount/date/attribute comparisons are applied only to unambiguous 1:1 matched relationships.
One-click Phase 3.5 validation
Uses deterministic synthetic paired populations to validate composite-key matching, missing counterparts in both directions, amount/date tolerances, attribute comparison, duplicate/ambiguous relationships, score caps, risk ratings, source-side traceability, reproducibility and workbook QA persistence. No audit dataset is required.
Benford Integration into Audit Packs
Apply Benford first-digit screening only to suitable, naturally occurring monetary populations inside selected audit packs. Integrated Benford results are preserved as run/workpaper context and do not automatically change exception risk scores.
Approved Phase 3.6 scope
Included: Accounts Payable invoice amount, General Ledger absolute debit/credit line amount, Expense/T&E amount, Procurement PO amount, Revenue/AR invoice amount.
Excluded by design: Payroll and Inventory packs, because salary bands, policy constraints, standard costs, quantities and other structured values can make Benford assumptions inappropriate.
Pack screening is optional and off by default. When enabled, at least 100 eligible non-zero monetary values must remain after the minimum-amount filter.
One-click Phase 3.6 validation
Uses deterministic synthetic distributions to validate first-digit extraction, expected logarithmic proportions, MAD calculation/classification, minimum-value filtering, approved pack scope, overrepresented-digit context, score neutrality, snapshot reproducibility and workbook QA persistence. No audit dataset is required.
Intelligent Exception Prioritization
Rank audit exceptions using explainable combinations of base Risk Score, same-row multi-test stacking, advanced analytics context, Benford context, unresolved age, review status and ownership. Priority does not alter the underlying Risk Score.
Phase 3.7 scoring methodology
Priority Score is capped at 100 and uses a transparent model: up to 55 points from base Risk Score, up to 21 from multiple tests/signals on the same run/source row, advanced analytics context (Cross-Domain / Anomaly / Trend), limited Benford run context, unresolved age, workflow status and unassigned ownership. Closed items are suppressed to zero.
One-click Phase 3.7 validation
Uses deterministic synthetic exceptions to validate every scoring component, band boundaries, multi-test grouping, closed-item suppression, run isolation, sorting, explanation quality, risk-score neutrality, reproducibility and workbook QA persistence. No audit dataset is required.
Reusable Audit Procedures & Cross-Test Intelligence
Orchestrate reusable audit procedures over evidence already generated in this workbook and consolidate related tests/signals into coherent audit scenarios without creating duplicate findings.
How orchestration works
Each procedure defines a primary domain pack, recommended supporting engines, expected evidence and scenario rules. The engine checks which steps have evidence in the current workbook, groups related exceptions by source lineage, identifies corroborating test combinations and produces one procedure-level scenario per evidence cluster. Underlying exceptions remain unchanged.
One-click Phase 3.8 validation
Uses deterministic synthetic audit evidence to validate all seven procedure definitions, evidence-lineage grouping, cross-run consolidation, procedure coverage, named scenario rules, scenario scoring, duplicate suppression, closed-item handling, risk neutrality, reproducibility and workbook QA persistence. No audit dataset is required.
Production & Desktop Readiness
Validate the frozen analytics engine for Excel Desktop production use and classify the current runtime as cloud-hosted, localhost pilot, or unsupported.
Runtime environment
One-click Phase 4.1 validation
Checks Excel host/API availability, secure origin, workbook read/write isolation, local storage, frozen Phase 3 registrations, external runtime dependencies, production configuration safeguards and QA persistence. No audit dataset is required.
Desktop Distribution & Update Readiness
Validate connected-desktop release packaging and check CTC release metadata without modifying the frozen analytics engine.
Current release
Update status
One-click Phase 4.2 validation
Checks release metadata, semantic-version comparison, secure same-origin update feed, manifest/taskpane/schema alignment, Excel API floor, frozen analytics registrations, update safeguards, local release-state storage, Desktop UI wrapping and QA persistence. No audit dataset is required.
Desktop Installer & Local Runtime
Validate the Phase 4.3 Windows packaging foundation: versioned local assets, localhost HTTPS runtime, installer state, startup registration, Excel catalog registration, diagnostics and repair/uninstall readiness.
https://localhost:31415 after installation, but production Office.js still loads from Microsoft’s CDN. This is therefore a connected desktop installation pilot, not the final air-gapped edition.Current installer/runtime state
One-click Phase 4.3 validation
Run this after installing the Phase 4.3 Desktop Installer package and loading the localhost add-in in Excel Desktop. The test validates localhost HTTPS, runtime health, installer state, version alignment, scheduled startup, Excel trusted-catalog registration metadata, workbook isolation, frozen analytics engines and QA persistence.
DESKTOP_INSTALLER, run INSTALL-CTC-AUDIT-ANALYTICS.cmd, restart Excel, then choose CTC Audit Analytics once from Add-ins → Advanced → Shared Folder. The installer configures the local runtime and trusted catalog automatically for this pilot.Phase 2 QA Tester
For the supplied Inventory controlled workbook, the full Phase 2 acceptance test is now one click.
Advanced / Manual QA
Audit Dashboard
Summarize the selected audit-pack run by risk rating, test and review status.
Exception Manager
Review and disposition audit-pack exceptions while preserving analytics evidence and source-row traceability.
Bulk disposition
Applies to all currently filtered exceptions. Audit history is retained.
Engagement Setup & Settings
Set engagement metadata before running analytics. Settings are stored only inside the workbook.
Start a new audit engagement
This clears CTC run history, exceptions and review history in this workbook, but keeps your saved settings and profiles.
Engagement metadata
AP configuration profiles
Legacy AP fallback weights
These AP weights are retained for backward compatibility. When a Phase 3 Risk Model is active, the Risk Model Engine controls AP scoring for new runs.
Audit Workpaper Generator
Convert a stored analytics run into a structured, reproducible, export-ready audit workpaper with exception appendix where available.
Reviewer Sign-off & History
Record reviewer sign-off against an analytics run and preserve an immutable review-history row.
Air-Gapped Readiness & Native Offline Foundation
Assess whether the current Excel Desktop edition can be certified for disconnected operation and identify the exact migration gate for a supported native offline edition.
Dependency boundary
One-click Phase 4.5A validation
Validates localhost hosting, local CTC assets, Office.js dependency classification, workbook-local analytics/evidence, licensing and update network boundaries, false-claim prevention, native migration metadata and QA persistence. This test does not pretend the existing Office.js host is fully air-gapped.
Target architecture: Windows-native Excel add-in (VSTO/.NET Framework) with local application logic and no web runtime dependency for core analytics. The packaged Native Offline Foundation documents the migration contract and includes a dependency-free C# core prototype.
Licensing & Entitlement
Validate signed CTC entitlements for plans, device activation, expiry, renewal, feature rights and offline grace without storing license secrets in workbook worksheets.
Checking local entitlement state…
Feature entitlements
Recent license events
One-click Phase 4.4 validation
Uses cryptographically signed synthetic entitlements to validate signature verification, device binding, trial/paid states, expiry, offline grace, feature controls, tamper rejection, local caching, audit events and QA persistence. No real license is required.
The signed entitlement token may be cached locally for device-bound validation. Short activation keys are never stored. No entitlement token or license key is written into audit workbook data sheets.
Run status
Ready.