Control Design And Test Script Writer

# 11. Control Design and Test Script Writer

**Domain:** Audit and Assurance
**Level:** Practitioner

## Use Case

Design a specific internal control and write the test script to assess whether it is operating effectively. Used by internal audit, second-line risk functions, and compliance teams for control testing programmes.

## Variables

| Variable | What to Enter | Example |
|----------|--------------|---------|
| `[CONTROL_OBJECTIVE]` | What the control is designed to prevent or detect | e.g. Prevent unauthorised changes to production systems, Detect AI model performance degradation before it affects customers, Ensure personal data subject access requests are completed within statutory timeframes |
| `[PROCESS_OR_SYSTEM]` | The process or system the control applies to | e.g. IT change management process, AI model monitoring environment, GDPR data subject rights handling process |
| `[CONTROL_TYPE]` | Preventive, Detective, or Corrective - or specify if unknown | e.g. Preventive, Detective, or 'determine the appropriate type' |
| `[TESTING_APPROACH]` | How the control will be tested | e.g. Walkthrough and sample testing (n=25), Automated continuous monitoring, Design assessment only |
| `[RISK_BEING_MITIGATED]` | The specific risk this control is designed to address | Paste from your risk register or describe the risk event |
| `[APPLICABLE_STANDARD]` | The framework or standard this control must satisfy | e.g. ISO 27001 A.8.32, GDPR Article 17, ISO 42001 A.9.4, SOC 2 CC6.1, internal control framework |

## The Prompt

Copy everything below this line. Replace all `[VARIABLES]` with your specific information. Paste into Claude, GPT-4o, Gemini, or any capable LLM.

---