Trigarc Audit
Plan, perform and follow up internal audits in one place: workpapers, evidence, findings and corrective actions.
The board gets: open findings by age and owner, with nothing lost between meetings.
Discuss Trigarc AuditTrigarc, implemented by FNJ
One view of risk, compliance and audit for your board
Trigarc is a cloud GRC platform that brings audit, risk, compliance, governance and ethics onto one data model. FNJ implements it for organisations in Kenya and East Africa, configured to their regulators, frameworks and reporting lines.
5Modules on one data model
ICPAKRegistered firm leads every implementation
CloudBrowser-based, with no installation required
Risk exposure indexAmber
62 / 100
Down 4 on Q2. Appetite is 60.
Risks above appetiteRed
4 of 38
Down 2 on Q2.
Obligations on timeAmber
94%
Target 95%. None missed.
Overdue audit actionsRed
7
3 over 90 days, escalated.
Ethics reportsGreen
11
2 open. Median closure 21 days.
Residual risk heatmap38 risks, after controls
Red: score 15+, above appetite (4)Amber: 8 to 12 (15)Green: 1 to 6 (19)
Top residual risksRanked by score. Change against Q2.
| Risk | Owner | Score | Trend | RAG |
|---|---|---|---|---|
| Cyber and third-party technology | CIO | 20 | ▲ Rising | Red |
| AML/CFT transaction monitoring | MLRO | 16 | ▶ Stable | Red |
| Credit concentration, real estate | CRO | 15 | ▼ Easing | Red |
| Regulatory change, draft CBK risk guidelines | Compliance | 15 | ▲ Rising | Red |
| Liquidity, deposit concentration | Treasurer | 12 | ▼ Easing | Amber |
Board decision required. Cyber risk has increased for two consecutive quarters. Management seeks approval of the third-party assurance plan.
Obligations on timeBy regulator
Green 95%+. Amber 90 to 94%. Red below 90%.Risk exposure indexSix quarters
Weighted residual score across all 38 risks. Board appetite 60.Audit actions by age28 open
The three red actions sit with IT and procurement.Common challenges in board reporting
Many organisations face the same three challenges when reporting on risk and compliance. Trigarc is designed to address each of them.
01
Timeliness
Reports are often compiled manually after quarter end, so the board reviews a position that may already have changed.
02
Consolidation
Audit findings, risk assessments and regulatory obligations are frequently held in separate files, which makes the overall picture harder to see.
03
Traceability
When a regulator or external auditor requests supporting evidence, it can take considerable time to locate.
Five integrated modules
Each module can be deployed on its own. Used together, they give management and the board a consolidated view, from the risk register to board resolutions.
Trigarc Risk
Score risks before and after controls, set appetite and track actions. Heatmaps and dashboards update automatically.
The board gets: the risks above appetite, and what is being done about them.
Discuss Trigarc RiskTrigarc Compliance
Every obligation, by regulator and due date, with the proof attached. Licences and permits included.
The board gets: obligations met, late and at risk, regulator by regulator.
Trigarc Compliance in detailTrigarc Governance
Board and committee packs, resolutions, policies and approvals, with a record of every decision.
The board gets: one place for papers, decisions and the actions that follow.
Discuss Trigarc GovernanceTrigarc Ethics
Receive and manage whistleblowing reports securely and anonymously, from first report to case closure.
The board gets: case volumes, themes and closure times, without names.
Discuss Trigarc EthicsChoosing where to start
Many organisations begin with Compliance or Risk and add further modules over time. Because the data model is shared, information does not need to be re-entered.
Book a Trigarc demo with FNJConfigured for your regulatory environment
We load the relevant obligation library and risk taxonomy before go-live, so your team begins with a populated register.
- Banks and microfinance banksCBK prudential and risk management guidelines, POCAMLA
- SACCOsSASRA regulations and AML/CFT guidelines
- InsurersIRA guidelines and the annual AML/CFT programme audit
- Lenders and fintechsDigital credit and payment service provider rules
- NGOs and donor-funded programmesPBO Regulations 2026, donor terms, safeguarding
- Corporates and groupsMulti-entity compliance, data protection, governance
Our implementation approach
Successful adoption depends on careful configuration. FNJ's implementation team brings audit, risk and compliance experience to each stage.
01
Scope
Agree the modules, entities and regulators. A written scope and timeline follow within a week.
02
Configure
Set the obligation library, risk taxonomy, audit universe, workflows and dashboards to your frameworks.
03
Load and train
Migrate existing registers and open findings. Train users, reviewers and directors by role.
04
Go live
Produce the first board pack together. Ongoing support and content updates as regulation changes.
Further reading
Book a Trigarc demo with FNJ
A 45-minute session tailored to your sector and priorities. We will respond within one working day to agree a suitable time.
What does it cost?An annual subscription plus a one-off implementation fee. Both depend on modules, entities and users, and are quoted after scoping.
Is our data secure?We take you through the platform's security, hosting and data protection arrangements during the demo, including role-based access and audit trails.
Can we start with one module?Yes. Further modules can be added later without re-entering data.
Who supports it after go-live?FNJ provides ongoing support through the same team that led the implementation.
Request a demo
Tell us your organisation and the module you are most interested in. Fields marked * are required.
We keep your details confidential and use them only to respond to your request.