Platform
Risk-based monitoring plan
Control frequency derived from risk: quarterly for very high fields, annual for low ones — generated, not hand-maintained.
Always in sync
When risk changes, the plan changes with it — no parallel spreadsheet drifting away from reality.
Defensible to supervisors
Each planned control states the risk that justifies its frequency and the obligation it covers.