skills.rest
tapway
tapwayOFFICIAL
Explore all skills by this author →
WebsiteGitHub

internal-control-governance

Tests internal controls against MCCG and Bursa Malaysia SRMIC guidelines and generates segregation-of-duties matrices.

1|Updated Jun 21, 2026
Search Tags:#audit#governance#compliance testing#internal controls#segregation of duties#mccg#bursa malaysia
One-click install
npx skills add https://github.com/tapway/shogun-os --skill internal-control-governance-tapway
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: internal-control-governance
Source: https://github.com/tapway/shogun-os/tree/main/skills/finance/internal-control-governance
Command: npx skills add https://github.com/tapway/shogun-os --skill internal-control-governance-tapway

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Finance teams need documented evidence that internal controls operate effectively to satisfy MCCG and Bursa Malaysia SRMIC requirements, but manually testing controls and identifying segregation-of-duties conflicts is slow and error-prone. ## Core Features & Use Cases - Internal Control Testing: Loads the control register from the gbrain finance source and tests each control using transaction data from acct_* tools, producing a pass/fail report with exception details and remediation recommendations. - Segregation of Duties Matrix: Identifies conflicting access combinations (e.g., one user creating vendors and approving payments) and recommends compensating controls or access removal. - Use Case: During an annual internal control review, run the skill to test payment dual-approval controls against purchase bills, surface SoD conflicts in the AP clerk role, and produce an audit-committee-ready assurance report. ## Quick Start Run /internal-control-governance on the finance-manager profile to test all controls in the register and generate the control test report and SoD conflict matrix.

Frequently Asked Questions about internal-control-governance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test internal controls against MCCG requirements?▼

Load the control register from finance/governance/controls.json in the gbrain finance source, then execute each control's test procedure using transaction data from acct_* tools. Each control is marked pass, fail, or exception, and results are compiled into a test report with remediation recommendations.

How to identify segregation of duties conflicts in finance roles?▼

Load the SoD matrix from finance/governance/sod-matrix.json and check for conflicting access combinations, such as one user creating vendors and approving payments. Each conflict receives a recommended compensating control or access removal with an owner and target date.

What tools does internal control testing require?▼

Testing requires the acct_list_purchase_bills, acct_list_sales_invoices, and acct_list_contacts MCP tools for transaction-level sampling, plus a gbrain finance source holding the control register and SoD matrix. The skill runs on the finance-manager profile.

Does this skill handle external audit sampling?▼

No, external audit sampling under ISA 530 is out of scope and handled by the isa530-audit-pbc-support skill. This skill focuses on internal control testing and SoD analysis for MCCG and Bursa Malaysia SRMIC compliance.

What if SoD conflicts cannot be removed in a small finance team?▼

When conflicts are unavoidable in small teams, implement compensating controls such as MD review of all payments or independent bank reconciliations, and document them formally. The skill recommends these compensating controls for each identified conflict.

Related Skills

Explore More Finance & Accounting Skills→
CraftOS-devCraftOS-dev
375

zoho-inventory

Manage Zoho Inventory items, orders, invoices, and contacts via API.

Community
Advanced
tuanpa-nhg-engtuanpa-nhg-eng

audit-followup

Tracks audit recommendation remediation through status transitions, evidence verification, and quarterly reporting.

Community
Intermediate
whmathews15whmathews15
1

close-status

Track month-end close progress and identify unfinished checklist items.

Community
Intermediate
guoliang1114-boopguoliang1114-boop
43

internal-audit-execution

Generate IIA-aligned audit working papers with ISA 530 sampling plans.

Community
Advanced