A de-identified practice run of the Business Unit Risk & Control Interview, built around a fictional company, so a trial user can see the full flow without running a real control interview before procurement or InfoSec review.
At Meridian Distribution Co., walk through a control that relies on a manual override. How often is it used, and who approves it?
Example answer: "The AP team can override a three-way match failure with a single manager approval — no dual sign-off required."
Is there a task or system access at Meridian where one person can both initiate and approve the same transaction?
Example answer: "Our regional controller can both create and approve journal entries above $10k in the ERP."
What's one control at Meridian that exists on paper but isn't consistently followed in practice?
Example answer: "Vendor onboarding requires a second approver, but it's routinely skipped for 'urgent' requests."
How does Meridian's team handle a case that falls outside the standard process? Is that exception path documented?
Example answer: "IT grants temporary admin access for outages, but there's no ticket or log tracking when it's revoked."
Has a control gap or near-miss happened at Meridian in the last 12 months that wasn't escalated formally?
Example answer: "A duplicate payment was caught by accident, not by a control — it was never logged as an incident."
How confident would you be that Meridian's controls hold up under a surprise external audit?
Anything else about Meridian's operations you'd flag, fictional or not?
After each completed session, Mayetik generates a structured AI summary. Here's an example of the output format — the actual content reflects each respondent's answers.
The respondent's answers highlighted three recurring themes — each supported by specific examples drawn from their experience. The summary captures what was said, not what was expected.
Two responses stood out as unusually detailed and pointed to an area worth following up on. The full text of each answer is preserved below the summary.
Based on the patterns in this session, the AI identified three concrete actions for the project team to consider. These are drawn directly from the respondent's own suggestions.
Generated from 7 questions · ~15 min session