← Back to Docs
Last verified: 2026-03-23
Classification: Enterprise-Only

Client Audit Procedure

5-Stage Process Automation Assessment & Readiness Evaluation

Document ID
CNC-AUD-PROC-001
Version
2.0
Classification
Confidential — Client-Facing
Effective Date
23 March 2026
Owner
K0NSULT Audit Practice
Approved By
0n40i4 / CNC Governance
K0NSULT Process Automation Advisory — A CNC Practice CODE NO CODE | Lobbying Register: 00168
[Date]
[City]

[Recipient Name]
[Title]
[Organization]
[Address]

Dear [Recipient Name],

Thank you for your interest in exploring process automation opportunities within your organization. We are pleased to present our Client Audit Procedure, a structured 5-stage assessment methodology designed to provide you with a comprehensive, evidence-based evaluation of your automation readiness.

Our approach is technology-agnostic and focused on outcomes. We begin by understanding your current process landscape, map data flows and dependencies, assess risks, evaluate automation maturity, and conclude with a prioritized solution proposal that identifies quick wins alongside strategic transformation opportunities.

What sets our methodology apart:

The enclosed document details each stage of our audit procedure, including timelines, deliverables, and what we will need from your team at each phase. We estimate the full assessment requires 4–6 weeks depending on process complexity and scope.

We welcome the opportunity to discuss this further at your convenience. Please do not hesitate to contact us to schedule an introductory session.

Respectfully,



[Consultant Name]
[Title]
K0NSULT by CNC — CODE NO CODE
[email] | [phone]

Table of Contents

  1. Audit Overview & Timeline
  2. Stage 1: Inventory
  3. Stage 2: Mapping
  4. Stage 3: Risk Assessment
  5. Stage 4: Automation Maturity Evaluation
  6. Stage 5: Solution Proposal
  7. Deliverables Summary
  8. Engagement Terms & Conditions

Audit Overview & Timeline

The K0NSULT Client Audit is a 5-stage, evidence-based assessment that evaluates your organization's process landscape, identifies automation opportunities, and delivers a prioritized action plan. Each stage builds on the previous, ensuring no gaps in analysis.

1
Inventory
Week 1
2
Mapping
Week 2
3
Risk Assessment
Week 3
4
Maturity Eval
Week 4
5
Solution Proposal
Week 5–6
StageDurationK0NSULT EffortClient EffortKey Output
1. Inventory5 business days2–3 consultantsProcess owners, IT leadProcess Catalog, System List, Data Map
2. Mapping5 business days2–3 consultantsProcess owners, SMEsDetailed Process Maps, Decision Trees, Exception Catalog
3. Risk Assessment5 business days2 consultants + LegalCompliance, Legal, Risk teamRisk Matrix, Non-Delegable List, Legal Constraints Register
4. Maturity Eval5 business days2 consultants + TechIT, Operations leadsSuitability Scores, Maturity Heatmap, Integration Assessment
5. Solution Proposal5–10 business daysFull teamSponsors, Decision makersWeakness Map, Agent Recommendations, Quick Wins, Roadmap
Stage 1

Inventory

Establish a complete, verified catalog of all business processes, data assets, and systems within the audit scope. This stage answers: "What do we have?"

Timeline
Week 1 (5 business days)
Responsible
K0NSULT Lead Consultant
Client Sponsor
COO / Head of Operations

Description

We conduct structured interviews with process owners and department leads to catalog every process, data flow, and system within scope. The output is a verified inventory that serves as the foundation for all subsequent analysis. We use our standardized Process Intake Pack templates (see CNC-PRC-STD-001) to ensure completeness.

Activities

  1. Kickoff meeting with client sponsor and process owners (2 hours).
  2. Distribute Process Intake Pack questionnaires to all departments in scope.
  3. Conduct 30–60 minute interviews with each process owner.
  4. Catalog all systems, APIs, and integrations (System List).
  5. Map data elements, classifications, and flows (Data Map).
  6. Consolidate and cross-verify inventory for completeness.
  7. Present preliminary inventory to client for validation.

Deliverables

What We Need From You

  • Access to process owners and department leads for interviews (30–60 min each).
  • Existing process documentation, SOPs, or workflow diagrams (any format).
  • System architecture diagrams or IT asset register.
  • Data classification policy (if one exists).
  • Organizational chart for departments in scope.
  • Designated single point of contact for scheduling and questions.
Stage 2

Mapping

Transform the inventory into detailed process maps that capture every step, decision point, exception path, and handoff. This stage answers: "How does it actually work?"

Timeline
Week 2 (5 business days)
Responsible
K0NSULT Process Analyst
Client Sponsor
Process Owners / SMEs

Description

We go beyond high-level process descriptions to capture the operational reality. This includes shadow processes, undocumented exceptions, tribal knowledge, and workarounds that may not appear in official documentation. We use process observation, detailed walkthroughs with operators, and system log analysis where available.

Activities

  1. Detailed process walkthroughs with operators (observe actual execution).
  2. Map each process step-by-step: inputs, processing, outputs, decision points.
  3. Identify and document all exception paths and edge cases.
  4. Capture decision trees: what rules govern each branching point?
  5. Document handoffs between people, departments, and systems.
  6. Identify undocumented processes ("shadow processes") and tribal knowledge.
  7. Estimate time and cost per process step.
  8. Validate maps with process owners (sign-off).

Deliverables

What We Need From You

  • Access to operators who execute the processes daily (not just managers).
  • Permission to observe process execution in real-time (screen sharing or on-site).
  • Access to system logs or transaction histories for high-volume processes.
  • Any existing flowcharts, BPMN diagrams, or Visio files.
  • Availability for 2–3 validation sessions to confirm map accuracy.
Stage 3

Risk Assessment

Evaluate every process for risk exposure across operational, regulatory, financial, and reputational dimensions. Define what must never be automated. This stage answers: "What can go wrong?"

Timeline
Week 3 (5 business days)
Responsible
K0NSULT Risk & Compliance Lead
Client Sponsor
Compliance / Legal / Risk

Description

We classify each process by risk level (High / Medium / Low) using a structured framework that considers: data sensitivity, regulatory exposure, financial impact of failure, reputational risk, reversibility, and frequency. We identify non-delegable decisions that must always remain with humans, and document all legal and regulatory constraints that affect automation design.

Activities

  1. Risk workshop with compliance, legal, and risk stakeholders (half day).
  2. Classify each process using the CNC Risk Classification Framework.
  3. Identify non-delegable decisions and document rationale.
  4. Map regulatory requirements per process (GDPR, AI Act, industry-specific).
  5. Assess data sensitivity and PII exposure per process.
  6. Evaluate operational impact of process failure (downtime, revenue, reputation).
  7. Define escalation SLAs per risk tier.
  8. Produce Risk Matrix and Legal Constraints Register.

Deliverables

What We Need From You

  • Participation of Compliance Officer, Legal Counsel, and Risk Manager in risk workshop.
  • Existing risk registers, compliance policies, and regulatory filing records.
  • Data processing agreements (DPAs) and privacy impact assessments (if existing).
  • Incident history: any past failures, breaches, or compliance findings.
  • Industry-specific regulatory requirements applicable to your processes.
Stage 4

Automation Maturity Evaluation

Score each process for automation suitability using the 7-criterion Agent Suitability Score. Assess technical readiness and integration feasibility. This stage answers: "What should we automate, and how ready are we?"

Timeline
Week 4 (5 business days)
Responsible
K0NSULT Technical Lead
Client Sponsor
IT Lead / Operations Lead

Description

Using our proprietary 7-criterion scoring model (Repeatability, Error Risk Tolerance, Rule Clarity, Data Sensitivity, Interpretation Need, Empathy/Negotiation Need, Automation Value), we evaluate each process and produce an objective suitability score. We also assess the technical environment: API availability, data quality, system reliability, and integration complexity.

Agent Suitability Score — 7 Criteria

CriterionWeightScoring Guide
Repeatability20%1 = Unique every time → 5 = Identical steps every execution
Error Risk Tolerance20%1 = Zero tolerance (life/safety) → 5 = Errors easily caught and reversed
Rule Clarity15%1 = Ambiguous, judgment-based → 5 = Fully documented, binary rules
Data Sensitivity (inv.)15%1 = Highly sensitive PII/financial → 5 = Public/non-sensitive data
Interpretation Need (inv.)10%1 = Heavy interpretation required → 5 = No interpretation, pure rules
Empathy/Negotiation (inv.)10%1 = Core empathy/negotiation task → 5 = No human interaction needed
Automation Value10%1 = Marginal benefit → 5 = Transformative time/cost/quality gain

Activities

  1. Score each process against all 7 criteria (collaborative session with process owners).
  2. Calculate weighted suitability score and classify: Automate / Assist / Keep Manual.
  3. Assess technical environment: API readiness, data quality, system uptime.
  4. Evaluate integration complexity for each automation candidate.
  5. Produce Automation Maturity Heatmap across all processes.
  6. Identify technical prerequisites and gaps.
  7. Rank processes by automation ROI (value vs. effort).

Deliverables

What We Need From You

  • IT architecture team availability for technical assessment sessions.
  • API documentation for key systems (if available).
  • Data quality reports or known data issues.
  • System uptime / SLA records for the past 12 months.
  • Process owners available for scoring sessions (2 hours per process group).
Stage 5

Solution Proposal

Synthesize all findings into a prioritized action plan with specific agent recommendations, a weakness map, quick wins, and a phased implementation roadmap. This stage answers: "What do we do, and in what order?"

Timeline
Week 5–6 (5–10 business days)
Responsible
K0NSULT Full Team
Client Sponsor
Executive Sponsor / Decision Makers

Description

This is the synthesis stage where all analysis converges into actionable recommendations. We produce a Weakness Map showing exactly where current operations fall short, recommend specific agent types for each automation opportunity, identify quick wins that can be implemented in under 30 days, and provide a phased roadmap with milestones and success criteria.

Activities

  1. Consolidate all findings from Stages 1–4 into a unified analysis.
  2. Produce Weakness Map: categorize all identified weaknesses (Procedural, Technical, Communication, Compliance, Organizational, Data, Dependencies).
  3. Design agent recommendations for each "Automate" and "Assist" process.
  4. Identify Quick Wins: processes that can be automated within 30 days with high ROI.
  5. Develop phased implementation roadmap (Quick Wins → Phase 1 → Phase 2 → Transformation).
  6. Estimate implementation costs, timelines, and resource requirements per phase.
  7. Define success metrics and KPIs for each phase.
  8. Prepare executive presentation and detailed report.
  9. Conduct findings presentation with executive sponsor and stakeholders.
  10. Incorporate feedback and finalize the proposal.

Solution Proposal Components

ComponentDescriptionFormat
Weakness Map Visual map of all identified weaknesses across 7 categories, with severity ratings, owners, and mitigation plans. Weakness Register (fillable) + visual heatmap
Agent Recommendations Specific agent type, capability requirements, mandate boundaries, and integration specifications for each automation opportunity. Agent Specification Sheets (per process)
Quick Wins Top 3–5 processes that can be automated within 30 days with minimal risk and high visible impact. Quick Win Cards (process, agent type, effort, ROI, timeline)
Implementation Roadmap Phased plan from Quick Wins through full transformation, with milestones, dependencies, and resource estimates. Gantt-style roadmap + milestone table
Business Case ROI projections, cost savings, efficiency gains, and risk reduction quantified per phase. Financial model + executive summary

Deliverables

What We Need From You

  • Executive sponsor available for findings presentation (90 minutes).
  • Decision-making authority present to discuss recommendations.
  • Budget parameters and investment appetite for planning purposes.
  • Strategic priorities and constraints that may affect implementation sequencing.
  • Feedback on draft proposal within 5 business days of receipt.

Complete Deliverables Summary

StageDeliverableFormatDelivery
1. InventoryProcess CatalogSpreadsheet + PDFEnd of Week 1
Data MapVisual diagram + tableEnd of Week 1
System ListSpreadsheetEnd of Week 1
Scope ConfirmationPDF (signed)End of Week 1
2. MappingDetailed Process MapsBPMN 2.0 / PDFEnd of Week 2
Decision TreesVisual diagramsEnd of Week 2
Exception CatalogSpreadsheetEnd of Week 2
Handoff MatrixTable / PDFEnd of Week 2
Time & Cost BreakdownSpreadsheetEnd of Week 2
Shadow Process RegisterDocumentEnd of Week 2
3. RiskRisk Classification MatrixSpreadsheet + visualEnd of Week 3
Non-Delegable Decisions ListDocumentEnd of Week 3
Legal Constraints RegisterSpreadsheetEnd of Week 3
Data Sensitivity MapVisual diagramEnd of Week 3
Escalation SLA TableTable / PDFEnd of Week 3
Risk Mitigation RecommendationsDocumentEnd of Week 3
4. MaturityAgent Suitability ScorecardSpreadsheet + PDFEnd of Week 4
Automation Maturity HeatmapVisual / PDFEnd of Week 4
Technical Readiness AssessmentDocumentEnd of Week 4
Integration Complexity MatrixSpreadsheetEnd of Week 4
Automation ROI RankingSpreadsheetEnd of Week 4
Prerequisites & Gaps ReportDocumentEnd of Week 4
5. ProposalExecutive SummaryPDF (2 pages)End of Week 5–6
Full Audit ReportPDF (comprehensive)End of Week 5–6
Weakness Map & RegisterVisual + spreadsheetEnd of Week 5–6
Agent Recommendation SheetsPDF (per process)End of Week 5–6
Quick Wins PackagePDF + action cardsEnd of Week 5–6
Implementation RoadmapGantt + PDFEnd of Week 5–6
Business Case & ROI ModelSpreadsheet + PDFEnd of Week 5–6
Risk Mitigation PlanDocumentEnd of Week 5–6
Testing RequirementsPer CNC-OPS-MAN-001End of Week 5–6
Executive PresentationSlide deckEnd of Week 5–6

Engagement Terms & Conditions

TermDetails
ConfidentialityAll client data, processes, and findings are treated as confidential. K0NSULT operates under NDA. No client data is shared with third parties, used for training, or retained beyond the engagement period without explicit written consent.
Data HandlingAll client data is processed in compliance with GDPR and applicable local data protection law. PII is handled per the Data Sensitivity Map produced in Stage 1. Data is encrypted in transit and at rest.
Intellectual PropertyAll deliverables produced during the engagement become client property upon final payment. K0NSULT retains the right to use anonymized, aggregated methodologies and frameworks.
Scope ChangesAny changes to the agreed audit scope require written approval from both parties. Additional processes or systems added mid-engagement may affect timeline and pricing.
Client ObligationsTimely access to personnel, systems, and documentation as specified per stage. Delays in client input extend the project timeline day-for-day.
Limitation of LiabilityK0NSULT provides advisory recommendations. Implementation decisions and their outcomes remain the client's responsibility. Our liability is limited to the engagement fee.
ValidityThis audit procedure document is valid for 12 months from the effective date. Methodology updates are communicated to active clients.
Next Steps: To initiate a Client Audit engagement, contact your K0NSULT representative or email [engagement contact]. We will schedule a no-obligation scoping call to determine the right audit scope and provide a tailored engagement proposal within 5 business days.