FRR004
Apply identical assessment criteria enterprise-wide but calibrate significance ratings to the actual risk context of each engagement.
CyberTRIZ analysis · Audit contradiction FRR004 · one of 8,235 worked contradictions published by CyberTRIZ.AI
Regulations
Finding Consistency vs Context Sensitivity
Business ContextConsistent finding criteria support fairness, comparability, quality review, and enterprise reporting. Identical deficiencies can nevertheless have different consequences depending on transaction volume, regulatory exposure, control environment, business model, or compensating mechanisms.
Audit TRIZ ResolutionStandardize finding assessment criteria while allowing contextual risk factors to influence significance. The same evaluation dimensions are applied consistently, but their effect is determined using the actual environment in which the condition exists.
Applicable TRIZ Principles
Principle 6 – Universality maintains common finding-assessment criteria.
Principle 3 – Local Quality incorporates engagement-specific risk conditions.
Principle 35 – Parameter Changes adjusts finding significance according to consequence, exposure, and control context.
Expected Outcome
Greater finding consistency
Better contextual accuracy
More defensible classifications
Improved cross-engagement comparability
Decision Indicators
Identical finding ratings are assigned regardless of business impact.
Similar conditions receive different classifications without documented rationale.
Auditors rely on precedent instead of current risk context.
Management challenges classifications because local conditions were ignored.
Finding consistency is interpreted as requiring identical outcomes.