drop change management log + access reviews · parse sox itgc evidence completeness · runs locally
flags emergency change without retro approval · access review gaps · segregation of duties conflicts · completeness matrix
column headers vary by itsm/iam vendor — heuristic mapping · screener for audit prep · not a substitute for formal sox attestation