ControlVista

What ControlVista is

ControlVista is an internal audit management system covering planning, fieldwork, reporting, and remediation. VistaPlan scores auditable entities by weighted risk and supports annual plans matched to capacity, scheduling, and board approval. VistaField supports walkthroughs, control testing, evidence capture, working papers, and preparer-reviewer-approver sign-off. VistaResolve tracks management responses and remediation, including ageing, overdue work, and threshold-based escalation. VistaReport drafts engagement reports and audit opinions and provides live assurance dashboards and committee packs. VistaAssist creates editable AI drafts of procedures, workpaper summaries, findings, reports, and committee materials; auditors review and own those drafts. The product connects to in-house systems and an organisation’s SSO or identity provider. It runs in a customer-controlled data centre or private cloud, with the maker stating that engagement content has no outbound telemetry and vendors cannot access audit evidence. ControlVista supports English and Arabic and says it aligns with IIA Standards 2024, COSO Internal Control, and ISO 19011. On-premise deployment is offered for a fixed annual fee quoted during procurement.

Who it suits

It is intended for internal audit teams, particularly in banking, insurance, government, and other regulated industries. Its customer-controlled deployment may suit organizations that want their infrastructure team to manage backups, recovery, and update timing.

Limits

The on-premise plan has a fixed annual fee quoted during procurement, and its implementation fee is fixed at signature. The listed plan includes all four modules and VistaAssist AI.

Getting started

1. Visit the ControlVista website.
2. Request a product walkthrough; the maker offers a 30-minute session and says it responds within one business day.
3. Discuss the fixed annual deployment fee during procurement.
4. Plan for an implementation fee fixed at signature.
5. Deploy in a customer-controlled data centre or private cloud and connect in-house systems and an SSO or identity provider.

Verdict

ControlVista covers internal audit from risk planning through remediation, with AI-assisted drafts subject to auditor review. Its on-premise model and procurement-quoted annual fee are important considerations.