Scenario
Several teams maintain their own control records, making it hard to see who owns each obligation.
Approach
Create a shared register that maps obligations to controls, owners, review dates, and evidence sources. Pilot it with a small group before expanding coverage.
What to measure
Check how many controls have a named owner, whether evidence is current, and how long it takes to respond to a sample audit request.