Write up a control deficiency and assess severity
Task · Deficiency evaluation
Time saved · 1-2 hrs per deficiency (estimate, not measured)
⚠️ AI output is a draft only. It must be reviewed and signed off by a qualified reviewer before it is relied on or included in audit documentation.
Steps
- Open Claude (or a Project with your reference docs uploaded)
- Paste the prompt and wrap inputs in tags as shown
- Ask for a revision if format or tone is off
- Review and tie out before sharing
Prompt / template
<facts>[paste]</facts> Draft a deficiency write-up: condition, criteria, cause, effect, compensating controls. Then lay out the severity factors (likelihood, magnitude) so the reviewer can conclude deficiency / significant deficiency / material weakness. Do not conclude yourself.
Source · https://pcaobus.org/oversight/standards/auditing-standards/details/AS2201
Last checked · 2026-10-16