Global Compliance Controls Matrix
Connect each applicable obligation to a versioned control, evidence and reviewer. Global controls, country rules and donor conditions have distinct authority.
Method And Expected Result
Record the authority, operative provision, period, applicability decision and access date. This matrix does not assert legal compliance or product certification. Country-specific tests require the relevant primary source and qualified applicability review.
Worked planning examples, not customer performance results. Changes stay in this page until exported; reloading resets them. Keep sensitive personal information out of this planning tool.
Working Sheet
| Control | Applicability | System control | Evidence | Owner | Source and review date | Status |
|---|---|---|---|---|---|---|
| Access | All approved entities | Role and record-level access | Revoked-user screen and export test | Security | Not tested | |
| Award conditions | Relevant grant and period | Eligibility and budget checks | Rejected cost and amendment test | Grant owner | Not tested | |
| Local reporting | Country and legal entity | Versioned account and report mapping | Reconciled return workpaper | Local finance | Not tested | |
| Retention | Record category and legal holds | Approved disposal workflow | Authorisation and disposal evidence | Privacy | Not tested | |
| Audit export | Required record scope | Linked records and change history | Independent reconstruction | Finance | Not tested |
The Excel toolkit includes the Compliance worksheet for this resource. CSV exports contain current values; Excel retains the calculator formulas.
Related Guidance
- Global NGO Compliance: Map Country, Donor and Internal Controls
- NGO ERP Compliance Design: Shared Controls and Country Rules
- NGO ERP and UK Charity Reporting: Records and Applicability
- US Nonprofit ERP: Records for Reporting and Form 990 Preparation
- Canadian Charity ERP: Records and T3010 Reporting Preparation
- NGO ERP in Germany: GoBD-Related Recordkeeping Controls
- NGO ERP in France: Association Records, Grants and Reporting
- GDPR for NGOs: Data Responsibilities and ERP Requirements
- Data Residency for Global NGOs: ERP Hosting and Cross-Border Transfers
