Family B · Governing and deciding
Governance, risk, audit and legal
The internal accountability machinery: risk register and appetite, compliance obligations register, internal audit and workpapers, business continuity, conflicts and gifts registers, legal matters and litigation.
Governance, risk, audit and legal (MG-16) is one of the twenty-one MeshGov services, in the "Governing and deciding" family. The internal accountability machinery: risk register and appetite, compliance obligations register, internal audit and workpapers, business continuity, conflicts and gifts registers, legal matters and litigation. It replaces risk register spreadsheet, audit workpaper tool and legal matter tracker. AI agents carry the work end to end; a named officer takes every decision with legal effect on a person, a business or public money. It is core at federal level, core at state level, core at local level.
What it replaces
- Risk register spreadsheet
- Audit workpaper tool
- Legal matter tracker
What it reacts to
- Risk signal from another service
- Compliance obligation falls due
- Audit engagement opens
- Legal request or claim received
The agents that carry it
Risk agent
Maintains the risk register, watches signals from every service against the appetite, and escalates movement.
Audit agent
Gathers evidence from the platform's own trail and drafts workpapers, so an audit reads what already exists.
Legal agent
Triages legal requests, tracks matters and deadlines, and assembles the file for counsel.
Where a person decides
No decision with legal effect on a person, a business or public money is taken by an agent alone. In Governance, risk, audit and legal, these decisions are held for a named officer, with the agent's evidence and recommendation attached.
| Decision | Who decides | Why a person |
|---|---|---|
| Risk appetite and acceptance of findings | Audit and risk committee | Governance accountability |
| Legal position or settlement | General counsel | Legal effect |
| Closure of a continuity incident | Accountable executive | Operational accountability |
Records it writes
Risk register · Obligations register with due dates · Audit workpapers · Continuity test record · Legal matter file
Before MeshGov: the baseline this service is measured against
Risks on the register
212
today, reviewed quarterly by hand
Audit evidence requests
640
today, per year, answered by email
Obligations tracked
partial
today; every one with a due date on MeshGov
Legal matters open
38
today, deadlines in a spreadsheet
Levels of government: core at federal level, core at state level, core at local level.
Questions buyers ask about Governance, risk, audit and legal
- What does MeshGov Governance, risk, audit and legal do?
- The internal accountability machinery: risk register and appetite, compliance obligations register, internal audit and workpapers, business continuity, conflicts and gifts registers, legal matters and litigation. It reacts to events such as risk signal from another service, compliance obligation falls due and audit engagement opens, and writes risk register, obligations register with due dates, audit workpapers and continuity test record as records.
- What systems does Governance, risk, audit and legal replace?
- Risk register spreadsheet, Audit workpaper tool and Legal matter tracker. Because the service runs on the MeshGov platform, the licence, integration and upgrade costs of those systems retire with them.
- What do the AI agents do in Governance, risk, audit and legal?
- The risk agent maintains the risk register, watches signals from every service against the appetite, and escalates movement. The audit agent gathers evidence from the platform's own trail and drafts workpapers, so an audit reads what already exists. The legal agent triages legal requests, tracks matters and deadlines, and assembles the file for counsel.
- Which decisions does a person still take?
- Agents never take a decision with legal effect on a person, a business or public money. In Governance, risk, audit and legal, a person decides risk appetite and acceptance of findings (audit and risk committee), legal position or settlement (general counsel) and closure of a continuity incident (accountable executive). The record shows who decided, why, on what evidence and under which delegation.
- Which levels of government use Governance, risk, audit and legal?
- It is core at federal level, core at state level, core at local level. MeshGov was checked against the Australian Government Architecture, the AGA Business Reference Model, the Queensland Government Enterprise Architecture and the UK Local Government Business Model, and serves government in any country.