Standards, controls and their gaps, with the cost of every one.
“Can we prove our controls work?”
Dotwork connects policies, standards and controls to the applications, processes, suppliers and AI they govern. Risk and compliance teams can see coverage, evidence and gaps on the same model the business runs on, and show what each gap is costing.
Built for
- Chief risk officer
- CISO
- Head of compliance
- Internal audit
- Third-party risk
- Data protection officer
Where to start
Enterprise Standards & ControlsStart with standards and controls mapped to your frameworks. AI, architecture and suppliers connect to the same control set.
The pressure
Every framework asks the same questions. Every audit starts from scratch.
Controls are mapped to SOX, ISO 27001, NIST, DORA and the EU AI Act in separate spreadsheets, evidence is collected by screenshot, and the link from a control gap to the business it puts at risk is rarely made.
What it looks like today
- The same control mapped separately for each framework
- Evidence collected by screenshot ahead of every audit
- Gaps listed without an owner, a cost or a business impact
- Supplier and AI risk tracked outside the control set
The questions you can finally answer
Your questions, answered from one model.
Each answer comes from the same connected model, so the numbers agree from one question to the next, and every one opens into the solution that holds it.
“Which risks remain after our controls, and where?”
Residual risk shown by control, application and owner.
In Enterprise Standards & Controls“What breaks if this system fails, and can we recover in time?”
Critical services mapped to the applications, technology and suppliers beneath them.
In Enterprise Architecture“What AI is running, and has each system been approved?”
A register of AI systems with risk tiers, approvals and controls.
In AI Governance & Value Realization“Which suppliers support our critical services?”
Contracts and suppliers linked to the services and controls they touch.
In Procurement & Commitments“Which strategic bets carry the most risk?”
The beliefs behind each bet, with the risks that would break them.
In Strategy ValidationWhat changes
What changes for your team.
Each framework mapped in its own spreadsheet
One control set mapped to every framework you report against
Evidence gathered by screenshot
Evidence drawn from the work and systems where controls run
Gaps listed without context
Every gap tied to the applications, owners and cost it affects
AI and suppliers tracked elsewhere
AI systems and suppliers governed on the same model
The solutions behind it
Start with one. Add the next when you need it.
Each solution you add reads and writes the same Enterprise Operating Model, so it adds context instead of another silo.
Govern & Deliver
Start hereEnterprise Standards & Controls
“Can we prove our controls were actually working on what we shipped?”
ExploreGovern & Deliver
AI Governance & Value Realization
“What AI is running, what can it access — and is it worth what it costs?”
ExploreGovern & Deliver
Enterprise Architecture
“What does this capability cost to run — and what depends on it?”
ExploreFund & Optimize
Procurement & Commitments
“What did we buy, and is it used?”
ExploreSteer
Strategy Validation
“Is our strategy still true — and what do we do when it isn’t?”
ExploreMethods and frameworks
Runs the methods you already use.
Dotwork does not ask your team to adopt a new method. The frameworks you run become views over the same model.
The model underneath
Every team, one model.
Executives, finance, architecture, the portfolio office, risk and the AI office each open their own views, over the same Enterprise Operating Model. When one team changes something, every other team sees it, and Dotwork AI reads all of it, stopping where the decision is yours.
See the Enterprise Operating ModelBy team
The same model, through another team’s eyes.
Be Decisive.Build Fast.Connect Everything.
Start ConnectingSolutions
Platform
Resources
© 2025-2026 Dotwork, Inc. All rights reserved.