Principal Analyst at Confidential Risk Consulting (New Zealand) and author of the Prouse Residual Liability (Lr) Model. I measure how well organisations can prove the controls they rely on.

In 2026 I published the Prouse Residual Liability Model as a working paper on SSRN. It treats documentation as a measurable part of every control: a control you cannot evidence is discounted, however good it is in practice.
Version 2.1 was chosen by a pre-specified simulation study that compared it with 13 alternatives, including standard risk matrices and expected-loss methods. The specification, calculator and simulation code are free to use under CC BY 4.0, and the plan to test the model against real court outcomes is published with them.
Every engagement applies that model and follows the audit guidelines of ISO 19011 and the risk principles of ISO 31000.
Independently, confidentially and for a fixed fee. I am based in New Zealand and work with clients worldwide.
Prouse, R. G. (2026). Bridging the Documentation Void: A Quantitative Approach to Residual Liability (Lr) and Fiduciary Defensibility. SSRN working paper. DOI 10.2139/ssrn.6175099.
Prouse, R. G. (2026). The Prouse Residual Liability Model, Version 2.1: Specification, Simulation Evaluation and Validation Programme. Working paper, not peer reviewed. PDF.
Prouse, R. G. (2026). Anthropic Has Promised to Spend $142 Million a Day for Ten Years. Confidential Risk Consulting, 7 October 2026.
Twenty minutes, no cost. Tell me what you are responsible for and I will tell you whether an audit would help, and what it would involve.
Or email richard@confidentialriskconsulting.com