FLOWBOX AI Back to Home
Coming Soon

MONITOR-BOX

Annual AI governance monitoring and ISQM 1 evidence kit for 75-100 staff UK accountancy firms.

ISQM 1 doesn't let you set up governance once and forget it. Ongoing monitoring and remediation are mandatory - including for AI. Most firms know this, but "we'll review this later" becomes "we never reviewed it" and QAD notices the gap.

MONITOR-BOX is a self-service documentation kit for annual (or twice-yearly) AI governance reviews. Monitoring checklists, incident logs, remediation templates, and board reports. One repeatable exercise that produces a neat evidence pack for QAD and internal comfort.

Get Notified When MONITOR-BOX Launches See Full Governance Stack
WHY

ISQM 1 monitoring isn't optional

Triggers that bring partners to MONITOR-BOX:

  • ✗ AI policy was approved 12 months ago - nobody has formally reviewed whether it's still fit for purpose
  • ✗ Staff training completion rates unknown - no record of who completed refreshers
  • ✗ AI-related incidents happened but weren't logged anywhere
  • ✗ Annual SOQM evaluation mentions AI vaguely but has no specific evidence
  • ✗ QAD asks "show me your AI governance monitoring" and there's nothing to show

ISQM 1 requires firms to monitor their system of quality management on an ongoing basis and remediate deficiencies. AI tools are part of that system. Without a structured annual review, your AI governance decays - policies become outdated, training lapses, incidents go unrecorded, and the gap widens until QAD points it out.

WHAT YOU GET

Annual review pack, not continuous monitoring software

Annual Monitoring Checklist

20+ checks linked to ISQM 1 components. Covers policy currency, training completion, tool approvals, incident handling, and documentation updates. Designed to complete in a single day.

Incident Log Template

Simple form for recording AI-related issues: what happened, root cause, remedial actions, responsible partner. Creates the incident trail QAD expects to see.

Remediation Plan Template

Who, what, by when. Clear format for documenting actions arising from monitoring findings. Links back to specific checklist items and incidents.

Board Report Template

3-4 page structure for annual AI governance reporting to partners. Summarises monitoring findings, incidents, remediation actions, and next review date. Ready for the SOQM evaluation.

Governance Health Diagnostic

10-15 question HTML assessment generating a "Compliance Decay Score". Identifies where your AI governance has drifted since initial implementation. Run before the full review.

How to Use Guide

2-page instructions showing how to complete the annual review in a single day. Includes timeline, responsibilities, and where to file evidence for QAD.

These are Word templates and checklists you control. No software subscription. No external platform. Complete the review once a year (or twice if your risk profile changes).

TRANSFORMATION

Before and after MONITOR-BOX

✗ Before MONITOR-BOX

  • AI policy approved once, never formally reviewed
  • No record of incidents or near-misses
  • Training completion rates unknown
  • SOQM evaluation vague on AI governance
  • "We'll review this later" becomes "we never did"

✓ After MONITOR-BOX

  • One repeatable annual exercise, same time each year
  • Incident log with clear remediation trail
  • Training and tool approvals confirmed current
  • Board report ready for SOQM and partner review
  • Neat evidence pack when QAD asks for monitoring proof
SEQUENCE

The loop that keeps governance current

FlowBox AI Governance Stack showing MONITOR-BOX as the Monitoring layer that completes the cycle - policy, people, vendors, clients, audit and monitoring

MONITOR-BOX is the Monitoring layer that completes the FlowBox AI Governance Stack cycle

1

GUV-KIT: Policy first

Board-approved AI governance documentation. The foundation everything else builds on.

2

COMP-KIT: Train staff

Staff training and competency evidence. Your people know the rules.

3

VEND-CHECK: Control tools

Vendor vetting and tool governance. Approved tools documented.

4

TRUST-PACK + AUDIT-GUARD: Communicate and document

Client transparency and audit file documentation. External and engagement-level layers.

5

MONITOR-BOX: Keep it current

Annual review that checks everything is still working. The loop that prevents governance decay.

See how MONITOR-BOX completes the FlowBox AI governance stack.

View Full Stack
FAQs

Common questions

How often should we use MONITOR-BOX?

At least annually. Most firms align this with their SOQM evaluation cycle. If your AI risk profile changes significantly mid-year (new tools adopted, major incident, regulatory guidance update), consider a mid-year review. The templates are designed to be reusable.

Does this replace our firm-wide ISQM 1 monitoring?

No. MONITOR-BOX is the AI-specific slice that drops into your broader ISQM 1 monitoring process. It covers the AI governance elements - policy currency, training, tools, incidents - but doesn't replace your full quality management system review.

Do we need the other kits first?

Strongly recommended. MONITOR-BOX reviews whether your AI governance is still working - but you need governance in place first. Start with GUV-KIT (policy), then COMP-KIT (training), VEND-CHECK (tools). MONITOR-BOX is the annual check that keeps them current.

When will MONITOR-BOX be available?

MONITOR-BOX is currently in development. Join the notification list to be first to know when it launches.

STAY UPDATED

Get notified when MONITOR-BOX launches

Be first to know when MONITOR-BOX is available. No spam - just a single email when we launch.

Register Your Interest

Or get GUV-KIT now and we'll contact you when MONITOR-BOX is ready.