Federal civilian · Moraph software

OIG Audit Case Management

Run audits and investigations from intake to final report, with the evidence intact

Book a demonstration Request a technical briefing Factsheet

Overview

What you are buying

OIG Audit Case Management gives an Office of Inspector General one secure system for hotline intake, audits, evaluations and investigations. Auditors keep workpapers with supervisory review, agents keep evidence with a recorded chain of custody, and every report and recommendation is tracked until it is closed. Complainant identities and investigative records are restricted to the people your office chooses.

The problem it solves

Many OIGs run audits in one tool, investigations in another, and the hotline and recommendation follow-up in spreadsheets and shared drives. Evidence custody is logged on paper forms, interview notes sit in personal folders, and supervisory review of workpapers is evidenced by email. When a peer review team, a prosecutor or Congress asks how a finding was reached or where a piece of evidence has been, assembling the answer takes days of searching.

Hotline complaints, audits and investigations are tracked in separate places
Chain of custody for evidence is recorded by hand
Supervisory review of workpapers is hard to demonstrate to peer reviewers
Open recommendations and semiannual reporting data are compiled manually

Who uses it

Offices of Inspector General at federal agencies
Audit and evaluation staff who prepare workpapers and reports
Special agents and investigators who manage cases and evidence
Hotline staff who receive and route complaints
OIG leadership and counsel who approve reports and referrals

Requirements it supports

Inspector General Act of 1978, as amended (5 U.S.C. 401-424)Government Auditing Standards (GAO Yellow Book)CIGIE Quality Standards for InvestigationsCIGIE Quality Standards for Inspection and EvaluationPrivacy Act of 1974 (5 U.S.C. 552a)Federal Records Act (44 U.S.C. Chapters 29, 31 and 33)

The product supports these requirements; meeting them remains your organization’s responsibility.

See how it works

A short walkthrough

Illustrative screens with fictional sample data. They show the workflow, not any client’s data or configuration, and the layout of the product itself differs. A live demonstration uses the product with sample data.

Step 1

The hotline queue

Hotline analysts start from one queue of complaints from every channel, with confidentiality requests marked.

Complaint	Received by	Allegation	Confidentiality	Age	Status
HL-26-0841	Web form	Grant funds used for unallowable costs	Requested	2 days	New
HL-26-0838	Phone	Contractor billing for hours not worked	None	4 days	Assessed
HL-26-0829	Email	Misuse of government vehicle	Anonymous	7 days	Referred to agency
HL-26-0822	Mail	Duplicate of HL-26-0790	None	9 days	Linked
HL-26-0815	Web form	Whistleblower reprisal	Requested	11 days	Awaiting approval

Step 2
An audit workpaper
Each workpaper is tied to an objective and signed off by a supervisor before it can support a finding.
OIG Audit Case Management · Workpaper B-4Sample data
Project A-26-014 · Example Grant Program (fictional)
Objective
2: Were grant costs allowable?
Prepared by
Auditor (fictional)
Source
Sample of 60 drawdowns
Conclusion
7 drawdowns lacked support
Supervisor sign-off
Pending
Review notes
- Confirm sample selection method is documented
- Cross-reference to finding 2 in the draft report
- Attach recipient's response to document request
Sign offReturn with notes
Each workpaper is tied to an objective and signed off by a supervisor before it can support a finding.
Step 3
The investigative case
A case keeps its allegations, activity and approvals together, with access limited to the assigned team.
OIG Audit Case Management · Case I-26-0207Sample data
Case I-26-0207 · Contractor billing (fictional)
1. Opened from complaint HL-26-0838Investigations supervisor
2. Contract and invoice records requested from agencySpecial agent
3. Interview of Witness 1 recordedSpecial agent
4. Memorandum of interview approvedInvestigations supervisor
5. Periodic case review recordedInvestigations supervisor
A case keeps its allegations, activity and approvals together, with access limited to the assigned team.
Step 4
Chain of custody
Every item of evidence carries its full custody history, from collection to disposition.
OIG Audit Case Management · Evidence E-26-0207-03Sample data
Evidence item E-26-0207-03 · Case I-26-0207
Description
Timesheet binder, Example Contractor (fictional)
Collected
By special agent, at contractor site
Current custodian
Evidence custodian
Location
Evidence room, shelf 4
Disposition
Hold: case open
Custody history
- Collected and sealed by special agent
- Transferred to evidence custodian and logged in
- Checked out for scanning and returned the same day
Record transferPrint custody report
Every item of evidence carries its full custody history, from collection to disposition.

Step 5

Report review

Draft reports move through supervisory, quality control and legal review, and agency comments are recorded before issue.

Report	Type	Supervisor	Quality control	Counsel	Agency comments
A-26-014	Audit	Approved	Approved	In review	Received
E-26-006	Evaluation	Approved	Returned	Not started	Not requested
I-26-0174	Report of investigation	Approved	Not required	Approved	Not applicable

Step 6

Recommendation follow-up

Each recommendation is tracked with the agency's corrective action until the OIG decides it can be closed.

Recommendation	Report	Agency action	Agency target	Open for	Status
A-26-003 Rec 1	Payment controls	Policy revised	Met	8 months	Evidence under review
A-25-019 Rec 3	Grant monitoring	Training planned	Missed	19 months	Open
E-25-011 Rec 2	Fleet management	System change	Next quarter	11 months	Open
A-25-007 Rec 1	Travel card use	Controls added	Met	14 months	Closed

Workflows

The principal workflows

Intake
Hotline complaints and referrals arrive through web forms, email, phone and mail, are logged with the complainant's identity protected, and are assessed and routed to audit, investigations, agency management or closure.
- Complaint logged from web form, email, phone or mail
- Complainant identity and confidentiality request recorded and restricted
- Duplicate and related complaints linked
- Hotline analyst recommends a disposition
- Supervisor approves opening, referral or closure
Audit
Audits and evaluations move through planning, fieldwork and reporting with workpapers, supervisory review and indexing to the findings, so the report can be traced back to its evidence.
- Project opened from the annual plan or a request, with objectives and scope
- Independence statements recorded for each team member
- Workpapers prepared and linked to objectives
- Supervisor reviews and signs off each workpaper
- Draft report findings indexed to supporting workpapers
Investigate
Investigative cases hold subjects, allegations, interview records, investigative activity and evidence, with each item of evidence tracked from collection to disposition.
- Case opened with allegations and subjects, approved by a supervisor
- Investigative activities and interviews recorded
- Evidence logged at collection and every transfer recorded
- Case reviewed by the supervisor at the intervals your office sets
- Referral for prosecution or administrative action recorded with the outcome
Report and follow up
Reports go through review and approval before issue. Recommendations are tracked with the agency's response until closure, and the data your office needs for its semiannual report to Congress is kept as you go.
- Draft report reviewed by supervisors, quality control and counsel
- Agency comments received and recorded
- Final report approved and issued
- Recommendations tracked with agency corrective actions
- Recommendation closed when the OIG accepts the evidence

Roles and permissions

Who does what in the product

Each role below is a starting point. During implementation we set them up to match your teams, and every action anyone takes is recorded in the audit trail.

Hotline analyst

Hotline analyst, complaint intake specialist, hotline coordinator

Receives every complaint, protects the complainant's identity where requested, and recommends what should happen next.

Sees

Complaints in the hotline queue with source and allegations
Complainant identity for complaints assigned to them
Related complaints and earlier dispositions
Referral responses from agency management

Does

Logs complaints from web forms, email, phone and mail
Records confidentiality and anonymity requests
Links duplicate and related complaints
Recommends opening, referral to the agency or closure
Tracks responses to referrals

Cannot

Approve their own disposition recommendations
Open investigative cases or see their contents
Remove a confidentiality restriction

Approvals: Every disposition is approved by a hotline or investigations supervisor.
Notified about: New complaints, dispositions returned, and agency referral responses due.

Auditor or evaluator

Auditor, evaluator, inspector, program analyst

Carries out the fieldwork on assigned audits and evaluations and documents it so findings can be traced to evidence.

Sees

Projects they are assigned to, with objectives and scope
Workpapers on their projects and review notes
Prior reports and open recommendations for the same program

Does

Records their independence statement for each project
Prepares and submits workpapers
Responds to review notes
Drafts findings indexed to workpapers
Records agency comments on draft reports

Cannot

Sign off their own workpapers as reviewer
Issue a report
See investigative cases

Approvals: Every workpaper is reviewed by a supervisor; project stages and draft reports are approved by audit leadership.
Notified about: Review notes on their workpapers, project stage approvals and deadlines your office sets.

Audit supervisor

Audit manager, supervisory auditor, assistant inspector general for audit

Ensures audits and evaluations meet professional standards and approves each stage and the report.

Sees

All projects in their group, with stage, budget hours and status
Workpapers awaiting review and open review notes
Quality control checklists and independence statements
Recommendation status for reports their group issued

Does

Reviews and signs off workpapers
Approves project stages from planning to reporting
Approves draft and final reports for their level
Closes recommendations when evidence of corrective action is sufficient
Assigns staff to projects

Cannot

Sign off workpapers they prepared themselves
Edit a workpaper after sign-off without reopening it
Edit or delete entries in the audit trail

Approvals: Approves workpapers, stages, reports and recommendation closures for their group; reports also need the approvals your office requires above them.
Notified about: Workpapers awaiting review, stage approvals requested, reports in review, and recommendations with corrective action submitted.

Special agent

Special agent, criminal investigator, investigator, forensic examiner

Works assigned investigations and keeps the case file and evidence in a state that will stand up in court or an administrative proceeding.

Sees

Cases they are assigned to, with subjects, allegations and activity
Evidence items for their cases and their custody history
Interview records and documents in their cases

Does

Records investigative activities and interviews
Logs evidence at collection and records each transfer
Uploads digital evidence and documents
Drafts memoranda of interview and the report of investigation
Prepares referrals for prosecution or administrative action
Records court and administrative outcomes

Cannot

Open or close a case without supervisor approval
Delete evidence records or custody entries
See restricted cases they are not named on

Approvals: Case openings, referrals, reports of investigation and closures are approved by an investigations supervisor.
Notified about: Cases assigned to them, case review due dates, evidence transfers to or from them, and returned drafts.

Investigations supervisor

Special agent in charge, assistant special agent in charge, assistant inspector general for investigations

Directs investigations, reviews case progress and approves the decisions that open, refer and close cases.

Sees

All cases in their office or region, including restricted cases they are named on
Case review dates and open activity
Evidence inventory and custody exceptions
Referral outcomes

Does

Approves case openings and assigns agents
Conducts and records periodic case reviews
Approves referrals and reports of investigation
Approves case closure and evidence disposition
Restricts a case to named people

Cannot

Approve a referral or closure on a case where they are the case agent
Delete custody entries or case records
See restricted cases they are not named on

Approvals: Approves openings, referrals, reports and closures; restricted cases follow the approval chain your office sets.
Notified about: Approvals waiting, case reviews due, and evidence custody exceptions.

Counsel

OIG counsel, assistant counsel to the inspector general

Reviews reports, referrals and legal questions, and manages legal holds.

Sees

Reports and referrals routed to them for review
Cases and projects they are assigned to
Legal holds and their scope

Does

Reviews and comments on draft reports and referrals
Records legal sufficiency review
Places and releases legal holds
Records responses to subpoenas and records requests

Cannot

Change workpapers or evidence records
Issue reports
See cases they are not assigned to unless granted

Approvals: Their legal review is a required step before reports and referrals your office designates are issued.
Notified about: Items routed for legal review and holds approaching review.

Peer reviewer (read-only)

External peer review team member, CIGIE reviewer, internal quality assurance reviewer

Reviews selected projects and cases for compliance with professional standards without being able to change anything.

Sees

Projects and cases selected for review
Workpapers, review sign-offs and quality control records
Audit trail for the selected items

Does

Reads and searches selected records
Exports records within scope, with each export logged

Cannot

Change, approve or delete anything
See complainant identities or restricted cases unless specifically granted
Keep access after it expires

Approvals: Their access is approved by OIG leadership with a scope and an end date.
Notified about: Nothing by default.

Administrator

OIG systems administrator, application administrator

Manages users, roles, templates and retention settings without access to case substance.

Sees

Users, roles and groups
Templates, workflows and retention schedules
The record of permission changes

Does

Adds and removes users, or maps them from single sign-on groups
Maintains templates, checklists and workflow steps
Configures retention schedules approved by your records officer
Runs access review reports

Cannot

Open cases, complaints or workpapers
Grant themselves an investigative or audit role without a second approver
Release a legal hold

Approvals: Role changes granting investigative access are approved by investigations leadership.
Notified about: Access reviews coming due and accounts not used for a period your policy sets.

Permissions at a glance

Action	Hotline	Auditor	Audit superv.	Agent	Inv. superv.	Counsel	Peer reviewer	Admin
Log and assess complaints	Full	No access	No access	No access	Approves	No access	No access	No access
See complainant identity	Own work only	No access	No access	No access	View only	No access	No access	No access
Prepare workpapers	No access	Own work only	Full	No access	No access	No access	View only	No access
Sign off workpapers	No access	No access	Approves	No access	No access	No access	View only	No access
Open an investigative case	No access	No access	No access	Own work only	Approves	No access	No access	No access
Record evidence and custody	No access	No access	No access	Own work only	Full	No access	View only	No access
Approve a referral	No access	No access	No access	No access	Approves	View only	No access	No access
Review draft reports	No access	Own work only	Approves	Own work only	Approves	Full	View only	No access
Close recommendations	No access	No access	Approves	No access	No access	No access	View only	No access
Place or release legal holds	No access	No access	No access	No access	No access	Full	No access	No access
View audit trail	No access	No access	View only	No access	View only	View only	View only	View only
Manage users and roles	No access	No access	Approves	No access	Approves	No access	No access	Full

Full
Own work only
Approves
View only
No access

How access is controlled

Audit and investigative work are separated by default: auditors do not see investigative cases, and agents do not see audit workpapers unless your office grants it for a specific matter.
Nobody signs off their own workpaper or approves a referral or closure on their own case. Cases can be restricted to named people when the subject is sensitive.
Roles are configured with you during implementation and can be limited by office, region or directorate. Every permission change is recorded with who made it and when, and access review reports support periodic certification.
Staff sign in through your identity provider, including PIV, and roles can follow its groups. Peer reviewers get temporary read-only access with a defined scope and an end date.

Features

What it does

Hotline intake

Complaints from every channel logged in one place, with confidentiality requests recorded and identities visible only to the roles you choose.

Audit workpapers

Workpapers organized by objective, with preparer and reviewer sign-off, review notes and indexing to report findings.

Independence and quality control

Independence statements, supervisory review and quality control checks recorded per project for internal and peer review.

Investigative case files

Subjects, allegations, activities, interview records and referrals kept in one case, with access limited to the assigned team.

Chain of custody

Each item of evidence logged at collection, with every transfer, storage location, examination and disposition recorded with the person and time.

Digital evidence

Files stored with a hash taken at intake, so later copies can be checked against the original.

Interview records

Memoranda of interview drafted, reviewed and finalized in the case, with drafts kept separate from approved records.

Report review

Draft reports routed through supervisory, quality control and legal review, with agency comments recorded before issue.

Recommendation tracking

Each recommendation tracked with the agency's corrective action plan, target dates set by the agency, and the OIG's decision to close.

Semiannual report data

Reports issued, recommendations open and closed, investigative outcomes and referrals counted by period for your semiannual report.

Restricted access

Cases can be restricted to named people, for example when the subject is a senior official or an OIG employee.

Records retention

Retention schedules applied by record type, with holds that prevent disposal while litigation or review is pending.

Integrations

How it connects to your systems

Connects to	How	What flows
Hotline web form	A public complaint form hosted for your OIG, with optional anonymous submission and file upload, feeding the hotline queue.	In: complaints and attachments.
Email intake	A hotline mailbox monitored so complaints received by email are logged with their attachments.	In: emails and attachments.
Document and evidence storage	Digital evidence and documents stored with the case, with hashes recorded at intake. Large forensic images can stay in your forensic storage with a reference in the case.	In: files and hashes. Out: files to authorized users, with each access logged.
Agency data	Extracts from agency financial, grant or program systems loaded into a project for audit analysis, where the agency provides them.	In: data extracts for analysis.
Single sign-on	Staff sign in through your identity provider (SAML or OpenID Connect), including PIV-based sign-in.	In: user identity and group membership for role assignment.
Work API	Project, case, report and recommendation data available to your data warehouse and reporting tools through the Moraph Work API.	Out: status, counts and outcomes, with restricted fields excluded.
Records management	Records at the end of their retention period exported with their metadata to your records management system or for transfer under your schedules.	Out: records and metadata.

Each integration is confirmed in discovery and specified in the design. See how an engagement progresses.

Security and privacy

How your data is protected

Records kept in the United States

Complaints, workpapers, cases and evidence are hosted in the United States region.

Need-to-know access

Access follows the role and the assignment; complainant identities and restricted cases are visible only to the people your office names.

Encryption under controlled keys

Client data is encrypted with keys Moraph staff cannot access without explicit, time-bound authorization.

Complete audit trail

Every view, change, approval, custody transfer and export is recorded with the user and time, and cannot be edited.

Cleared support lane

Support tickets from federal clients are routed only to US citizens with active security clearances.

Independent audits

Moraph's controls are covered by its SOC 2 Type II report and ISO/IEC 27001 certification, available through the Trust Center.

Company-wide controls, independent audits (SOC 2 Type II and ISO/IEC 27001) and data residency are described in our Trust Center, where you can request the evidence pack.

Reporting

What you can report on

11 standard reports, grouped by who uses them. Each shows who it is for, how it can be broken down, how it is delivered and what it is used for. The data behind them is also available to your own reporting tools.

Operational

Hotline queue

For hotline analysts and supervisors

Open complaints with source, allegation type, age and recommended disposition, and referrals awaiting an agency response.

Break down by: Source, Allegation type, Age, Disposition, Analyst
Delivered as: Live dashboard; CSV export
Used for: Making sure every complaint is assessed and every referral followed up.

Project status

For audit supervisors and audit leadership

Every audit and evaluation with its stage, team, hours charged against budget and workpapers awaiting review.

Break down by: Directorate, Stage, Supervisor, Plan year
Delivered as: Live dashboard; CSV export
Used for: Managing the audit plan and spotting projects that are slipping.

Case review due

For investigations supervisors

Open cases with the date of the last supervisory review, the next one due and recent activity.

Break down by: Office, Agent, Case type, Days since review
Delivered as: Live dashboard; scheduled email
Used for: Keeping case reviews on the schedule your office sets.

Evidence inventory

For investigations supervisors and evidence custodians

Every evidence item with its current custodian, storage location, case status and any custody exceptions.

Break down by: Location, Custodian, Case status, Item type
Delivered as: Live view; PDF and CSV export
Used for: Periodic evidence inventories and finding items due for disposition.

Oversight and Congress

Semiannual report data

For oIG leadership and the semiannual report team

Reports issued, monetary findings recorded, recommendations open and closed, investigative referrals and outcomes, for the reporting period.

Break down by: Period, Report type, Directorate, Outcome type
Delivered as: Live view; CSV and PDF export
Used for: Compiling the semiannual report to Congress from recorded data.

Open recommendations

For oIG leadership, audit supervisors and agency liaisons

Every open recommendation with its report, the agency's corrective action and target date, and how long it has been open.

Break down by: Report, Agency component, Age, Status
Delivered as: Live dashboard; PDF and CSV export
Used for: Following up with the agency and reporting on unimplemented recommendations.

Investigative outcomes

For investigations leadership

Referrals made, accepted and declined, and the criminal, civil and administrative outcomes recorded in the period.

Break down by: Period, Office, Case type, Outcome type
Delivered as: Live dashboard; CSV export
Used for: Reporting investigative results and planning work.

Quality and standards

Workpaper review status

For audit supervisors and quality assurance

Workpapers by project with preparer, reviewer, sign-off dates and open review notes.

Break down by: Project, Reviewer, Status
Delivered as: Live view; CSV export
Used for: Showing that supervisory review took place before the report was issued.

Independence statements

For audit leadership and peer reviewers

Independence statements recorded for each project team member, and any impairments declared and how they were resolved.

Break down by: Project, Staff member, Period
Delivered as: Live view; PDF export
Used for: Evidencing independence for internal quality control and peer review.

Chain of custody report

For agents, supervisors and counsel

The full custody history of an evidence item or case: collection, every transfer, storage, examination and disposition, with people and times.

Break down by: Case, Item, Custodian, Date range
Delivered as: On request in the product; PDF export
Used for: Supporting testimony and responding to defense or court requests.

Access and audit trail extract

For oIG leadership, counsel and internal affairs

Who viewed, changed or exported a complaint, case, project or evidence item, and when.

Break down by: Record, User, Action, Date range
Delivered as: On request in the product; CSV export
Used for: Checking access to sensitive matters and answering audit questions.

Exports, access and evidence

Every report can be exported to CSV, and summary and evidence reports to PDF. Reports can be scheduled to arrive by email for the people entitled to see them.
Each report can be filtered and the filters saved, so supervisors and leadership can keep their own views.
Project, case and recommendation data are available through the Moraph Work API for your own reporting, with complainant identities and restricted case details excluded.
Reports respect each viewer's role: auditors see their projects, agents their cases, and leadership summaries across the office. Restricted cases appear only for the people named on them.
Reports can be run as of a past date and give the same result each time, which supports semiannual reporting. Running and exporting a report is itself recorded in the audit trail.

Deployment

Where and how it runs

Moraph cloud, United States

Hosted in the United States region, with all records kept in the US.

Dedicated environment

A single-tenant environment for offices that require isolation, scoped in the proposal.

With a managed service

Optionally run alongside a Moraph managed service for administration, template maintenance and integration support.

Security controls, independent audits and data residency are set out in our Trust Center. Engagement models and what drives a quotation are on Working with Moraph.

Implementation

What a rollout involves

The general phases are on Working with Moraph. For this product, they involve the following.

Process mapping

We review your audit, investigations and hotline procedures and policy manuals with each directorate, and agree the stages, approvals and review intervals to configure.

Templates and standards

Workpaper templates, quality control checklists, case types, report templates and disposition codes are configured to match your manuals.

Access model

Roles, separation between audit and investigations, restricted case rules and complainant confidentiality settings are agreed with leadership and counsel.

Data migration

Open cases, projects, evidence records and recommendations are migrated from your current systems by agreement, with custody history carried over. We need extracts and a contact for each source system.

Records retention

Retention schedules for each record type are configured with your records officer.

Training and go-live

Hotline staff, auditors, agents, supervisors and counsel are trained on their own workflows, and directorates can go live separately.

Limitations

What it does not do

Worth knowing before you evaluate it.

It does not make audit, investigative, referral or closure decisions. Every decision is made and approved by your staff.
It does not connect to NCIC or other criminal justice information systems; results from those systems are recorded by agents under your office's policies.
It does not perform forensic examination of devices. Forensic images and tool reports are stored or referenced in the case.
Physical evidence is tracked by record and label; storage and handling remain your evidence custodians' responsibility.
Semiannual report data is compiled from what is recorded; writing and issuing the report remains with your office.
Moraph holds no FedRAMP authorization for this product. We provide control documentation to support your office's own authorization decision.
It does not certify compliance with Government Auditing Standards or CIGIE standards. It records the evidence your office and peer reviewers use to assess compliance.
Classified information is not supported. Classified matters stay in your office's classified systems.

Evaluation checklist

What to test in a demonstration or pilot

Questions worth putting to us, and to any other vendor you are considering.

Log a sample hotline complaint with a confidentiality request and check who can see the complainant's identity
Take a past audit and trace a finding back to its signed-off workpapers
Record an evidence item through collection, transfer and disposition and review the custody report
Restrict a test case to named people and confirm others cannot find it
Produce semiannual report counts for a sample period and compare them with your last report
Confirm role separation: who can open, refer and close a case, and who can sign off a workpaper

Questions

Frequently asked questions

Can audits and investigations share one system without seeing each other's work?

Yes. They are separated by role by default. Your office can grant access across the two for a specific matter, and that grant is recorded.

How are complainant identities protected?

Identity and confidentiality requests are recorded at intake, and the identity is visible only to the roles your office chooses. Every view of it is logged.

Will the chain of custody records hold up in court?

The system records every custody event with the person and time and does not allow those entries to be edited or deleted. Whether evidence is admitted is a matter for the court and your office's handling procedures.

Does it produce our semiannual report to Congress?

It produces the counts and lists your office needs for the semiannual report from what has been recorded. Writing and issuing the report remains with your office.

Is it FedRAMP authorized?

No. Moraph holds no FedRAMP authorization for this product. We provide control documentation to support your office's own authorization decision.

How is it priced?

As a subscription, usually measured by the number of staff users, with implementation and data migration charged separately. See Working with Moraph for what drives a quotation.

Next steps

Buying through a formal procurement? See How to buy for purchasing routes, accessibility conformance reports and company information. Documentation: OIG Audit Case Management guides on docs.moraph.com (getting started and security guides are public; setup, administration and integration guides are for client accounts). Support: OIG Audit Case Management support guide.

OIG Audit Case Management

What you are buying

The problem it solves

Who uses it

Requirements it supports

A short walkthrough

The hotline queue

An audit workpaper

The investigative case

Chain of custody

Report review

Recommendation follow-up

The principal workflows

Intake

Audit

Investigate

Report and follow up

Who does what in the product

Hotline analyst

Sees

Does

Cannot

Auditor or evaluator

Sees

Does

Cannot

Audit supervisor

Sees

Does

Cannot

Special agent

Sees

Does

Cannot

Investigations supervisor

Sees

Does

Cannot

Counsel

Sees

Does

Cannot

Peer reviewer (read-only)

Sees

Does

Cannot

Administrator

Sees

Does

Cannot

Permissions at a glance

How access is controlled

What it does

Hotline intake

Audit workpapers

Independence and quality control

Investigative case files

Chain of custody

Digital evidence

Interview records

Report review

Recommendation tracking

Semiannual report data

Restricted access

Records retention

How it connects to your systems

How your data is protected

Records kept in the United States

Need-to-know access

Encryption under controlled keys

Complete audit trail

Cleared support lane

Independent audits

What you can report on

Operational

Hotline queue

Project status

Case review due

Evidence inventory

Oversight and Congress