While designing an audit plan for my span, we always end up doing fewer audits than agreed at the beginning of the year. The reduction is due to some exceptions taken by the account owners for exemption from audits as their respective processes don't deal with sensitive information of customers and are inherently low in risk. Some exceptions are due to higher call volumes and band width issues of the spocs involved in the audit. Currently when these exceptions are generated, we have to manually check for the validity of the reasons considering the risk involved, the headcount and revenue of the process etc and approve the exceptions. Considering the last two to three years worth of data along with the latest risk report, AI should be able to track common patterns like exceptions being taken due to low risk, low revenue generating accounts, call volumes as per seasonality etc and decide to learn common practices. We can have some guidelines to ignore exceptions due to band width as this may not always be a factor. However, AI can learn the risk patterns and implement while creation of future audit plans.