Abstract: Compliance auditing and management is provided by defining business or enterprise assets, comprising receiving, from the business or enterprise variables that meet business needs of the business or enterprise as a user. Users, locations and audit templates are added. Questions to be provided to the user are entered and compliance criteria used in answering the questions and associating the compliance criteria with the questions are added. Compliance activity information from the user is received and the compliance activity information from the user to the questions is applied. Compliance activity for the user to generate a database of deployed compliance activities is scheduled and the database of deployed compliance activities is used to conduct compliance activity. The database of deployed compliance activities or the conducted compliance activity is used to generate files and incidents. The database of deployed compliance activities is used to generate compliance activity reporting.