An audit tool doesn't have to be expensive and overly complicated.
Leave it to DeskGRC to deal with the complexity. Spend your precious time elsewhere.