Consider going with the Sheshonoff Bank Internal Control Manual. It's got worksheets covering each area and comes with a CD-ROM. I also was looking for a "matrix," but there is no matrix on this subject. It's either too complex or has way too many tasks to actually put it in matrix form, so specific audit worksheets covering each operating area is the "matrix" when it comes to internal control. FDICIA documentation is centered on compliance, versus internal control, issues. But that documentation is also not in a true matrix form - it's just a series of workpapers.