These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- GRC Audit Compliance
- Process
- Assessment preparation
Assessment preparation
Define a period, business unit and control scope before testing.
Step by step
-
Name the scope Assessment Owner
Assessment Owner chooses the organization, business unit, period, subject and owner.
- Create a scoped draft
- Updates Assessments, Business units, Program organizations
-
Score the risks Control Owner
Control Owner checks likelihood, impact and scale version for the risks in scope.
- Confirm risk and control references
- Updates Risk scale register, Controls
-
Confirm ownership Control Owner
Control Owner checks the effective date and named control owner before work begins.
- Keep the control attributable
- Updates Controls, Control test staff
-
Plan the work Assessment Owner
Assessment Owner records planned tests and moves the case into planned work.
- Status: Draft to Planned
- Updates Assessments
Who does what
Roles and permissions- Assessment Owner
- , Control Owner.
- The person named at each stage owns that action; Admin manages access and checks uncertain operation outcomes where needed.
Set up GRC Audit Compliance your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.