1. GRC Audit Compliance
  2. Process
  3. Assessment preparation
Process · Assessment preparation

Assessment preparation

Define a period, business unit and control scope before testing.

Step by step

  1. Name the scope Assessment Owner

    Assessment Owner chooses the organization, business unit, period, subject and owner.

    • Create a scoped draft
    • Updates Assessments, Business units, Program organizations
  2. Score the risks Control Owner

    Control Owner checks likelihood, impact and scale version for the risks in scope.

    • Confirm risk and control references
    • Updates Risk scale register, Controls
  3. Confirm ownership Control Owner

    Control Owner checks the effective date and named control owner before work begins.

    • Keep the control attributable
    • Updates Controls, Control test staff
  4. Plan the work Assessment Owner

    Assessment Owner records planned tests and moves the case into planned work.

    • Status: Draft to Planned
    • Updates Assessments
Assessment Owner
, Control Owner.
The person named at each stage owns that action; Admin manages access and checks uncertain operation outcomes where needed.

Set up GRC Audit Compliance your way.

Start free, then use Proto to change fields, steps and approvals before your team goes live.

How to get started