GRC Audit Compliance

Features

Industries

Reference

More

Start now
  1. GRC Audit Compliance
  2. Roles and permissions
Reference

Who can do what in GRC Audit Compliance

Give each participant access to the records and decisions they own.

Who can do what

Permissions by role
RoleAssessment planningRisks and controlsControl testingFindings and remediationIndependent reviewEvidence and operations
AdminEditEditView—ViewView
Assessment OwnerEditViewEdit—EditEdit
Control OwnerViewEditEdit—ViewEdit
Control TesterViewViewEditEditViewView
Remediation Owner———Edit——
Independent ReviewerApprove—ApproveEditApproveApprove

Each role in detail

Admin

Configures organizational scope, users and access for the assurance program.

Can

  • Manage Organizations, program organizations, business units, units counterparties, team members, control test staff, Users
  • View Assessments, assurance assessments, operation receipts, idempotency receipts

Assessment Owner

Plans the assessment, maintains its scope and coordinates testing.

Can

  • Manage Assessments, assurance assessments
  • View Risks, risk scale register, Controls, scored risk controls, assessment tests, evidence based test lines

Starts on: Submitted Reviews

Control Owner

Maintains assigned controls and supplies the evidence needed for testing.

Can

  • Manage Controls, scored risk controls, record attachments, evidence uploads
  • View Risks, risk scale register, Assessments, assurance assessments

Starts on: Controls in Force

Control Tester

Records samples, exceptions and results against scoped controls.

Can

  • Manage assessment tests, evidence based test lines, Findings, control test findings
  • View Assessments, assurance assessments, Controls, scored risk controls

Starts on: Open Findings

Remediation Owner

Works assigned findings through corrective action and evidence submission.

Can

  • Manage corrective actions, remediation tracking
  • View Findings, control test findings, Retests, corrective action retests

Starts on: Open Findings

Independent Reviewer

Reviews assessment revisions and independently retests corrected findings.

Can

  • Manage review decisions, source revision decisions, assurance reviews, review revisions, Retests, corrective action retests
  • View Findings, control test findings, corrective actions, remediation tracking

Reviews and approves

  • Approve Assessments, assurance assessments

Starts on: Submitted Reviews

Set up GRC Audit Compliance your way.

Start free, then use Proto to change fields, steps and approvals before your team goes live.

Start now Download Proto

How to get started