Questions, answered

Click Get started, then use Proto to configure GRC for Healthcare and Hospitals for your business. Pilot one organization, business unit, assessment and selected control before expanding.

The owner sets its subject, period, organization, business unit and planned tests. Control tests and care reviews remain linked to that assessment.

A risk belongs to a business unit and named owner. Each control links to a risk and has its own code, effective date, status and owner.

Record the tested date, sample size, exception count, result and evidence reference against the selected control and assessment.

A failed or inconclusive test can become a finding with severity and a specific description. The finding retains the assessment and control links.

A separate retest reviewer records the result. Only a passing independent retest closes the finding and verifies the corrective action.

A reviewer decides the submitted revision with Approve, Reject or Return and records a substantive reason. The decision belongs to that care review.

Yes. A record attachment carries its title, file, evidence type, uploader and Internal or Shared visibility.

Operations Overview brings performed and failed tests, pending review decisions and failed operations into a filterable exception queue.

Start with organizations and people, then business units, risks and controls. Import the assessment and its linked activity after those references are stable.