1. GRC for Healthcare and Hospitals
  2. Process
  3. Assessment to review
Process · Assessment to review

Assessment to review

Follow the assessment from scope to a reasoned review decision.

Step by step

  1. Assessment planning Assessment Owner

    Assessment Owner sets the organization, business unit, subject and period. A current revision and valid owner membership are checked before tests are created.

    • Assessment Owner sets the organization, business unit, subject and period. A current revision and valid owner membership are checked before tests are created.
    • Updates Assessments, Organizations, Business units, Team members
  2. Test execution Assessment Owner

    Assessment Owner works each linked control test, recording sample, exceptions, result and evidence. A Pass needs an evidence reference.

    • The owner works each linked control test, recording sample, exceptions, result and evidence. A Pass needs an evidence reference.
    • Updates Assessment tests, Controls, Assessments
  3. Finding registration Assessment Owner

    A Fail or Inconclusive test can produce an Open finding against the tested assessment and control.

    • A Fail or Inconclusive test can produce an Open finding against the tested assessment and control.
    • Updates Assessment tests, Findings
  4. Corrective action Remediation Owner

    Remediation Owner records an action, due date and evidence against the finding.

    • The remediation owner records an action, due date and evidence against the finding.
    • Updates Corrective actions, Findings
  5. Independent retest Retest Reviewer

    A different reviewer records the retest. Only a Pass may close the finding and verify the action.

    • A different reviewer records the retest. Only a Pass may close the finding and verify the action.
    • Updates Retests, Findings, Corrective actions
  6. Reviewer decision Compliance Reviewer

    Compliance Reviewer records Approve, Reject or Return, a reason and source revision for the submitted care review. The parent assessment outcome stays separate.

    • An independent reviewer records Approve, Reject or Return, a reason and source revision for the submitted care review. The parent assessment outcome stays separate.
    • Updates Care compliance reviews, Review decisions, Assessments
    ApprovalA person approves before the work moves on.
Assessment Owner
, Remediation Owner, Retest Reviewer, Compliance Reviewer, Admin.

Set up GRC for Healthcare and Hospitals your way.

Start free, then use Proto to change fields, steps and approvals before your team goes live.

How to get started