These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- GRC for Healthcare and Hospitals
- Process
- Assessment to review
Assessment to review
Follow the assessment from scope to a reasoned review decision.
Step by step
-
Assessment planning Assessment Owner
Assessment Owner sets the organization, business unit, subject and period. A current revision and valid owner membership are checked before tests are created.
- Assessment Owner sets the organization, business unit, subject and period. A current revision and valid owner membership are checked before tests are created.
- Updates Assessments, Organizations, Business units, Team members
-
Test execution Assessment Owner
Assessment Owner works each linked control test, recording sample, exceptions, result and evidence. A Pass needs an evidence reference.
- The owner works each linked control test, recording sample, exceptions, result and evidence. A Pass needs an evidence reference.
- Updates Assessment tests, Controls, Assessments
-
Finding registration Assessment Owner
A Fail or Inconclusive test can produce an Open finding against the tested assessment and control.
- A Fail or Inconclusive test can produce an Open finding against the tested assessment and control.
- Updates Assessment tests, Findings
-
Corrective action Remediation Owner
Remediation Owner records an action, due date and evidence against the finding.
- The remediation owner records an action, due date and evidence against the finding.
- Updates Corrective actions, Findings
-
Independent retest Retest Reviewer
A different reviewer records the retest. Only a Pass may close the finding and verify the action.
- A different reviewer records the retest. Only a Pass may close the finding and verify the action.
- Updates Retests, Findings, Corrective actions
-
Reviewer decision Compliance Reviewer
Compliance Reviewer records Approve, Reject or Return, a reason and source revision for the submitted care review. The parent assessment outcome stays separate.
- An independent reviewer records Approve, Reject or Return, a reason and source revision for the submitted care review. The parent assessment outcome stays separate.
- Updates Care compliance reviews, Review decisions, Assessments
ApprovalA person approves before the work moves on.
Who does what
Roles and permissions- Assessment Owner
- , Remediation Owner, Retest Reviewer, Compliance Reviewer, Admin.
Set up GRC for Healthcare and Hospitals your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.