1. GRC for Healthcare and Hospitals
  2. Process
  3. Risk to control selection
Process · Risk to control selection

Risk to control selection

Connect business-unit exposure to a testable control.

Step by step

  1. Risk scope Assessment Owner

    Assessment Owner identifies the business unit and the relevant risk owner.

    • Assessment Owner identifies the business unit and the relevant risk owner.
    • Updates Risks, Business units, Team members
  2. Control selection Control Owner

    Control Owner confirms the control code, description, effective date and status for that risk.

    • Control Owner confirms the control code, description, effective date and status for that risk.
    • Updates Controls, Risks
  3. Assessment planning Assessment Owner

    Assessment Owner includes the selected control in a dated assessment plan.

    • Assessment Owner includes the selected control in a dated assessment plan.
    • Updates Assessments, Assessment tests, Controls
  4. Test execution Assessment Owner

    Assessment Owner records what was sampled and what the test showed.

    • The test line records what was sampled and what the result showed.
    • Updates Assessment tests, Assessments
Assessment Owner
, Control Owner, Admin.

Set up GRC for Healthcare and Hospitals your way.

Start free, then use Proto to change fields, steps and approvals before your team goes live.

How to get started