These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- GRC for Healthcare and Hospitals
- Process
- Test to finding
Test to finding
Explain a failed or inconclusive control test through a linked finding.
Step by step
-
Test execution Assessment Owner
Assessment Owner records sample size, exception count, result and evidence reference on the test line.
- Assessment Owner records sample size, exception count, result and evidence reference on the test line.
- Updates Assessment tests, Assessments
-
Finding registration Assessment Owner
Assessment Owner uses a Fail or Inconclusive result to register a specific Open finding.
- A Fail or Inconclusive result is the source for a specific Open finding.
- Updates Assessment tests, Findings, Controls
-
Corrective action Remediation Owner
Remediation Owner assigns a due-dated action with evidence to that finding.
- Remediation Owner assigns a due-dated action with evidence to that finding.
- Updates Corrective actions, Findings
-
Independent retest Retest Reviewer
Retest Reviewer records a separate result and evidence; Pass alone closes the finding.
- Retest Reviewer records a separate result and evidence; Pass alone closes the finding.
- Updates Retests, Findings, Corrective actions
Who does what
Roles and permissions- Assessment Owner
- , Remediation Owner, Retest Reviewer, Admin.
Set up GRC for Healthcare and Hospitals your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.