1. Professional Services GRC
  2. Implementation
Reference

How a Professional Services GRC rollout works

Start with one scoped assessment and rehearse each decision.

  1. Set the organization

    Enter organizations, business units and team membership, then confirm user access.

  2. Define coverage

    Record risks, owned controls, scale versions and effective dates.

  3. Run a pilot assessment

    Set the period, scope and planned tests; record samples and evidence.

  4. Work an exception

    Raise a finding, assign a corrective action and ask an independent reviewer to retest.

  5. Review the client scope

    Submit a client control review and record a reasoned decision against its revision.

What the customer provides

Bring the organization and unit list, named owners and reviewers, current control descriptions, a sample assessment period, the evidence naming convention and the client requirements to be reviewed. Decide which attachments may be Shared.

Changing it afterwards

When scope or ownership changes, review affected assessments and their revisions before continuing. Keep earlier decisions and retests linked to the records they judged. Rehearse the updated handoff with a real sample before extending it to other teams.

Set up Professional Services GRC your way.

Start free, then use Proto to change fields, steps and approvals before your team goes live.

How to get started