1. Professional Services GRC
  2. Features
  3. Assessments
Feature · Assessments

Assessments

Scope review periods and plan tests against a revision.

OverviewAssessments in Review
Professional Services GRC · Assessments

Assessments in Review

Assessments

New
Record numberSubjectOrganizationCounterpartyOwnerPeriod start
ASS-86786Review ass-545ORG-3606BU-334007 Oct
ASS-43514Review ass-849ORG-7798BU-264405 Oct
ASS-85653Review ass-592ORG-4708BU-718213 Oct
ASS-13114Review ass-279ORG-7489BU-992504 Oct
ASS-27262Review ass-837ORG-4908BU-193120 Oct
6 of 6 records
Review ass-545Assessments · ASS-86786
Review
OrganizationORG-3606
CounterpartyBU-3340
Period start07 Oct
Period end14 Oct
Revision530
Example screen with sample data

What you can do

Keep the work connected

Assessment Owner begins with a subject, organization, counterparty, period, scope statement, planned test count and revision. The assessment is the parent for control tests, findings, client control reviews, attachments, decisions and operation receipts. Its state follows the actual work from Draft through planning, testing, review, remediation and closure.

Assessment status shows where the engagement stands. Linked records explain the evidence behind that state. Operation receipts show whether a planning request completed, failed or needs review. The owner can use the recorded revision and operation key to distinguish a retry from a new plan.

How the work is organized

  • Ownership. The named person on a record is responsible for its next operational step.
  • Working state. The recorded state tells colleagues whether preparation, review or follow-up is due.
  • Evidence trail. Related records remain attached to the assessment or control that explains them.

What to agree during setup

Agree what belongs in a scope statement and who may change it after testing begins. A revision should identify the plan under review. Confirm that the owner is active and belongs to the selected organization. Choose the period of activity actually being examined. Closed should follow a review of tests and findings; a decision on a client review does not itself settle the parent assessment.

In the pilot, choose a real operating period and a small set of named people. Check their membership and duties before entering historical material. Review who may see Internal evidence and who makes the independent decision. Agree how corrections are explained so the next reviewer can follow the record without relying on a private conversation.

Check the handoff on an actual case

Assessment Owner scopes a quarter of project access review for a client unit. The plan names an active control and an expected test. Assessment Tester receives the linked test line and records the sample result. Now change the scope and rehearse a new revision: the owner should confirm that planned tests still cover the intended control. A repeated planning request should reuse the accepted operation rather than add another test line.

Have the receiving role open the record rather than relying on a summary sent outside the app. Check the selected organization, owner, dates and links to related work. If the case is returned, record a reason and leave the next action visible. This rehearsal should expose unclear authority before the team uses the same pattern across more engagements.

What your team sees

  • Assessments in Review — See assessments awaiting work at the Review state, with their owner and revision.
  • Assessment Schedule — Compare period start and end dates across open assessment work.

Follow the work through

Follow the related process and use roles to check the handoff between people.

What it keeps track of

Data model
Assessments
Scoped assessment engagements driven through a status lifecycle.
Assessment tests
Individual control tests executed under an assessment.
Organizations
Legal and operating organizations governed by this workspace.
Business units
Operating units and counterparties that assessments and risks attach to.
Team members
Named people who own, prepare and independently review work.
Operation receipts
Idempotent execution receipts for guarded operations on assessments.

Who uses it

Permissions
Assessment Owner
, Assessment Tester, Independent Reviewer, Admin

Set up Professional Services GRC your way.

Start free, then use Proto to change fields, steps and approvals before your team goes live.

How to get started