These cookies are required for the website to function properly. They ensure security, enable basic features like page navigation, and store user session data. You cannot disable these cookies.
- Professional Services GRC
- Features
- Assessments
Assessments
Scope review periods and plan tests against a revision.
OverviewAssessments in Review×
Professional Services GRC · Assessments
New
Assessments in Review
Assessments
| Record number | Subject | Organization | Counterparty | Owner | Period start | |
|---|---|---|---|---|---|---|
| ASS-86786 | Review ass-545 | ORG-3606 | BU-3340 | 07 Oct | ||
| ASS-43514 | Review ass-849 | ORG-7798 | BU-2644 | 05 Oct | ||
| ASS-85653 | Review ass-592 | ORG-4708 | BU-7182 | 13 Oct | ||
| ASS-13114 | Review ass-279 | ORG-7489 | BU-9925 | 04 Oct | ||
| ASS-27262 | Review ass-837 | ORG-4908 | BU-1931 | 20 Oct |
6 of 6 records
Review ass-545Assessments · ASS-86786
ReviewOrganizationORG-3606
CounterpartyBU-3340
Period start07 Oct
Period end14 Oct
Revision530
What you can do
Keep the work connected
Assessment Owner begins with a subject, organization, counterparty, period, scope statement, planned test count and revision. The assessment is the parent for control tests, findings, client control reviews, attachments, decisions and operation receipts. Its state follows the actual work from Draft through planning, testing, review, remediation and closure.
Assessment status shows where the engagement stands. Linked records explain the evidence behind that state. Operation receipts show whether a planning request completed, failed or needs review. The owner can use the recorded revision and operation key to distinguish a retry from a new plan.
How the work is organized
- Ownership. The named person on a record is responsible for its next operational step.
- Working state. The recorded state tells colleagues whether preparation, review or follow-up is due.
- Evidence trail. Related records remain attached to the assessment or control that explains them.
What to agree during setup
Agree what belongs in a scope statement and who may change it after testing begins. A revision should identify the plan under review. Confirm that the owner is active and belongs to the selected organization. Choose the period of activity actually being examined. Closed should follow a review of tests and findings; a decision on a client review does not itself settle the parent assessment.
In the pilot, choose a real operating period and a small set of named people. Check their membership and duties before entering historical material. Review who may see Internal evidence and who makes the independent decision. Agree how corrections are explained so the next reviewer can follow the record without relying on a private conversation.
Check the handoff on an actual case
Assessment Owner scopes a quarter of project access review for a client unit. The plan names an active control and an expected test. Assessment Tester receives the linked test line and records the sample result. Now change the scope and rehearse a new revision: the owner should confirm that planned tests still cover the intended control. A repeated planning request should reuse the accepted operation rather than add another test line.
Have the receiving role open the record rather than relying on a summary sent outside the app. Check the selected organization, owner, dates and links to related work. If the case is returned, record a reason and leave the next action visible. This rehearsal should expose unclear authority before the team uses the same pattern across more engagements.
What your team sees
- Assessments in Review — See assessments awaiting work at the Review state, with their owner and revision.
- Assessment Schedule — Compare period start and end dates across open assessment work.
Follow the work through
Follow the related process and use roles to check the handoff between people.
What it keeps track of
Data model- Assessments
- Scoped assessment engagements driven through a status lifecycle.
- Assessment tests
- Individual control tests executed under an assessment.
- Organizations
- Legal and operating organizations governed by this workspace.
- Business units
- Operating units and counterparties that assessments and risks attach to.
- Team members
- Named people who own, prepare and independently review work.
- Operation receipts
- Idempotent execution receipts for guarded operations on assessments.
Who uses it
Permissions- Assessment Owner
- , Assessment Tester, Independent Reviewer, Admin
Set up Professional Services GRC your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.