| Live Search | ||||
|---|---|---|---|---|
|
🔖 Glossary
👉 How do I create a Finding?
Findings are created directly from Control Assessments by Control Assessors. During the Control Assessment, when a control has been deemed ineffective, the Control Assessor will Create a finding which supports the subsequent Treatment Plan
Note: Treatment Plan workflow is available in future releases
To create a Finding record, within the Control Assessment flyout card, go to the bottom and choose the Create a finding button.
You are then directed to the Create a new finding card, where you must complete the required fields: Title, Description, Treatment Plan, and Due Date.
On the right side of the Create a new finding card, you will also see the related Audit record and the specific Control Assessment that is related to this newly created Finding.
| Info |
|---|
The Control Assessor is required to complete all of the fields before choosing Save |
Why should I create a Finding?
Findings address the observations that are identified by Control Assessors from a Control Assessment that has been deemed ineffective.
Findings should provide sufficient detail around the actionable next steps associated with the deficient (ineffective) control.
Provided below is an example of data typically input when creating a Finding. The example represents the actionable next steps to address an organization’s access control deficiencies:
| Expand | ||
|---|---|---|
| ||
Control Assessment for Logical Access Control to an organization’s HR Management System. Control deficiency (ineffective): a manual and inconsistent process is enforced when a change in Management Title or Pay occurs in the organization. There are several actions involved to remediate:
A deficiency in one control - logical access control to HR Process - results in creating 3 findings to move towards remediation. |
🔍 What am I Viewing?
You can create a finding from the Control assessment flyout card
Here, you are required to input the following fields: Title, Description, Treatment plan, and the Due date for this finding
Once the finding is created, it may be accessed from the Findings tab within the header bar from the Audit overview page
