| Table of Contents |
|---|
...
A control is an activity or technical configuration put in place to satisfy an requirement, which is called an objective in ZenGRC. Controls are the only objects that are tested in the Audits module, which are then "accessedassessed" in an assessment. Assessments are typically made after evidence over showing the effectiveness of a control in action has been submitted.
Overview
...
Assessments are made on the 1) Design and the 2) Operation of a control by selecting either “Effective” or “Ineffective”rate the effectiveness of a control in two ways: 1. Design; 2. Operation. Typically, controls receiving an “Ineffective” rating in either category need a corresponding issue created. The status of assessments are tracked in Audits.
...
| Info | ||
|---|---|---|
| ||
This section describes actions conducted on the Audit summary page, which opens from the Audits visual display page. |
To view and evaluate a control assessment on the Audit summary page, complete the following steps:
...
| Tip | ||
|---|---|---|
| ||
You can also create an issue from this dialog box if problems are found. Click Create Issue to map the issue to this assessment. Then follow the instructions in the Creating Issues section of this tutorial. |
Filtering Control Assessments
...
Narrow control assessments displayed on the Control Assessments tab within an audit by utilizing the filter functionality.
...