Table of Contents |
---|
...
Info | ||
---|---|---|
| ||
This section describes actions conducted on the Audit summary page, which opens from the Audits visual display page. |
To view and evaluate a control assessment on the Audit summary page, complete the following steps:
...
Those with limited permissions who are assigned requests will only have access to them from their to-listassignments in the To-Do List.
Tip | ||
---|---|---|
| ||
For additional information, please see To-Do List. |
Evaluating Control Assessments
...
- If the Attachments area is not already displaying, select that sub tab.
- Review evidence on the Attachments sub tab.
- Click the Comments sub tab to review any additional information.
- To add a reason behind declining or verifying the assessment, click the Comments sub tab.Enter enter a comment in the Comments text box and click Send to post. This only saves the comment but does not impact the status of the assessment.
- After review, there are two selections in the upper, left corner:
- Conclusion: Design – Control language is appropriate and it satisfies the objective. Select one of the following:
- --- - No rating. The control has not been rated. The page defaults to this.
- Effective - The control's design works as intended.
- Ineffective - The control's design does not work as intended.
- N/A - Rating the design is not applicable or can't be done.
- Conclusion: Operational - Control is working effectively. If ineffective, create issue and report finding that you can work on. Select one of the following:
- --- - No rating. The control has not been rated. The page defaults to this.
- Effective - The control is operating as intended.
- Ineffective - The control is not operating as intended.
- N/A - Rating the operational effectiveness is not applicable.
- Conclusion: Design – Control language is appropriate and it satisfies the objective. Select one of the following:
- Click Verify Assessment. This is the selection even if the conclusion for the design and/or operation is deemed ineffective. This sets the status to Completed and shows that the control either is or is not effective.
- Alternatively, click Decline Assessment to set the status back to Open. This notes that the information is incomplete and sends it back to the assignee to provide additional evidence. It does not close or complete the assessment.
...
Narrow control assessments displayed on the Control Assessments tab within an audit by utilizing the filter functionality.
To filter the control assessment assessments, complete the following steps:
...
Tip | ||
---|---|---|
| ||
Additional information about the remaining assessment fields is part of a details view that is standard across all objects in ZenGRC. Please see Navigation for see Actions on the Details Page for more documentation. |
Exporting Control Assessments
...
Assessments Information in a control assessment can be exported for external auditors or any other reviewers your organization may have. The export can be formatted as a CSV or as a zip file with the attachments inside.
ADD NOTE TO SEE NAVIGATION section.
Info | ||
---|---|---|
| ||
For instructions on exporting control assessments, please see Exporting Assessments, Requests, Issues and Tasks |