Benefits
ZenGRC addresses hardships surrounding audits and enables compliance teams to efficiently manage and report the results. Utilizing the application for audits fulfills three main functions:
Visibility into audit progress: How close is the team to completing audit-related assignments?
- Clarity on audit issues: What's broken? How can it be fixed, and what's the status?
- Exposure of compliance posture: How effective are my controls?
TIP
For additional information regarding ZenGRC audit structure and process flow, see ZenGRC Diagrams.
Overview
The Audits module allows for the following activities:
- Evidence collection - Managing a Document Request List (DRL) is an extensive project management endeavor. ZenGRC allows you to import a DRL from your auditor, so you can collect, verify/decline evidence, and escalate the request if no action is taken.
- Testing and concluding on controls - Once evidence is submitted, it's straightforward to determine whether your controls are operating effectively.
- Issue management - Internal and external auditors often discover gaps, findings, and issues. ZenGRC allows you to set up workflows so you can remediate them and keep track of the process.