Evidence requests, just called "requests" in ZenGRC, are created to provide evidence surrounding the effectiveness of controls. They are typically imported during the audit creation process and assigned to users who are to provide documents or links describing how the control assists with compliance.
Requests are key in the audit setup process and can be accessed directly from the Audits module, the System of Record, and the To-Do List.
This documentation highlights additional functionality that audit managers or administrators may need. For streamlined steps on how to finish your portion of an assignment, please see Quick Tips for Tasks and Requests.
Audit managers and those with additional permissions can access requests from the Audits module.
To view and respond to a request from the Audit summary page, complete the following steps:
Click the Requests tab.
Find the request and click the link in the Title column.
You can sort, add headings, and export data on this page in the same way as on a module's home page. For more information, please see System of Record List Views. |
To access requests, complete the following steps:
Those with limited permissions who are assigned requests only have access to them from their to-list.
For additional information, please see To-Do List. |
The workflow of evidence requests can be set up in many ways. To further your understanding, please see Workflow for Requests and Tasks.
After opening the request from the To-Do List and Audits, For streamlined steps on how to finish your portion of a request, please see Quick Tips for Tasks and Requests.
Requests are imported during audit creation, but they can still be added after an audit has been created and activated.
To create a single request from the Audit summary page, complete the following steps:
To import a spreadsheet of requests from the Audit summary page, complete the following steps:
The page refreshes for you to import requests or create them individually.
For additional instructions, please see Step 3: Setting up Audit Requests. |
After import and conducting any mapping necessary, click Save & Close in the lower, left corner to close the window and return to the Audits home page.
If a request needs to be reassigned to another audit, the best way to do this is by changing the Audit field on the Details tab, not through the Mapped Objects tab.
To assign a request to a different audit, complete the following steps:
You can narrow requests displayed by utilizing the filter functionality that separates statuses.
To filter requests by status, complete the following steps:
The evidence gathered and submitted in a request can be exported for external auditors or any other reviewers your organization may have. The export can be formatted as a CSV or as a zip file with attachments inside.
Requests, assessments and tasks can be set up to repeat on a monthly, quarterly, semi-annual, and annual basis.