Step 4: Generating Assessments

Overview

This step allows you to choose whether or not assessments will be generated as part of the audit. It also allows the selection of default assessors and verifiers on assessments, which are added to objects when the audit is activated.

Generating Assessments

To determine whether assessments will be created when the audit is activated, complete the following:

1. Select the Yes radio button under Would you like to perform control assessments?
2. Alternatively, select No to prevent their generation.

Assigning Default Assessors and Verifiers

Selections in this step add assessors and verifiers to the audit's assessments, which are automatically generated when the audit is activated.

1. Default assessors - These are the users conducting the testing and whose names are placed in the Assessor field of the assessments. 
   
   
   
   Depending on the selection, the Default assessors pulls information from the following fields and adds them to the Assessors field of the audit's assessments: 
   1. Selecting Control owner uses names in the Owner field of the control being assessed.
   2. Selecting Audit managers uses names added to the same field in the first step of audit setup, which is where the following screenshot is taken. If there is more than one name in this field, all are added to the Assessors field in the assessment.
      
      
      
      
   3. Selecting Primary Contact pulls from the Primary contact field of the control being assessed.
   4. Selecting Secondary Contact pulls from the Secondary contact field of the control being assessed.

2. Default verifiers - These are the users conducting the testing and whose names are placed in the Verifier field of the assessments.
    
   
   
   Depending on the selection, Default verifiers pulls information from the following fields in ZenGRC and adds them to the Verifiers field of the audit's assessments

   1. Selecting Audit managers uses names added to the same field in Step 1 of audit setup.
   2. Selecting Other leaves the Verifier field blank for all assessments generated.

   3. Selecting None leaves the Verifier field blank for all assessments generated. 

3. Click Next to complete the step.
   
   

   NOTE

   Continue to the next section - Step 5: Reviewing and Starting the Audit.