Once an assessment has been scoped, members of the Compliance Team must review the assessment requirements. All requirements assigned to you and your team will be available in Compliance Management > Determine Applicability > Applicability Assessment.
To review requirements:
Log into a user account that's been added to the Compliance Team user group.
Click the dropdown bar in the nav bar > Compliance Management to display the Determine Applicability activity.
Click a requirement in the Applicability Assessment section to display it.
Review the requirement to determine if it's relevant to your line of business. The Requirement Name, Description, Sub Topic, and Source of Requirement fields may already be completed, depending on the content in your compliance framework.
Click + in the top right of the Review Requirement Details section to review the specific areas your organization must comply with.
Select either Applicable or Not Applicable in the Applicability Assessment field.
If you selected Applicable:
In the Requirement Owner and Requirement Delegate (if applicable) fields, start typing to display a list of available options, then select the appropriate user and/or user group.
Optional: Click View Requirement Profile to view this requirement's Requirement Profile report. This report summarizes all information about the requirement as well as its attached controls and issues.
Click Send for Risk Assessment. The Requirement Owner will be notified by email that a requirement has been assigned to them.
If you selected Not Applicable:
Enter your reasoning for marking this requirement Not Applicable in the Rationale for Not Applicable field.
Click Requirement Not Applicable. The Requirement will move to the Not Applicable workflow state and can be viewed in the Reports application. Only the Compliance Team can reassess a requirement once it's been deemed inapplicable.