Review a Requirement

After the Requirement Owner has reviewed a requirement or one has been updated, they return it to the Compliance Team, who will assess it for residual risk. As the Compliance Team, requirements that have been submitted for your review will appear either on the My Tasks page or the Assess Risk activity.

Assigned requirements on the My Tasks page.

To review a requirement:

1. Log into a user account from the Compliance Team user group to open the My Tasks page.

2. Click a requirement in the Compliance Team Review state to open the Compliance Team Review form.

   The Requirement Detail form.

3. Optional: Navigate to the Review Inherent Risk Assessment section to review the inherent risk. Clicking the Historical Trending will display a chart showing how the inherent risk score has changed over time.

4. In the Review Control Documentation section:

   1. Click the name of a control to open the Control Review palette. Add any additional details, as needed.

   2. Select the rating that best describes the control in the Control Effectiveness field.

      The Review Control Documentation section

5. In the Residual Risk Assessment section:

   1. Click the Residual Impact dropdown menu to select the impact of the risk after the controls have been put in place.

   2. Click the Residual Likelihood dropdown menu to select how likely the risk is to occur after the controls have been put in place.

      The Residual Risk tab of the Residual Risk Assessment section.

   3. Click the Historical Trending tab to view how the residual risk score has fluctuated over time.

      The Historical Trending tab of the Residual Risk Assessment section.

6. Optional: In the Document Issues section:

   1. Click the name of an issue to make any changes or to close the issue as needed.

   2. Begin typing keywords in the search bar to display a list of existing issues. Click on an appropriate issue to add it to the requirement.

   3. Click + to open the Create a New Issue pallette. Fill in the fields as required.

      The Create a new Issue palette.

7. In the Determine Level of Compliance section:

   1. Select the requirement's level of compliance in the Compliance Level select list.

   2. Enter any comments on the requirement's compliance level in the Comments on Level of Compliance field.

      The Determine Level of Compliance section.

8. Optional: Expand the Related Assessments section to view the assessments related to the risk. Clicking on an assessment will display its Requirement Review form.

   The Related Assessments section.

9. Add comments, as needed.

10. Click one of the following buttons:

    • Remediation Required: Send the requirement back to the Requirement Owner if further input is required.

    • Send to Monitoring: Transition the requirement to the Monitoring state.