Improvements

IT Compliance Management

• The IT Compliance Management application was standardized to remove inconsistent activities and views and report structure.
  • Configuration Details:
    • Removed role IT Compliance Team and ITCM - IT Compliance Administrator from Executive dashboard activity.
    • Removed role IT Compliance Team and ITCM - IT Compliance Administrator from IT Compliance activity on reports.
  • Created Activity "Reports" and added views and gave permission to IT Compliance Team and ITCM - IT Compliance Administrator:
    • Executive Dashboard
    • Corporate IT Compliance Assessment Overview
    • Framework Coverage Report
    • Authority Document Gap Summary Report
    • Authority Document based Citation Status Report
    • Authority Document based Citation Assessment Summary
    • Authority Document based Issue Overview
    • Authority Document Issue Trending Report
    • Authority Document Progress Trending and Issue Summary Overview
    • Authority Document Final Report
    • IT Compliance Assessment Progress Overview
    • IT Compliance Assessment Issue Overview
    • User Assignment Reports
  • Control - IT Risk & Compliance - 3 – Assessment:
    • Enabled Advance Search on risk and citations
  • IT Compliance Assessment - IT Compliance - 1 – Overview
    • Enabled Advance Search for Authority Document

All Applications

• Application Data import files were updated to match the Risk Management Data Import file (unless otherwise stated), creating an integrated story across the GRC suite of applications.
• Created two new dashboard views to include all GRC application data, allowing users to view all GRC data in one place.
  • GRC Executive Dashboard
  • GRC Management Dashboard
• Applied changes to form design across all GRC applications to ensure that all forms follow a consistent standard, creating a better user experience. 
• Enabled View Latest Update on the following forms:
  • Requirement - CM - 1a - Library (New/Updated Requirement): Automatically enable the view latest updates toggle when opening this form
  • Requirement - CM - 2 - Risk Assessment
  • Requirement - CM - 1 - Library
  • Requirement Detail - Library
  • Requirement Detail - Library (New/Updated Requirement)
  • Requirement Detail - New/Updated Requirement
  • Control - GRC - 2 - Control Self-Assessment
  • Risk - RM - 5a - Assess Risk
  • Risk - RM - 5c - Assess Risk (Step by Step)
  • Internal Audit Project - 3 - Fieldwork, Reporting, Complete and Archive
  • Internal Audit Project - 2- Planning Memo
  • Process - IA - Process Overview
  • Risk - IA - Risk Overview
  • Control - IA - Testing Working Paper
  • Test - IA - Testing Working Paper
  • IC - Financial Statement Account Overview
  • IC - Financial Statement Sub Account Overview
  • Process - IC - 1 - Process Overview
  • Process - IC - 2 - Process Owner Overview
  • Sub Process - IC - Overview
  • Control - IC - 2a - Control Walkthrough and Testing
  • Request - IA & IC - 1 - Auditor
  • Policy - GRC - Overview - Policy Reviewer
  • Citation - IT Compliance - 3 - Internal Assessment
  • Control - IT Risk & Compliance - 3 - Assessment
  • Control - GRC - 1 - Library
  • Control - GRC - Report (Pallet)
  • Control - IA - Audit Client Overview
  • Control - IA - Document Requests (Pallet)
  • Control - IC - 2b - Document Requests (Pallet)
  • Control - IC - 3 - Control Owner Overview
  • Control - IC - 5 - External Auditor Overview
  • Control - IT Risk & Compliance - 2 - IT Control Owner Assignment
  • Issue - GRC - Overview
    • Corrective Action - GRC - Overview