Improvements

IT Risk Management

•  Added Due Date and Review Date fields to the IT Risk Assessment – 1 – Overview and IT Risk Assessment – 2 – First Line Overview forms and link them to the Home screen.
• The following elements were changed to improve form design:
  • Removed the Name property from all forms
  • Added the Open data visualization to the following forms:
    • Risk and Control Matrix
    • ITRM – IT Risk Owner’s Risk and Control Matrix
  • The button layout has been realigned on the following forms:
    • Control – IT Risk & Compliance – 1- Create & Library Consolidated Form
    • Control – IT Risk & Compliance – 3 – Assessment
    • IT Risk & IT Compliance – Issue - Consolidated Form
    • IT Risk – IT Risk Management – 1 – Create
    • IT Risk – IT Risk Management – 1a IT Risk Owner – New Risk Identification
    • IT Risk – IT Risk Management – 2 – IT Risk profiling
    • IT Risk – IT Risk Management – 3 – Library
    • IT Risk – IT Risk Management – 5 – Access Risk
  • Changed the Complete Risk Assessment trigger to blue on the IT Risk Assessment Risk Workflow for the IT Risk – IT Risk Management – 5 – Access Risk form.
• Changed the default issues form to the Issue – GRC – Overview form.
• Enhanced application views by updating Library views for Information Assets, Vulnerabilities, and Threat Activities to include active categories.

•  The Due Date and Review Data fields were added to the following reports:
  • ITRM – Risk Assessment Status Report
  • ITRM – Risk Team Overview of IT Risk Assessment

All Applications

• Application Data import files were updated to match the Risk Management Data Import file (unless otherwise stated), creating an integrated story across the GRC suite of applications.
• Created two new dashboard views to include all GRC application data, allowing users to view all GRC data in one place.
  • GRC Executive Dashboard
  • GRC Management Dashboard
• Applied changes to form design across all GRC applications to ensure that all forms follow a consistent standard, creating a better user experience. 
• Enabled View Latest Update on the following forms:
  • Requirement - CM - 1a - Library (New/Updated Requirement): Automatically enable the view latest updates toggle when opening this form
  • Requirement - CM - 2 - Risk Assessment
  • Requirement - CM - 1 - Library
  • Requirement Detail - Library
  • Requirement Detail - Library (New/Updated Requirement)
  • Requirement Detail - New/Updated Requirement
  • Control - GRC - 2 - Control Self-Assessment
  • Risk - RM - 5a - Assess Risk
  • Risk - RM - 5c - Assess Risk (Step by Step)
  • Internal Audit Project - 3 - Fieldwork, Reporting, Complete and Archive
  • Internal Audit Project - 2- Planning Memo
  • Process - IA - Process Overview
  • Risk - IA - Risk Overview
  • Control - IA - Testing Working Paper
  • Test - IA - Testing Working Paper
  • IC - Financial Statement Account Overview
  • IC - Financial Statement Sub Account Overview
  • Process - IC - 1 - Process Overview
  • Process - IC - 2 - Process Owner Overview
  • Sub Process - IC - Overview
  • Control - IC - 2a - Control Walkthrough and Testing
  • Request - IA & IC - 1 - Auditor
  • Policy - GRC - Overview - Policy Reviewer
  • Citation - IT Compliance - 3 - Internal Assessment
  • Control - IT Risk & Compliance - 3 - Assessment
  • Control - GRC - 1 - Library
  • Control - GRC - Report (Pallet)
  • Control - IA - Audit Client Overview
  • Control - IA - Document Requests (Pallet)
  • Control - IC - 2b - Document Requests (Pallet)
  • Control - IC - 3 - Control Owner Overview
  • Control - IC - 5 - External Auditor Overview
  • Control - IT Risk & Compliance - 2 - IT Control Owner Assignment
  • Issue - GRC - Overview
    • Corrective Action - GRC - Overview