Create control analysis
This content was translated by artificial intelligence. To request a review, send an e-mail to documentacao_se@softexpert.com.
|
|
|
|
|
|
|
|
Prerequisites
- Access to the Control menu (RI410) .
- Previously registered context .
- Control previously registered.
- Business unit previously registered.
Presentation
Internal controls are the methods and procedures adopted by a company to safeguard its assets. Evaluating these controls aims to analyze the effectiveness of an organization's internal processes, identifying risks that could negatively impact pre-established business objectives related to information security.
In addition to creating an analysis from scratch, it is also possible to create a control analysis from an existing one. In this case, analyses whose review status is current, in progress, or both can be selected. When this option is used, some fields on the data screen are automatically filled with information from the chosen analysis.
This article will show you how to create a control analysis from scratch.
Create control analysis
Check out more details about the Advanced Options tab shown in the video:
Advanced options settings
Approval guidelines for control analysis assessment
This option will only be displayed if the "Allow risk and control assessment only in the design phase" option is not selected in the context , or if the assessment method associated with the type is not Matrix .
Select this option to have the plan control analyses go through approval. To do this, in the Responsible Routing field , select the desired responsible routing.
Revalidation
This field will only be available if the context has been configured with the revalidation option. The revalidation feature allows you to extend the validity of registered objects with an expiration date, ensuring that they remain active in the system even after the initial deadline has passed.
The fields Validity , Revalidation , and Expiry Date will be displayed .
For more details, see the article How revalidation works .
For more information about treatment for this risk, click here .
When creating the analysis, you can use Copilot , SoftExpert's artificial intelligence, to assist in preparing the observation. For more details, see the article Using AI in text creation and editing .
Check plan restrictions
The "Assess Control" option is used to analyze the selected risk or control in the framework and check for any restrictions, such as pending actions, risk assessments, or incomplete controls, that prevent progress in the plan review stages. This option can be used when the plan is under review.
Click on "Evaluate control" and, if there are any restrictions, they will be displayed. In that case, click on the restriction to open the corresponding data; the screen will then be displayed to make the necessary adjustments.
Conclusion
With the control analysis properly created, the next step is to evaluate it .