5 docs tagged with "control"

Create Risk, Risk Instance, Control, and Control Instance objects in the repository and record risk data points.

Document whether a control is present, appropriate, effective, provable, and optimizable, and review the assessments others have recorded.

Define a repository's control types, the control rating scale, and the key/non-key weighting percentages that feed residual risk — and download the repository's control assessments as a spreadsheet.

What Risk, Risk Instance, Control, and Control Instance objects are, how they relate to each other and to your processes, and what their settings mean.

Inspect how the controls linked to a risk remediate its values, adjust control ratings, and build repeatable risk reports for reviews and audits.