This section will detail the procedure for associating objects in the (requirement or risk and control plan) audit scope through the association wizard. Access the corresponding audit type and check the steps on how to proceed:
1.
|
On the audit/template data screen, go to the Audit scope Requirement section and click on the option. At this point, the association wizard screen will be displayed.
|
2.
|
In the Reference requirement step, click on the "Associate" button to select the reference requirements (first level). On the selection screen, locate and select the desired requirements. After that, click on the "Next" button.
|
3.
|
The Requirements step will display the entire item structure of the previously selected reference requirements. If you wish to disassociate sub-requirements, uncheck the box next to each sub-item. Once done, click on the Finish button. Confirm the operation that will be requested by the system.
|
4.
|
In the Summary step, the system will display a summary of the number of objects to be audited in this template/audit. Click on one of the following options:
Close: The association wizard screen will be closed.
Go to the requirement structure: The requirement structure screen will be opened for viewing.
Go to configuration: The configurations to be applied to each reference item in the scope will be displayed. See further details in the Reference requirement configuration section.
|
1.
|
In the audit data screen toolbar, go to the Audit scope Scope section and click on the button. At this point, the association wizard screen will be displayed.
|
2.
|
On the Risk and control plan step, click on the "Associate risk and control plan" button. On the screen that will be displayed, locate and select the risk plans to be audited. After selecting the desired records, click on the button. Once done, the associated plans will be displayed in the structure of the association wizard. Click on the "Next" button to go to the next step.
|
3.
|
In the Configuration step, the different types of objects of the selected plans will be displayed. Fill out the following fields:
For the execution of the control test, customize the evaluation criteria: Allows customizing the audit evaluation criteria in the execution of the risk and control plan control test.
In the Audit evaluation criterion column, select the criterion to be applied to each object type in the audit. In the Default conformity level column, it is possible to enter the reference conformity level for that object type, if any.
Allow manually changing the conformity level of the upper items by replacing the automatic calculation: Allows the conformity level and its value to be manually edited during the audit execution. This option should be enabled when the automatic generation of the result is not configured in the conformity level of the evaluation criterion.
After that, click on the Next button.
|
4.
|
On the Audited object step, check the objects of the imported plans that will be audited. Once done, click on the Finish button. The system will ask if you want to apply the changes. Confirm the question by clicking on the OK option.
|
5.
|
In the Summary step, the system will display a summary of the objects that will go through audit. Then, click on the Go to the scope structure and audit tests button. At this point, the system will display the data screen of the risk and control plan audit scope. See further details on this screen in the Risk plan scope association wizard section.
|
|