Working with Control assessments
Control assessments are used to evaluate the effectiveness of a control over time. A control assessment can optionally use an assessment method to standardize procedure steps and results fields.
You can create, view, and manage control assessments from the Control assessments menu or from the Control Assessments tab within an individual control.
How it works
You can:
-
Create control assessments to test controls
-
Optionally apply an assessment method to reuse standardized steps and results fields
-
Track assessment status and progress
-
Record procedures, attach evidence, and document results
Accessing Control assessments
-
From the Platform home page, open the Internal Controls app.
-
In the left navigation panel, select Control assessments.
The Control assessments page displays all control assessments in your organization.
Finding and organizing control assessments
Use the tools at the top of the page:
-
Search Search by control assessment ID or name
-
Filter Narrow results by available criteria
-
Columns Show or hide columns
Note: Filter options such as All, Closed, and Not closed are available within an individual control's Control Assessments tab to help you organize assessments for that control. They are not available on the main Control assessments list page.
Control assessments list
Each row represents a control assessment. Select a control assessment ID to open its details page.
| Field | Description |
|---|---|
| Control assessment ID | The unique identifier of the control assessment. |
| Assessment type | The type of assessment, such as control assessment, operational test, or design test. |
| Status | The current status of the assessment. |
| Date created | The date the assessment was created. |
| Date closed | The date the assessment was closed, if applicable. |
| Duration | How long the assessment has been open. |
| Assignee | The user responsible for completing the assessment. |
| Approver | The user responsible for approving results. |
| Source | Indicates how the assessment was created or initiated. |
Creating a control assessment
You can create a control assessment from either location:
-
Control assessments menu
-
Control Assessments tab within a control
To create a control assessment:
-
Open Control assessments.
-
Select Add control assessment.
-
Select a Control.
-
Optionally select an Assessment method to apply standardized procedure steps and results fields.
-
Select Create.
The control assessment opens in Draft status.
Working with an individual control assessment
When you open a control assessment, the page is organized into four tabs:
-
Details High-level information about the assessment, including control, assessment type, assignee, and approver.
-
Procedure Steps performed during the assessment and any linked evidence.
-
Results Predefined and custom fields for recording assessment outcomes.
-
Findings Documented issues, observations, and remediation actions. Use this tab to view and manage findings associated with the assessment.
Details
The Details tab displays high-level information about the assessment.
| Field | Description |
|---|---|
| Control | The control being assessed. |
| Assessment type | The type of assessment. |
| Assignee | User responsible for completing the assessment. |
| Approver | User responsible for approval. |
| Description |
Optional description of the assessment. |
Procedure
Use the Procedure tab to record the steps performed during the assessment.
If an assessment method is linked, its steps are copied into the Procedure tab. You can edit these steps or add additional ones. You can:
-
Add steps
-
Edit step title and description
-
Attach evidence to individual steps
-
Reorder steps
-
Remove steps
See Managing procedures for step behavior.
Results
Use the Results tab to record the outcome of the control assessment.
Results fields are defined by the linked assessment method. If no assessment method is used, predefined fields are still available. Typical fields include:
-
Result (Pass/Fail)
-
Observations
-
Attachments
-
Any custom fields configured in the assessment method
Updating control assessment status
Control assessments follow a simple lifecycle. Common statuses include:
-
Draft
-
Ready for testing
-
In progress
-
To be approved
-
Closed
To change status
-
Open the control assessment.
-
Select the Status button in the top-right corner.
-
Select the new Status.