对象库
对象库是 GRC 对象的共享资源库，您可在 审计、风险管理器 或 内部控制 应用程序中进行访问。它为控制措施、评估方法、流程、控制评估、审计发现项和操作等对象提供了一致的单一事实来源。
Object library in Audit
The Object library supports 审计 activities by making shared control and object metadata available directly in 审计. When you open a shared object from the library, 审计 preserves the navigation and workflow context. Object ownership remains with the source application, but 审计 users can still access and use the object's details. The Object library is designed to feel native to 审计, with direct links from audit scoping and object lists to shared object details.
For an overview of the objects and the workflow in managing these objects, see the workflow diagram and table below:
| Object | Description |
|---|---|
| Org unit | A structural business entity from Org Structure that Audit uses as a building block for auditable entities and audit-universe definition; auditable entities can be based on org units alone or org units combined with processes. |
| Processes | Shared process records used to define auditable entities and support control selection and audit scoping. |
| Controls | A control implemented by an organization to mitigate risks, ensure objectives are achieved, and maintain compliance with laws, regulations, and internal standards. |
| Control assessments | They represent the specific tests performed against controls. Control assessments initiated within an audit are known as control tests. |
| Assessment methods | The test methodology attached to a control assessment. Defines how a control’s design and operational effectiveness are evaluated and what validation rules or results apply during testing. |
关键功能
以下是对象库的关键特性：
浏览共享对象从共享对象库中查看控制措施、评估方法、流程、控制评估和审计发现项。
访问控制措施详细信息从审计范围界定或控制测试列表中选择控制措施名称，以打开相关的对象库项目。
使用共享关系无需离开关联应用程序，即可审阅各对象之间的关联关系（例如控制措施与评估方法）。
保持许可授权独立性您所选定的应用程序可以直接调用共享对象，而无需单独的授权许可或权限分配。
从审计范围界定查找控制措施如果尚不存在任何控制措施，可以使用控制库链接以从对象库中访问共享控制措施。
