Documenting Your Controls - Governance, Risk, and Compliance Topic for Oracle Applications - page 168

Managing controls in Oracle GRC
Manager
Any user with permission to create or edit a business process can create a control.
If the control ownership is enabled and a user has permission, a control owner
can be assigned to a control. Controls can be created when a process is created, or
added later as risks are identified and controls for those risks are required. Once a
control has been documented, users can view the control and its values, description,
comments, and documentation history.
You can specify that a control can be related to a specific risk in the same business
process, using the Related Risks feature. Also, a control can be related to another
control through the Related Controls feature on a Control page. This enables you to
specify the type of relationship between controls (such as one control is a secondary
control to another control).
One or more controls should exist for each documented risk in a business process.
In order to create a control for a business process, carry out the following steps:
1. Verify that the business process is in one of the following states Initialized ,
Edit , or Collection .
2. Open the business process.
3. The Business Process page will be displayed.
4. Click on the Controls tab.
5. A list of controls for the business process will be displayed. If there are no
controls, the list will be empty.
6. Click on Add Control to open a new control document, as shown in the
following screenshot.
7. The BP Control page is displayed with the Basics and Description
tabs enabled.
8. Enter a title for the control.
9. Enter information in the fields.
Note that controls can also have file attachments
and references.