Documenting Your Controls - Governance, Risk, and Compliance Topic for Oracle Applications - page 170

10. Click on Add Test .
11. The Test Instructions page is shown in the following screenshot with the
Basics , Comments , and Details tabs enabled:

Managing control documentation
lifecycle in GRC Manager
Control documentation must be reviewed periodically to evaluate the accuracy
and completeness of business processes, narratives, flowcharts, risks, controls, and
test plans. GRC Manager enables this review process through a data collection
workflow . The Data Collection workflow provides the ability to route the process
to specified users to update control documentation. Reviewers can also be added
to this workflow to examine and approve updates to control documentation. In
this section, we will describe the data collection workflow. There are additional
workflows that support the control documentation lifecycle, which will be described
in the subsequent chapters. A brief overview of these basic stages is as follows:

1. A GRC Manager Administrator or Business Processor Author creates

a business process, documenting assertions, risks, controls, test
instructions, attaching appropriate files, and assigning workflow
reviewers for the process.